Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa
File:                     3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (raw, json)
Hash identifier:          HunPJtEqs/fqqsfQUOtU9B9wzUHewY8exb3L7KPploo=
Subject key identifier:   E5:C0:CA:76:1B:AF:2C:8D:C5:06:84:6D:EF:A0:40:38:6B:E7:55:AB
Certificate issuer:       /CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
Certificate serial:       073A54C4E079029884F922AB814408768FCD2ED0
Authority key identifier: 19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa
Signing time:             Sun 03 May 2026 02:53:26 +0000
ROA not before:           Sun 03 May 2026 02:48:26 +0000
ROA not after:            Sun 02 May 2027 02:53:26 +0000
asID:                     45287
IP address blocks:        111.68.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl
                          rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3a:54:c4:e0:79:02:98:84:f9:22:ab:81:44:08:76:8f:cd:2e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
        Validity
            Not Before: May  3 02:48:26 2026 GMT
            Not After : May  2 02:53:26 2027 GMT
        Subject: CN=E5C0CA761BAF2C8DC506846DEFA040386BE755AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:f3:3c:09:5e:2f:ed:8c:89:4f:f8:3f:07:
                    c2:d1:37:f3:60:13:b8:01:58:29:13:da:55:56:b5:
                    48:e9:d6:3d:ba:b3:0b:87:ff:3d:84:f8:7b:99:fa:
                    7b:3e:ae:57:10:08:46:4a:a6:a6:82:c2:39:c4:c4:
                    00:5a:a4:c2:ab:58:75:f6:1c:40:6a:52:e0:85:7c:
                    69:d8:06:1d:8f:b0:37:13:96:a3:0f:80:5d:3c:6c:
                    2a:97:4e:57:be:a5:aa:09:59:7d:dc:cf:f7:38:42:
                    1c:c5:da:94:0a:63:a6:b9:38:67:01:70:06:8d:15:
                    a7:7c:68:22:af:1b:bd:cd:21:51:38:9a:bb:02:42:
                    56:fe:e9:29:61:1d:a8:c0:8d:78:c6:a4:d3:68:dc:
                    fa:58:91:f9:46:d1:bf:83:ef:54:25:0b:69:11:4e:
                    93:aa:bb:a9:32:29:5d:82:92:ab:17:c7:58:05:52:
                    65:8a:bb:40:30:a5:ce:ed:da:39:f8:ce:6f:4c:13:
                    dd:0d:74:d2:5c:4c:0d:7a:22:8e:01:a3:e2:43:fc:
                    30:f5:8a:f3:59:7c:17:49:58:4b:db:4f:15:29:dd:
                    19:94:ca:7a:ca:ca:d6:ce:98:43:26:ff:35:7a:2a:
                    8b:13:43:cd:65:38:f4:af:aa:85:16:58:5a:63:c8:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C0:CA:76:1B:AF:2C:8D:C5:06:84:6D:EF:A0:40:38:6B:E7:55:AB
            X509v3 Authority Key Identifier:
                keyid:19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:23:c9:8c:66:c0:6d:3b:0e:9e:86:1a:a0:9b:b2:76:44:
         22:68:fe:e8:00:48:86:a7:12:0e:6b:c7:c2:27:4e:1b:81:54:
         ad:dc:5c:88:05:97:a5:cb:99:67:b4:1a:fd:fc:4d:a6:3d:a8:
         63:7a:0f:55:f0:ff:6d:a4:af:3f:28:16:e3:62:b0:9c:be:58:
         9e:3c:41:85:09:72:b2:5c:ad:bb:d8:f4:ee:ee:cc:3b:e9:75:
         39:75:7f:dc:e6:f2:55:7c:11:e2:e5:15:d5:77:fd:2b:f6:1f:
         fa:ca:26:fa:46:b1:40:b2:d2:2e:3c:8f:b2:3e:01:c3:8a:7b:
         94:ff:fb:0a:04:14:51:00:76:de:51:d6:aa:c1:c6:30:94:4a:
         e1:07:19:46:9e:2e:1d:dc:e4:d7:b2:78:c7:6c:48:49:60:30:
         5c:c7:1c:d8:35:5c:15:21:7e:c7:76:50:6b:ec:ae:09:b4:ac:
         5e:36:40:d0:f4:1c:b4:52:28:44:53:02:93:7f:d9:73:fe:6c:
         a3:e3:01:f4:b0:55:6c:f6:65:1f:48:2a:d7:82:a8:fc:7d:cb:
         bd:9b:03:ad:3f:95:62:4e:4e:60:81:e2:07:7d:40:9a:c7:b8:
         3a:81:57:85:fb:15:16:bd:88:27:2f:60:81:40:5d:a1:c9:72:
         4e:64:c4:71
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBzpUxOB5ApiE+SKrgUQIdo/NLtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlGNTkzRkI2MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VF
NkJEN0Y2MzAeFw0yNjA1MDMwMjQ4MjZaFw0yNzA1MDIwMjUzMjZaMDMxMTAvBgNV
BAMTKEU1QzBDQTc2MUJBRjJDOERDNTA2ODQ2REVGQTA0MDM4NkJFNzU1QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrvM8CV4v7YyJT/g/B8LRN/Ng
E7gBWCkT2lVWtUjp1j26swuH/z2E+HuZ+ns+rlcQCEZKpqaCwjnExABapMKrWHX2
HEBqUuCFfGnYBh2PsDcTlqMPgF08bCqXTle+paoJWX3cz/c4QhzF2pQKY6a5OGcB
cAaNFad8aCKvG73NIVE4mrsCQlb+6SlhHajAjXjGpNNo3PpYkflG0b+D71QlC2kR
TpOqu6kyKV2CkqsXx1gFUmWKu0Awpc7t2jn4zm9ME90NdNJcTA16Io4Bo+JD/DD1
ivNZfBdJWEvbTxUp3RmUynrKytbOmEMm/zV6KosTQ81lOPSvqoUWWFpjyLsbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5cDKdhuvLI3FBoRt76BAOGvnVaswHwYDVR0j
BBgwFoAUGfWT+2CUpT0vVn+iPr0Azua9f2MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTgyNDlmYzMtNmM4NC00ZTkxLWIwNjctYTBjNmE4NDBhM2E5LzAvMTlGNTkzRkI2
MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VFNkJEN0Y2My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xOUY1OTNGQjYwOTRBNTNEMkY1NjdGQTIzRUJEMDBDRUU2QkQ3
RjYzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i
MDY3LWEwYzZhODQwYTNhOS8wLzMxMzEzMTJlMzYzODJlMzEzMTMyMmUzMDJmMzIz
MDJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBG9EcDANBgkqhkiG
9w0BAQsFAAOCAQEAYuojyYxmwG07Dp6GGqCbsnZEImj+6ABIhqcSDmvHwidOG4FU
rdxciAWXpcuZZ7Qa/fxNpj2oY3oPVfD/baSvPygW42KwnL5YnjxBhQlyslytu9j0
7u7MO+l1OXV/3ObyVXwR4uUV1Xf9K/Yf+som+kaxQLLSLjyPsj4Bw4p7lP/7CgQU
UQB23lHWqsHGMJRK4QcZRp4uHdzk17J4x2xISWAwXMcc2DVcFSF+x3ZQa+yuCbSs
XjZA0PQctFIoRFMCk3/Zc/5so+MB9LBVbPZlH0gq14Ko/H3LvZsDrT+VYk5OYIHi
B31Amse4OoFXhfsVFr2IJy9ggUBdoclyTmTEcQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:52 2026 by rpki-client