Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38302e302f32332d3233203d3e203338373533.roa
File:                     3131392e3131302e38302e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier:          +JMH80bsLIkCS5v6dDtyjKwltx2AvocnKHMKTZid7A0=
Subject key identifier:   3C:55:D7:04:EA:90:48:56:E0:61:7D:25:40:2F:AC:A8:BB:4B:61:85
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       21CDB8F9D7AD698FE77526C6E24192F28D41AF7F
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38302e302f32332d3233203d3e203338373533.roa
Signing time:             Sun 03 May 2026 02:55:24 +0000
ROA not before:           Sun 03 May 2026 02:50:24 +0000
ROA not after:            Sun 02 May 2027 02:55:24 +0000
asID:                     38753
IP address blocks:        119.110.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cd:b8:f9:d7:ad:69:8f:e7:75:26:c6:e2:41:92:f2:8d:41:af:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: May  3 02:50:24 2026 GMT
            Not After : May  2 02:55:24 2027 GMT
        Subject: CN=3C55D704EA904856E0617D25402FACA8BB4B6185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:c5:69:dc:f3:71:13:13:9f:75:dd:36:f0:
                    af:b6:64:9f:b1:c8:fe:16:79:2f:94:ff:d5:15:7d:
                    0b:46:7a:1c:ea:62:58:d2:d9:27:f3:b5:97:2b:07:
                    a6:70:53:fb:77:02:e3:7f:5a:19:0e:d4:9e:d9:53:
                    a4:cc:be:11:f0:72:01:06:12:3c:97:83:4d:db:b6:
                    ac:56:cb:f8:a5:1f:60:54:f4:14:6d:79:40:2c:c7:
                    53:68:3d:cf:d4:a7:af:e8:3c:9a:fd:92:2a:0a:79:
                    09:bb:76:4d:39:28:84:af:46:f7:52:df:82:b8:84:
                    40:81:f9:5a:bc:c8:4a:f3:a4:6a:8a:9b:fe:66:b6:
                    85:05:66:10:06:4b:10:c9:7a:1d:9b:4a:1a:62:54:
                    6b:8e:52:ab:38:15:8d:18:ca:0d:03:f4:61:0c:c9:
                    88:bf:52:22:bd:33:55:0d:9c:d0:7d:0a:03:6f:46:
                    6e:13:6a:26:df:ef:c7:f4:b1:96:87:48:8c:87:a5:
                    41:1d:ae:45:2b:ba:a6:1c:97:89:ef:e7:57:09:84:
                    5e:2e:0f:3c:a8:f9:f2:51:9f:0e:ad:fe:50:e9:13:
                    ed:99:61:50:46:ee:33:b7:dd:14:f5:e2:3c:08:6e:
                    e4:11:74:71:17:25:9d:83:65:d0:cc:18:a8:50:1b:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:55:D7:04:EA:90:48:56:E0:61:7D:25:40:2F:AC:A8:BB:4B:61:85
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38302e302f32332d3233203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e6:6e:2f:dc:48:0c:78:16:c9:a7:46:2c:e5:6b:c0:0b:aa:3d:
         7d:66:14:3e:1a:f5:5c:9b:b0:be:38:a0:21:b6:28:e2:05:1b:
         0e:76:c5:00:74:f6:f9:cb:a5:94:7b:88:50:ce:9a:d9:7c:0d:
         86:4b:e2:a0:44:e9:7f:cd:fb:ab:f6:a5:df:40:54:a3:9d:21:
         49:b9:9b:84:bb:e2:6e:97:cb:54:33:21:51:28:7a:6a:9b:c2:
         84:cc:8f:6c:ce:88:3e:c4:87:c3:6f:3d:9b:36:1f:db:53:0d:
         87:f1:ae:ec:f3:1b:80:9e:b0:fb:73:1d:3b:ce:7b:97:63:8c:
         66:f8:06:64:4d:9f:12:fc:3e:ea:a6:5e:62:d2:2d:db:11:25:
         c1:12:a4:ce:27:00:4c:55:f8:98:32:98:e8:90:ee:95:86:5c:
         d6:ca:09:27:b6:a4:a7:c2:bf:dd:6e:18:fb:79:cf:29:00:c8:
         ab:aa:ea:37:b4:47:ec:9c:fa:39:8f:64:7b:49:c9:ff:f2:a0:
         f0:61:d7:47:4c:70:27:c8:25:8d:9a:89:1a:45:18:45:fb:3f:
         77:d8:9b:a2:81:75:db:13:f7:0b:25:ea:55:9d:36:a3:6a:09:
         0b:26:19:51:41:ff:6d:6a:cb:56:ad:6d:f6:4b:52:3a:eb:b4:
         a7:e5:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:05 2026 by rpki-client