Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38312e302f32342d3234203d3e203338373533.roa
File:                     3131392e3131302e38312e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          P5gsR9Ip6eN3JpS9Gh6vSjhBTUMLL/b9godXTE25dwM=
Subject key identifier:   69:45:AC:2F:8A:D1:07:37:72:FD:A7:B2:3D:6E:92:B7:D8:BE:18:19
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       6D092F2E51F56EFD643521A54ACB92D8A76FB37B
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38312e302f32342d3234203d3e203338373533.roa
Signing time:             Sun 03 May 2026 02:55:30 +0000
ROA not before:           Sun 03 May 2026 02:50:30 +0000
ROA not after:            Sun 02 May 2027 02:55:30 +0000
asID:                     38753
IP address blocks:        119.110.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:09:2f:2e:51:f5:6e:fd:64:35:21:a5:4a:cb:92:d8:a7:6f:b3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: May  3 02:50:30 2026 GMT
            Not After : May  2 02:55:30 2027 GMT
        Subject: CN=6945AC2F8AD1073772FDA7B23D6E92B7D8BE1819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:f0:1e:ff:76:e4:ac:d6:19:ac:a7:9a:5f:
                    80:fc:b7:c5:89:f0:84:fc:25:a1:31:7c:b6:9b:dd:
                    bc:e6:b3:e7:62:45:e6:61:82:12:df:7b:37:27:d0:
                    85:87:96:af:63:4d:72:c6:4a:e0:2c:2d:5c:ad:62:
                    2e:1b:0e:21:dc:d9:25:f6:9a:66:9f:f8:ef:0e:fb:
                    c7:36:d8:c9:16:65:08:3d:03:ee:cb:4e:7a:c7:ce:
                    bd:a5:47:b4:d8:90:99:fd:83:1f:76:96:5a:44:b1:
                    44:e8:6c:b1:2e:b8:b5:e9:08:d0:9a:4f:c1:92:cf:
                    10:8b:66:85:b5:a2:21:9d:31:57:c7:55:fe:df:90:
                    90:67:61:e4:76:a1:b4:7e:23:22:2a:9e:14:8f:07:
                    3e:1f:45:80:f0:8d:8f:0c:5a:49:45:bf:ff:4b:56:
                    ef:c1:b1:59:af:97:ac:a4:01:c5:03:56:84:bb:53:
                    9d:c1:3d:26:42:9c:fe:58:29:5a:80:3b:0c:b0:e7:
                    4f:31:32:80:33:da:d8:cf:71:0c:9b:6a:a3:40:c0:
                    10:d6:bd:8c:b7:a0:c6:be:70:6f:43:e6:4a:a2:c0:
                    db:fd:e9:bf:bd:39:04:63:d9:7d:56:c0:14:9a:47:
                    08:1a:9c:0a:c7:f2:4a:9c:83:b6:a1:8c:df:47:db:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:45:AC:2F:8A:D1:07:37:72:FD:A7:B2:3D:6E:92:B7:D8:BE:18:19
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38312e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d5:80:43:6e:82:7b:10:1a:64:bc:80:51:40:c9:1f:46:bb:
         b5:f1:61:4f:ef:d0:8a:74:ae:88:d4:60:de:2d:67:a5:75:2a:
         b4:e2:04:63:7e:e8:5b:18:ff:04:af:c6:8d:38:2e:c6:f7:c5:
         63:36:15:9b:ae:25:6a:f1:e4:f5:c6:41:d4:82:d9:a0:13:c4:
         fd:66:97:00:f2:99:85:7a:af:57:e0:af:b2:ae:e7:e5:f9:24:
         05:b1:9d:fa:5d:fd:d0:8c:75:43:34:61:e3:ea:66:e9:e3:38:
         0f:96:30:e3:be:a3:b7:13:6a:5b:14:8c:2a:ad:72:4a:4e:05:
         91:2f:73:dc:a7:bd:3d:21:85:f8:21:62:4f:cf:28:33:04:5a:
         83:ec:0b:ff:9b:be:cd:b4:05:92:4c:22:9f:8c:dc:1e:15:cf:
         b8:4b:97:e3:12:f1:1b:fc:79:90:2e:75:a9:1d:56:63:63:97:
         9f:a3:27:e0:22:3b:76:b9:d1:4b:60:e8:ae:a5:bf:82:41:12:
         24:5f:64:7a:b4:64:f3:12:f3:dd:5b:65:7b:12:76:a7:8f:a6:
         5d:ca:04:d7:34:ab:81:05:d7:ef:31:ab:eb:06:c7:c4:c2:7c:
         03:c7:4b:21:27:34:17:cd:67:39:26:72:78:b2:ee:77:af:32:
         c5:c6:2d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:28:45 2026 by rpki-client