Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38332e302f32342d3234203d3e203338373533.roa
File:                     3131392e3131302e38332e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          GZ7Uu5Cd3gy1df3D7E/NxnBWJ42fVnNtK0T5SRhmyoc=
Subject key identifier:   A5:1F:00:3E:D1:EF:90:1B:34:EF:38:C2:54:22:CA:CD:7C:63:77:6B
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       4D2D99206378081C05408CE24A603FE5E086BF80
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38332e302f32342d3234203d3e203338373533.roa
Signing time:             Sun 03 May 2026 02:55:27 +0000
ROA not before:           Sun 03 May 2026 02:50:27 +0000
ROA not after:            Sun 02 May 2027 02:55:27 +0000
asID:                     38753
IP address blocks:        119.110.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2d:99:20:63:78:08:1c:05:40:8c:e2:4a:60:3f:e5:e0:86:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: May  3 02:50:27 2026 GMT
            Not After : May  2 02:55:27 2027 GMT
        Subject: CN=A51F003ED1EF901B34EF38C25422CACD7C63776B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:5b:44:26:77:0e:6d:52:c5:c7:c4:26:26:
                    9b:a2:4a:f6:86:5e:55:09:37:36:c5:91:4e:b3:d7:
                    c0:df:bf:6b:a7:40:67:f7:27:67:20:5b:d5:00:a5:
                    cb:0a:6b:74:c9:b5:b5:c3:0b:70:cc:04:cb:a5:4b:
                    54:8c:a7:74:d1:73:ae:12:50:31:b5:63:a7:fe:65:
                    71:e8:70:45:9d:1a:fd:38:6a:27:99:1e:59:82:5f:
                    bf:04:38:ed:0a:2d:1d:db:54:b8:c6:1c:39:7b:a3:
                    3f:7c:ed:83:6f:20:cb:89:26:3a:cb:db:23:1c:37:
                    bc:d4:c9:4f:62:ae:75:37:c5:4a:54:89:34:f9:a1:
                    97:b6:60:0f:16:26:f5:6e:85:fc:4d:38:93:ff:0e:
                    b9:2d:b3:3b:08:09:10:56:1f:78:9d:8a:6c:f9:06:
                    d6:ec:5d:a2:7c:36:60:fd:2e:38:31:fa:13:75:5f:
                    85:87:a0:b1:41:05:9a:69:13:4c:3d:a4:ff:89:b2:
                    13:02:01:46:0a:4b:fe:29:99:7b:13:b8:f7:d6:e7:
                    44:19:b6:0a:ee:0d:6a:45:f0:d3:90:39:6d:3a:fe:
                    ba:04:81:62:a9:0a:8f:a2:4a:5a:28:f9:62:b4:5c:
                    87:d0:3d:8e:6c:7f:89:89:0d:81:26:df:45:40:49:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1F:00:3E:D1:EF:90:1B:34:EF:38:C2:54:22:CA:CD:7C:63:77:6B
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38332e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:41:46:c7:0d:bd:9c:72:21:b8:4c:37:5a:2f:f5:2d:08:10:
         94:94:49:49:2a:ed:54:c3:ab:0d:e8:57:23:67:99:66:8a:b1:
         81:dd:94:a6:7f:40:ed:73:01:6b:79:77:5e:d8:c4:f8:a7:8a:
         ce:e2:b1:30:42:9f:c8:55:af:81:2b:b0:68:df:fb:eb:18:74:
         f3:33:5c:18:44:d9:a7:e2:1b:c1:de:91:ca:38:c9:f5:37:80:
         1a:7c:d5:8d:d4:e7:eb:11:1b:bf:56:de:6b:ab:26:7d:da:ed:
         74:bc:3e:5e:0b:26:d7:db:27:5e:8a:15:62:8c:7f:21:d8:fa:
         6c:c2:95:58:9e:ae:fb:77:d5:59:0c:16:2d:6c:98:6c:33:49:
         29:00:c6:bd:97:9e:4a:56:30:27:ac:ce:f7:f1:b5:91:1e:0c:
         bc:85:10:cb:8e:fe:4a:70:bb:7e:06:63:cc:6b:ec:15:83:28:
         73:1a:45:5c:d7:db:00:44:1c:56:6e:50:22:62:b7:07:a0:2c:
         60:63:53:23:39:36:05:b5:b0:9d:ab:01:0b:88:ac:76:32:41:
         2a:65:cd:10:73:7c:5a:31:b8:b9:e6:23:c2:b6:b5:f0:9a:ad:
         e6:1f:2c:16:45:54:d8:f2:b5:8c:fc:5e:87:3f:54:bd:5a:53:
         fc:87:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:12 2026 by rpki-client