Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32332d3233203d3e203338373533.roa
File:                     3131392e3131302e38362e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier:          VbGlDKmfsC8jdy2jwLyJDuEE3d/2hqyMHnfS47Nzs2E=
Subject key identifier:   E4:7B:FB:35:5F:9C:1F:AC:F9:19:E9:C9:3F:2D:4E:E9:6B:1E:B1:DC
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       75EA828DA0F11F67CE485D16D52F89F5687E0CC3
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32332d3233203d3e203338373533.roa
Signing time:             Sun 03 May 2026 02:55:30 +0000
ROA not before:           Sun 03 May 2026 02:50:30 +0000
ROA not after:            Sun 02 May 2027 02:55:30 +0000
asID:                     38753
IP address blocks:        119.110.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ea:82:8d:a0:f1:1f:67:ce:48:5d:16:d5:2f:89:f5:68:7e:0c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: May  3 02:50:30 2026 GMT
            Not After : May  2 02:55:30 2027 GMT
        Subject: CN=E47BFB355F9C1FACF919E9C93F2D4EE96B1EB1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:b1:92:4a:f4:1c:bc:20:5c:9f:e6:6c:71:
                    97:94:1a:db:70:62:35:a3:21:bd:c9:2d:f9:2b:f1:
                    9d:5b:3b:78:55:b9:c3:94:18:68:78:4f:69:aa:0b:
                    d1:96:71:60:d3:b0:01:03:aa:e4:34:c9:c3:43:07:
                    c3:e1:37:a8:04:0e:59:7b:07:4d:6c:da:95:fb:83:
                    c8:f0:ff:ab:94:36:08:c6:fd:a1:1a:11:25:9b:bb:
                    8b:19:5a:e3:e3:ce:26:a9:30:48:8e:03:6b:13:5c:
                    fb:fe:a9:5a:bc:32:1b:64:d3:fb:50:cd:ae:b2:6f:
                    df:9a:af:31:2f:c1:7a:82:bb:bd:91:2a:c2:20:03:
                    39:2f:f2:24:cb:37:d1:8e:99:f4:bb:dc:ba:d3:92:
                    76:f2:95:4b:8a:ab:b6:ad:72:58:c7:46:ef:4b:bf:
                    e2:e0:ae:ed:5b:36:ef:0b:f5:0a:91:90:48:ec:f2:
                    b2:27:ee:03:1f:6f:09:e2:fc:19:c7:44:9c:ed:c2:
                    06:9a:63:ba:70:f4:0f:96:f9:e7:04:d2:c0:8b:6a:
                    4d:e7:28:61:e2:0a:98:19:79:84:6e:ad:b0:e7:66:
                    f8:01:0e:c5:a8:ae:30:87:76:cf:99:01:74:5f:cd:
                    2d:de:3e:a6:20:15:8a:bc:0b:52:7a:c6:cc:2f:50:
                    19:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7B:FB:35:5F:9C:1F:AC:F9:19:E9:C9:3F:2D:4E:E9:6B:1E:B1:DC
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32332d3233203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:94:83:e8:f0:b5:e7:af:40:0f:1c:8e:be:2e:11:e1:11:b0:
         9c:a3:39:3c:e4:cf:b0:5b:50:01:1b:bc:e0:5c:58:9e:55:54:
         99:2a:79:91:be:4d:27:10:55:7d:04:ea:49:e8:5d:9a:6c:90:
         07:34:a2:8b:f7:d3:38:27:d6:b6:77:27:8e:5a:2b:25:78:3f:
         6e:1b:64:e7:20:74:9a:f9:7b:88:30:74:c1:88:cb:55:ed:96:
         e7:a8:b4:19:cc:60:dd:3b:ed:28:50:f9:1d:29:7e:b6:d3:f2:
         f1:74:dd:0a:2d:04:a1:39:f4:bf:d5:a1:72:05:67:53:ef:84:
         53:20:58:e6:87:1e:c6:72:77:b7:75:69:9b:9a:a7:15:ef:4f:
         46:22:a6:17:fd:51:e7:92:27:4c:7a:0e:83:4c:77:4d:93:ef:
         c7:07:bf:c9:fd:6b:aa:f6:f0:52:4d:7b:05:33:94:b5:a0:d3:
         4f:c8:9e:5a:a1:a4:7b:b8:94:79:e8:88:fb:a2:6c:c2:d1:b7:
         f7:f6:4e:66:87:f7:ee:df:11:79:1b:a9:de:14:8f:37:15:dd:
         91:ec:9c:7f:f9:ad:2c:d7:d3:2a:08:49:be:47:58:2a:33:b4:
         30:3d:c4:34:0c:7f:ce:af:37:b2:0e:de:83:02:5b:5a:7b:14:
         15:a7:b0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:52 2026 by rpki-client