Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa
File:                     3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (raw, json)
Hash identifier:          b7wBGbC9SNhjzw8V9K2lv7CY6SFtdKxPdtK4cOG4BhI=
Subject key identifier:   EC:8B:D8:66:FC:EE:18:DD:55:6E:FB:C8:95:9B:5B:08:DF:AD:3D:5D
Certificate issuer:       /CN=6D8C2202C602D4BCB9586F638744BA643908A389
Certificate serial:       15825E5449F911640AB7CFEA0077F4236BE27319
Authority key identifier: 6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa
Signing time:             Sun 03 May 2026 02:56:00 +0000
ROA not before:           Sun 03 May 2026 02:51:00 +0000
ROA not after:            Sun 02 May 2027 02:56:00 +0000
asID:                     152053
IP address blocks:        210.87.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl
                          rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:82:5e:54:49:f9:11:64:0a:b7:cf:ea:00:77:f4:23:6b:e2:73:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D8C2202C602D4BCB9586F638744BA643908A389
        Validity
            Not Before: May  3 02:51:00 2026 GMT
            Not After : May  2 02:56:00 2027 GMT
        Subject: CN=EC8BD866FCEE18DD556EFBC8959B5B08DFAD3D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:cf:18:b5:05:33:39:28:14:00:34:02:3b:
                    80:40:08:19:fe:6c:25:c0:01:df:fe:10:dd:1d:78:
                    5a:08:b3:19:2d:df:a7:d4:14:31:fd:35:8d:02:e8:
                    f0:bc:4a:6e:79:d8:00:3e:c6:25:c0:9d:d1:e5:49:
                    dd:63:3d:24:49:28:5d:de:5b:ef:9b:af:0b:6c:43:
                    fe:4c:f1:d5:8d:ea:82:ad:5d:63:9b:64:ef:d2:05:
                    d4:60:73:60:7b:b1:a8:2c:76:a9:1a:bd:fe:fc:c3:
                    4c:22:ae:82:ef:8c:66:85:d4:31:ac:97:31:4d:6e:
                    0f:7b:94:2c:7f:b0:69:5b:45:11:6b:a7:3b:c3:6d:
                    9d:5f:4c:b1:f9:50:89:40:88:bd:26:e7:e8:8f:cc:
                    01:e2:46:7c:47:d1:00:a8:d0:0c:8b:7c:47:aa:c8:
                    f3:e7:76:be:c0:fb:33:26:a8:69:fd:28:9c:70:9e:
                    f6:7b:9d:51:5e:a7:63:96:5f:f6:5e:1b:20:21:4d:
                    9a:17:c9:25:52:ee:4a:a0:81:a9:e7:5e:30:08:fb:
                    8e:c2:ed:1e:c9:9f:18:82:4b:1a:ed:68:fe:b1:8f:
                    d9:7a:fc:39:0d:e4:35:c3:03:b4:f9:2a:a5:d7:33:
                    8c:e3:70:99:61:5c:8f:c1:1d:67:c7:e7:c5:f1:ce:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8B:D8:66:FC:EE:18:DD:55:6E:FB:C8:95:9B:5B:08:DF:AD:3D:5D
            X509v3 Authority Key Identifier:
                keyid:6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:4f:ab:f1:e1:c6:39:f0:8f:ed:c1:ce:83:54:32:09:09:
         d7:73:f3:fe:04:c7:42:71:92:8a:91:e0:df:1c:97:f5:04:ff:
         cd:73:21:be:d7:3f:71:57:3a:96:ef:7f:9c:bc:c8:cb:ea:a5:
         4c:14:33:f6:74:61:69:8b:b2:d5:c5:77:15:dd:b5:dd:9a:90:
         c0:3b:fc:9f:e8:a7:b2:49:ce:ba:b8:be:52:ea:10:84:02:d7:
         06:b0:ea:d6:8e:fe:74:42:73:47:ea:48:b9:78:cd:28:5e:2f:
         42:f8:47:5d:36:8b:49:2f:3a:e3:61:28:a8:fe:65:93:9a:33:
         f3:95:55:2c:ab:72:4a:6b:53:d9:52:93:5f:ea:68:09:80:b6:
         ab:d7:f6:91:d4:4a:67:f8:aa:4b:76:c1:ae:c8:c3:9b:c7:32:
         44:a5:64:58:bd:e2:9d:84:6c:f6:d7:ed:8a:02:44:83:30:35:
         9a:0d:90:4b:50:3e:b4:da:3f:b8:f3:ef:8e:25:5d:3c:82:56:
         df:6c:1e:76:07:ed:dc:e0:59:c5:9b:27:22:41:a1:20:0b:a7:
         b2:3a:3a:40:a5:be:9d:7f:37:26:b1:82:81:9a:9e:df:26:98:
         74:5d:e8:01:cb:90:ab:88:9f:20:c6:4b:a8:23:d6:1e:a2:a7:
         a9:64:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:36 2026 by rpki-client