Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32322d3232203d3e203234323036.roa
File:                     3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (raw, json)
Hash identifier:          XjCY9n44ulh5fDHo5HrcyNaBmz9apAbxyIML1BofSqw=
Subject key identifier:   0F:80:C3:AA:81:2A:F2:88:9C:65:6D:77:6B:DF:85:58:5B:13:CC:87
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       58597AED9843520C8C49B4FCD9D62788A8D0A6E3
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32322d3232203d3e203234323036.roa
Signing time:             Sun 03 May 2026 02:57:35 +0000
ROA not before:           Sun 03 May 2026 02:52:35 +0000
ROA not after:            Sun 02 May 2027 02:57:35 +0000
asID:                     24206
IP address blocks:        110.44.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:59:7a:ed:98:43:52:0c:8c:49:b4:fc:d9:d6:27:88:a8:d0:a6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: May  3 02:52:35 2026 GMT
            Not After : May  2 02:57:35 2027 GMT
        Subject: CN=0F80C3AA812AF2889C656D776BDF85585B13CC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:be:53:8f:1f:6a:74:a2:ad:6f:6a:62:90:
                    d8:53:39:e4:75:22:8a:2e:17:f2:0d:cf:61:5d:de:
                    d7:15:ce:ff:2e:86:af:37:dd:35:e1:39:c1:41:af:
                    e3:d9:69:ae:74:d1:19:20:80:d7:1b:7e:f9:1e:9b:
                    b1:5f:46:84:7c:ae:c0:de:d7:57:b9:86:55:d0:4d:
                    55:53:e7:a7:40:b9:08:2b:94:47:c8:e3:2c:33:29:
                    d7:df:d8:7c:b6:87:ac:ae:d1:d3:c1:64:bd:23:ba:
                    55:59:ac:5d:d3:0f:1b:67:74:a3:0b:c4:97:54:cf:
                    34:bf:98:00:bc:ba:61:a9:f5:ca:75:8a:fb:b6:f0:
                    40:49:39:ca:58:d4:90:66:f6:77:b0:80:78:59:32:
                    1c:c5:73:80:f1:96:54:44:b0:ef:5c:f3:58:00:cf:
                    14:cc:8a:87:a0:58:a4:81:06:8e:7a:ba:ac:7a:e2:
                    7a:ea:7b:92:93:b9:22:a9:42:15:14:1b:84:44:1f:
                    58:43:8c:71:06:4f:82:95:05:77:62:af:6c:6b:7c:
                    25:11:e4:d7:ca:fc:8d:9d:e5:d3:a7:9d:cd:73:e0:
                    ea:ee:2a:84:e4:33:09:6c:18:75:18:62:d8:a6:ce:
                    a0:18:1d:11:62:02:e5:20:da:84:79:c1:a9:00:cf:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:80:C3:AA:81:2A:F2:88:9C:65:6D:77:6B:DF:85:58:5B:13:CC:87
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32322d3232203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:2c:20:ce:ac:9f:55:45:a7:a3:e5:37:e3:3d:1c:2b:03:63:
         95:71:6f:78:7a:e3:1e:11:e6:2d:90:6b:30:66:0a:5b:1f:5c:
         6e:83:ea:b7:9f:1b:ae:de:31:5d:52:86:75:14:6d:5f:d5:90:
         3e:b6:11:7c:96:2f:b6:46:fb:45:8d:c7:ac:8f:73:53:5a:2a:
         7e:dd:60:47:41:a1:17:6f:74:a1:55:e0:8a:e3:7d:1b:74:cb:
         2a:1d:c3:42:0a:bc:fe:cb:0a:f9:7b:e9:a3:21:bf:36:db:3b:
         c9:bb:c9:97:00:15:4b:d4:89:3a:2f:11:25:e0:3a:ac:09:4c:
         59:7f:1e:e6:af:d7:e6:66:02:70:e6:36:b9:38:dd:04:c7:b9:
         fa:17:12:1a:58:6d:42:55:8d:08:4d:09:24:ea:4a:7e:1e:b0:
         0e:d5:4a:63:fe:14:11:fb:55:8a:d8:e9:87:ee:70:aa:e8:f8:
         22:98:b4:4e:99:6e:31:9e:68:c8:85:40:88:57:ab:0c:f2:b2:
         57:a6:04:e7:a0:b5:bf:b0:6e:ef:af:3d:a4:83:39:df:73:cb:
         b5:ef:d7:f3:d8:4b:d6:a0:51:6f:04:c8:f0:56:19:9e:e3:e6:
         63:1b:89:52:06:33:2c:28:68:50:d8:19:c0:e0:ce:71:d4:66:
         1e:f1:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:53 2026 by rpki-client