Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32332d3233203d3e203234323036.roa
File:                     3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (raw, json)
Hash identifier:          olFsAwyIOAGRQu5Xq+Q00jEmusnWakBl1wyW6l3O+ek=
Subject key identifier:   7C:DE:16:A6:26:2B:CF:33:BB:11:9F:DA:C0:20:84:67:83:37:F1:14
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       6561783EF83969A23982578D2D4FAC319C994C6A
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32332d3233203d3e203234323036.roa
Signing time:             Sun 03 May 2026 02:57:29 +0000
ROA not before:           Sun 03 May 2026 02:52:29 +0000
ROA not after:            Sun 02 May 2027 02:57:29 +0000
asID:                     24206
IP address blocks:        110.44.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:61:78:3e:f8:39:69:a2:39:82:57:8d:2d:4f:ac:31:9c:99:4c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: May  3 02:52:29 2026 GMT
            Not After : May  2 02:57:29 2027 GMT
        Subject: CN=7CDE16A6262BCF33BB119FDAC02084678337F114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:02:2e:73:5d:4b:d0:1a:76:00:d8:d5:9f:
                    59:bd:e0:b1:b2:4f:77:21:1b:22:25:09:cf:30:07:
                    7c:67:ab:13:b2:5e:c8:ad:ee:aa:6d:e0:73:8f:d1:
                    ed:93:10:e1:cc:03:28:b6:ac:f8:e0:d3:c3:8e:07:
                    00:41:1d:be:0b:c8:8e:f6:f6:20:27:e7:a6:9f:68:
                    86:2e:50:cb:eb:a9:c2:37:93:c1:96:bd:1f:20:47:
                    ce:0c:da:66:82:b1:c0:7b:28:16:1f:16:4a:0f:98:
                    73:4d:79:03:23:c3:b9:f0:0b:fe:eb:b9:58:62:ca:
                    8b:53:02:c1:c8:f0:2f:8b:47:2a:15:b5:4d:9c:11:
                    a3:9d:d2:58:a2:ca:07:9d:a9:f3:8a:84:9c:da:53:
                    2a:85:60:18:2f:e9:c5:89:ea:67:ca:47:2b:e7:95:
                    79:eb:87:50:49:6f:fb:28:b7:89:b7:e2:3f:7e:b6:
                    b9:29:fd:20:61:9d:55:d3:ab:73:5a:b5:66:61:be:
                    02:0c:48:53:91:18:f4:c5:e1:00:5f:03:36:5c:dd:
                    6c:e1:1d:95:2a:49:22:62:61:c2:1f:c1:34:51:97:
                    32:48:09:7c:68:7d:ee:ca:04:2c:7f:9d:49:07:9f:
                    47:d5:14:da:bc:97:98:46:3e:3c:45:34:95:45:f1:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DE:16:A6:26:2B:CF:33:BB:11:9F:DA:C0:20:84:67:83:37:F1:14
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32332d3233203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:37:bc:c6:24:e0:a2:79:f1:d0:6e:ed:73:68:d3:03:ec:
         da:02:86:30:6a:dc:3c:e0:7f:5c:db:7c:2e:b4:3f:ed:fb:a4:
         69:80:37:76:69:e2:4c:6b:ef:62:ea:94:aa:00:de:56:ed:fb:
         47:c8:37:37:78:a4:cd:70:0c:7a:ec:89:96:0e:26:86:a6:bd:
         d6:86:6f:29:be:3f:48:65:5b:3c:8a:b3:59:f8:1c:e5:d3:bb:
         6a:7f:ec:7a:92:ea:e6:2b:53:44:13:aa:bb:5a:22:fc:c2:54:
         89:98:07:26:24:3d:fe:f5:a1:9e:13:eb:c6:c1:1f:f6:07:c7:
         e6:08:cc:af:30:49:c6:7e:59:e6:57:18:6f:58:34:3c:f1:a0:
         a7:cd:30:39:e1:05:8d:52:5e:79:0f:7f:28:38:77:61:b9:31:
         c2:af:66:43:6b:c3:2b:23:ef:ee:98:1c:09:48:0f:ec:f7:24:
         02:32:f3:5d:07:9c:fb:9f:34:39:59:53:b3:f6:a6:f0:16:0e:
         10:96:fd:dd:fa:4f:e7:21:a4:d5:53:64:7c:b3:79:34:73:86:
         4d:68:43:04:94:db:b9:7e:72:fe:e4:2f:08:ba:e9:df:09:5f:
         44:9b:10:0e:00:fe:5b:70:0f:c1:51:d9:3b:7e:8b:35:fd:2f:
         14:56:ee:db
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZWF4Pvg5aaI5gleNLU+sMZyZTGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZCNjc4QUU4REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFE
NEQ2OThEODAeFw0yNjA1MDMwMjUyMjlaFw0yNzA1MDIwMjU3MjlaMDMxMTAvBgNV
BAMTKDdDREUxNkE2MjYyQkNGMzNCQjExOUZEQUMwMjA4NDY3ODMzN0YxMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgrAIuc11L0Bp2ANjVn1m94LGy
T3chGyIlCc8wB3xnqxOyXsit7qpt4HOP0e2TEOHMAyi2rPjg08OOBwBBHb4LyI72
9iAn56afaIYuUMvrqcI3k8GWvR8gR84M2maCscB7KBYfFkoPmHNNeQMjw7nwC/7r
uVhiyotTAsHI8C+LRyoVtU2cEaOd0liiygedqfOKhJzaUyqFYBgv6cWJ6mfKRyvn
lXnrh1BJb/sot4m34j9+trkp/SBhnVXTq3NatWZhvgIMSFORGPTF4QBfAzZc3Wzh
HZUqSSJiYcIfwTRRlzJICXxofe7KBCx/nUkHn0fVFNq8l5hGPjxFNJVF8UqXAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUfN4WpiYrzzO7EZ/awCCEZ4M38RQwHwYDVR0j
BBgwFoAU5rZ4ro3IQzmd9TRhB2TYcdTWmNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTc5MjJmODktM2U5Yi00YjIxLTkxODYtYTY0OGMyZGEzZjdiLzAvRTZCNjc4QUU4
REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFENEQ2OThEOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNkI2NzhBRThEQzg0MzM5OURGNTM0NjEwNzY0RDg3MUQ0RDY5
OEQ4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05
MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNjM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAW4sqDANBgkqhkiG
9w0BAQsFAAOCAQEAJRs3vMYk4KJ58dBu7XNo0wPs2gKGMGrcPOB/XNt8LrQ/7fuk
aYA3dmniTGvvYuqUqgDeVu37R8g3N3ikzXAMeuyJlg4mhqa91oZvKb4/SGVbPIqz
Wfgc5dO7an/sepLq5itTRBOqu1oi/MJUiZgHJiQ9/vWhnhPrxsEf9gfH5gjMrzBJ
xn5Z5lcYb1g0PPGgp80wOeEFjVJeeQ9/KDh3Ybkxwq9mQ2vDKyPv7pgcCUgP7Pck
AjLzXQec+580OVlTs/am8BYOEJb93fpP5yGk1VNkfLN5NHOGTWhDBJTbuX5y/uQv
CLrp3wlfRJsQDgD+W3APwVHZO36LNf0vFFbu2w==
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:55 2026 by rpki-client