Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32342d3234203d3e203234323036.roa
File:                     3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier:          NOtjlnW6QQp9GAkGgev2F79W7GZlIwkEZtTPfFueAL0=
Subject key identifier:   AD:9C:3E:16:37:D9:52:1A:88:C9:08:1A:8D:38:EA:2B:22:69:AD:99
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       11D25A8191E7478334CED8B3B936A33C410819A8
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32342d3234203d3e203234323036.roa
Signing time:             Sun 03 May 2026 02:57:32 +0000
ROA not before:           Sun 03 May 2026 02:52:32 +0000
ROA not after:            Sun 02 May 2027 02:57:32 +0000
asID:                     24206
IP address blocks:        110.44.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d2:5a:81:91:e7:47:83:34:ce:d8:b3:b9:36:a3:3c:41:08:19:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: May  3 02:52:32 2026 GMT
            Not After : May  2 02:57:32 2027 GMT
        Subject: CN=AD9C3E1637D9521A88C9081A8D38EA2B2269AD99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:04:85:ee:d2:a9:ae:61:d8:9f:db:45:8f:
                    db:1b:a4:48:21:d9:49:7f:7d:45:de:0d:91:c5:e7:
                    7b:0e:ef:9c:0d:5b:6d:ac:14:d4:39:70:80:26:35:
                    51:d5:27:79:41:df:66:a8:d3:dd:10:39:fc:15:6e:
                    d9:ef:3b:e6:9e:be:dc:de:01:6f:76:15:5c:79:34:
                    51:33:1a:1c:7a:88:12:bc:0c:98:8d:b7:0d:0b:1e:
                    fc:74:63:ad:e3:fc:58:05:29:8b:e0:0b:cb:ad:9a:
                    e3:5c:ed:7f:f0:46:bd:f7:d2:2f:a8:be:3c:15:43:
                    81:c7:00:33:e0:d2:8e:ee:eb:63:4c:89:b0:d5:a1:
                    55:db:5f:ef:c3:d3:47:2c:92:fd:05:22:4c:41:74:
                    bd:04:b5:e5:94:87:3e:b0:6a:23:04:92:31:8d:2c:
                    f1:ed:67:48:b5:cb:06:0b:3e:ea:e8:a6:44:c4:e5:
                    38:68:ba:e7:c6:73:b1:52:e1:5f:55:aa:f8:ad:59:
                    bf:cb:5c:09:35:c0:b8:52:68:e6:de:f3:75:b7:3d:
                    69:78:e9:74:f5:01:73:9c:a4:17:43:d9:54:77:a1:
                    f0:fa:97:13:f1:d7:a7:51:ef:92:9c:39:6b:0f:c9:
                    9f:69:69:f4:a7:be:4e:b3:41:cb:1f:a2:90:10:b3:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9C:3E:16:37:D9:52:1A:88:C9:08:1A:8D:38:EA:2B:22:69:AD:99
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32342d3234203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:82:95:08:92:99:e2:3b:15:3f:a0:51:fa:5e:9e:14:06:d6:
         ec:c0:f7:49:8e:16:91:9a:fb:31:f8:b4:66:cd:24:6c:07:11:
         91:90:86:11:2d:e1:04:54:9b:f9:66:14:4a:2c:66:45:b5:88:
         36:42:f7:ce:3f:56:54:62:45:f6:19:74:fb:5c:66:1d:58:5a:
         cc:9d:c2:4a:1f:79:57:30:1f:c6:e7:8b:f9:9e:3a:75:95:e9:
         ee:ae:87:dd:2a:16:53:55:07:7f:b2:cd:cf:3b:a3:e5:57:c4:
         ea:3c:38:fe:58:40:89:15:2e:6f:ef:7e:db:27:97:04:09:dc:
         cc:36:41:6e:93:04:19:43:9f:cc:14:a2:c4:03:23:b2:bd:db:
         21:02:79:f4:a9:f4:35:44:27:e2:50:84:67:83:30:7f:ea:e9:
         eb:92:23:e3:0e:74:c2:e6:ff:57:03:fd:c5:ea:ba:f9:e3:60:
         c1:a5:dd:c7:c5:0e:8b:d6:d0:80:64:12:18:bd:39:94:a8:26:
         a2:63:41:e6:c1:6a:66:78:b7:97:d3:de:fe:1e:9c:e5:7b:6e:
         d2:62:f2:3b:a4:8c:1c:ec:2a:fa:32:3d:90:9a:b8:39:31:66:
         20:c8:33:c2:dd:e5:04:6f:69:5e:ff:22:25:52:93:b6:45:79:
         8a:05:4a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:58 2026 by rpki-client