Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa
File:                     3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (raw, json)
Hash identifier:          n5VI2ALwTByQW6MDpSlHEED2UTLT+bloshp6A2FsEGE=
Subject key identifier:   FE:FB:B7:A6:F6:E3:58:FE:A0:58:72:A2:01:A5:DB:4E:B3:0C:0D:E1
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       5C3C3C4D16AB52ACE2A10FBE762C96834647570D
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa
Signing time:             Sun 03 May 2026 02:57:28 +0000
ROA not before:           Sun 03 May 2026 02:52:28 +0000
ROA not after:            Sun 02 May 2027 02:57:28 +0000
asID:                     138077
IP address blocks:        110.44.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3c:3c:4d:16:ab:52:ac:e2:a1:0f:be:76:2c:96:83:46:47:57:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: May  3 02:52:28 2026 GMT
            Not After : May  2 02:57:28 2027 GMT
        Subject: CN=FEFBB7A6F6E358FEA05872A201A5DB4EB30C0DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:61:ec:07:49:52:1f:5d:8b:f0:81:80:c8:
                    a4:97:51:2c:18:99:14:c2:99:d6:70:78:65:8e:a5:
                    3d:65:3a:0d:26:6b:71:37:2d:9b:24:ab:e1:f4:80:
                    aa:44:e8:db:86:ec:a7:60:5b:50:8c:df:83:ce:27:
                    cc:5d:51:c6:e1:7a:cd:73:3d:bc:0c:90:11:07:17:
                    6f:da:9c:a0:fe:90:03:b9:42:76:42:bc:d1:79:6f:
                    2b:23:fa:b7:27:9b:c5:11:28:df:99:bd:91:59:7f:
                    7b:e0:5b:6c:be:4e:f0:25:08:c7:c8:c2:98:48:4c:
                    cc:98:32:85:6f:d7:d4:56:fe:00:51:54:04:7f:4a:
                    db:39:7b:5d:da:e0:1c:2b:b5:b3:83:73:08:1f:32:
                    b0:44:e8:f8:fd:4d:d6:f6:df:1b:94:14:b0:7c:64:
                    08:38:a6:87:72:88:24:9e:aa:b4:0f:08:13:e2:1b:
                    91:ba:3e:53:97:4a:ea:d3:75:62:8b:67:1f:d2:5e:
                    83:e1:d8:52:1d:98:ab:51:e8:41:c3:7e:f8:14:db:
                    ac:3c:48:da:a8:48:33:bc:9f:ae:65:08:fc:c6:bb:
                    57:8c:e1:6d:32:86:69:82:05:a7:fd:c1:47:fb:32:
                    5c:ae:69:27:ac:05:7f:6e:63:2d:ca:f7:58:48:b8:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:B7:A6:F6:E3:58:FE:A0:58:72:A2:01:A5:DB:4E:B3:0C:0D:E1
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:65:f1:52:3c:80:d5:9e:24:1c:fb:20:06:19:fd:c3:11:83:
         48:48:65:27:23:00:45:81:e7:ef:6e:04:4a:1e:62:d1:99:16:
         29:7b:fb:3b:97:67:9c:0c:8f:92:97:f8:0d:c1:98:72:8f:10:
         54:6e:b1:f1:d9:a7:b5:e9:a7:6d:7b:af:a1:26:93:8f:8d:70:
         cb:bc:96:40:f9:50:87:f0:b9:ae:19:ef:1b:85:7a:c2:09:62:
         50:01:43:62:18:c0:c6:17:3f:aa:96:ea:e8:43:98:4b:5c:bb:
         ef:bc:93:44:46:d7:23:a6:e5:5f:11:f1:a2:79:70:15:0d:7c:
         35:6f:f7:cb:1b:9f:62:3b:0e:6f:8c:95:86:74:fc:a3:99:75:
         dd:37:c2:db:e0:a2:71:57:ea:29:ec:39:d3:89:e0:e6:48:fa:
         7e:ee:34:35:d1:ff:fd:31:2a:98:de:22:6d:2a:c6:4d:dd:2c:
         b7:c6:e1:2f:70:b3:27:76:6d:80:ca:53:81:23:29:55:28:ed:
         41:62:a9:97:59:b7:4b:d1:6b:71:fe:f3:2f:20:58:ec:41:87:
         3a:b2:32:ea:0d:93:a0:ed:00:e7:98:4d:1c:dd:a3:de:d4:17:
         93:f7:38:5d:d9:12:0d:50:54:cd:a7:81:a1:79:59:7e:04:a2:
         e3:93:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:06 2026 by rpki-client