Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36382e302f32322d3234203d3e203338333230.roa
File:                     3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          WvBKlshkFphXVWmpSdt/+evxZdbmBKGdDC7K6rMtEn8=
Subject key identifier:   BB:05:77:AD:F4:97:B1:70:98:13:33:2D:64:7E:7C:DA:71:6A:3A:44
Certificate issuer:       /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial:       0626C7BD82334EDBDAF01F149F047A9E33495229
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36382e302f32322d3234203d3e203338333230.roa
Signing time:             Sun 03 May 2026 02:58:00 +0000
ROA not before:           Sun 03 May 2026 02:53:00 +0000
ROA not after:            Sun 02 May 2027 02:58:00 +0000
asID:                     38320
IP address blocks:        119.110.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
                          rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:c7:bd:82:33:4e:db:da:f0:1f:14:9f:04:7a:9e:33:49:52:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
        Validity
            Not Before: May  3 02:53:00 2026 GMT
            Not After : May  2 02:58:00 2027 GMT
        Subject: CN=BB0577ADF497B1709813332D647E7CDA716A3A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:14:21:14:7f:94:58:e0:74:aa:c9:28:79:fd:
                    4e:b7:91:0c:62:20:15:f7:77:68:96:fd:ab:e8:33:
                    bd:a6:be:d7:03:93:7b:67:ed:05:bc:7d:d4:92:eb:
                    d7:d2:b2:ea:d7:b6:b3:e5:14:f1:f5:1c:f6:b6:d3:
                    0a:b4:5a:97:68:7d:4c:86:d4:26:2e:24:45:8e:a1:
                    8b:4f:2e:1a:d7:38:fb:f7:ff:a6:a9:0d:27:05:c9:
                    b9:de:64:c7:e3:f1:ff:f8:75:c4:80:56:72:a9:04:
                    66:7c:62:84:2d:ab:bf:16:82:84:b6:30:8e:80:69:
                    eb:f3:bc:bb:82:f7:05:3e:47:52:f4:42:67:d9:f4:
                    57:0b:b0:45:dc:97:68:ad:73:c4:f7:5f:8c:d3:12:
                    51:2b:9f:92:ff:87:9b:f5:40:82:2a:c5:11:6e:e2:
                    1a:cc:5e:c4:8a:6c:90:27:0c:2c:4d:cc:87:de:a1:
                    88:6a:22:f3:d7:a9:ff:39:22:49:1f:c7:16:7c:9b:
                    a5:85:3a:15:9f:28:81:b5:81:ef:4c:b3:6b:24:0c:
                    34:d7:27:45:8b:6b:ca:bc:1d:f6:34:fc:dc:15:b4:
                    a4:42:28:7b:1a:00:94:1b:00:08:c8:d2:45:70:12:
                    3c:82:c8:27:86:77:29:dd:cd:5b:54:5b:78:bb:f3:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:05:77:AD:F4:97:B1:70:98:13:33:2D:64:7E:7C:DA:71:6A:3A:44
            X509v3 Authority Key Identifier:
                keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36382e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:b9:37:fb:75:c4:47:e8:54:db:0c:d8:f7:4e:d9:16:dc:9c:
         27:b7:97:90:7e:ee:03:3f:c8:46:7b:b1:c2:07:24:f7:cd:6e:
         4c:dc:eb:db:05:a8:10:72:c8:6a:64:85:78:62:2e:c8:dd:06:
         88:ca:38:b7:26:43:b5:d3:1b:7c:61:b8:d5:67:e2:fa:2e:17:
         e8:03:8a:74:c3:32:ff:ea:cc:10:4b:70:27:ea:7f:bd:65:fa:
         f2:3f:fc:84:14:b0:2d:60:a0:c8:37:df:51:87:bf:99:a8:3d:
         31:ec:d0:0f:82:9e:1a:cd:eb:0e:d8:eb:c3:b9:6a:d9:47:5b:
         e7:de:3d:b6:87:99:e4:8a:c0:2d:87:1f:a1:70:cf:d0:c3:d1:
         51:9a:89:2a:70:78:3b:00:86:6b:5e:b4:1a:fe:6d:3f:08:1a:
         0c:df:2b:9f:e3:d3:93:8b:2a:58:bc:3d:b9:4d:d3:a6:35:a2:
         6c:47:e1:a2:66:3f:ad:b3:7e:35:e8:3c:1c:f9:8f:93:c0:cf:
         b3:89:2e:4e:48:32:f3:49:8b:4a:1c:d4:b3:05:b1:57:ca:9b:
         6b:be:c4:e2:01:b9:64:64:10:71:ac:0e:09:63:fe:b9:85:2a:
         6d:03:87:26:13:c2:12:ff:1f:17:78:51:ef:0b:b9:8c:d0:df:
         37:9a:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:37 2026 by rpki-client