Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa
File:                     3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          CuN94QnhhFu2NHfTipRrUMIPrCdOqqGtN3MEo0A8ZXk=
Subject key identifier:   8F:5F:4C:10:8F:E8:4B:9F:C0:A3:30:CD:13:B6:65:61:99:45:25:B5
Certificate issuer:       /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial:       0F2C727C614E092EB8832852F9F538DDE5FB6E7E
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa
Signing time:             Sun 03 May 2026 02:58:04 +0000
ROA not before:           Sun 03 May 2026 02:53:04 +0000
ROA not after:            Sun 02 May 2027 02:58:04 +0000
asID:                     38320
IP address blocks:        119.110.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
                          rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2c:72:7c:61:4e:09:2e:b8:83:28:52:f9:f5:38:dd:e5:fb:6e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
        Validity
            Not Before: May  3 02:53:04 2026 GMT
            Not After : May  2 02:58:04 2027 GMT
        Subject: CN=8F5F4C108FE84B9FC0A330CD13B66561994525B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:77:b3:a0:6a:69:61:40:4b:da:a3:71:bd:
                    ee:62:47:31:24:60:ff:c7:29:9e:44:7f:f7:bc:3b:
                    14:f1:a7:67:3d:1e:99:e1:b3:bf:10:07:50:77:36:
                    8a:71:8b:fe:61:a4:02:22:64:c2:f2:a7:43:51:40:
                    61:3f:c2:18:d9:49:18:9c:cf:b0:17:85:82:9f:b8:
                    af:94:a1:7a:6a:1c:a2:b7:9f:7d:97:b0:fd:f3:81:
                    ad:c6:49:f4:87:45:fc:f6:81:f0:72:61:32:a8:e4:
                    d7:65:03:cf:49:f8:cb:15:c0:bf:a4:21:e7:cb:24:
                    6a:fc:78:77:9d:7f:d7:c4:b0:68:46:01:5d:18:6e:
                    2a:c8:e4:6e:e0:72:91:01:1b:f4:2a:d5:83:ab:22:
                    a3:04:d1:67:7f:44:3e:e2:72:11:11:7f:b6:e1:6f:
                    12:6e:87:6b:86:90:e6:66:b8:df:8d:f5:bb:14:b4:
                    c2:62:8f:eb:1c:21:9c:f0:75:f2:92:b1:a4:84:6d:
                    d2:32:c7:d5:e8:5e:b7:47:39:4c:56:da:a8:0f:10:
                    8d:ac:71:97:2d:08:c6:e7:ef:12:9d:3d:44:1e:d5:
                    36:a0:4a:69:be:d1:84:e9:3e:17:71:d3:fe:0f:3d:
                    f7:23:c0:cf:e9:18:cf:38:64:35:7a:a2:d4:6b:e1:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5F:4C:10:8F:E8:4B:9F:C0:A3:30:CD:13:B6:65:61:99:45:25:B5
            X509v3 Authority Key Identifier:
                keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:09:8f:4a:49:4b:10:7b:db:4c:ff:2e:f3:f0:75:f4:5b:18:
         db:4b:58:47:ca:14:3b:0b:11:9f:6f:c2:d0:21:38:1f:98:bb:
         08:28:00:f3:1c:0c:4e:74:04:3b:b0:f8:fc:91:11:5d:18:93:
         4f:bc:51:ba:54:36:a9:bd:67:ef:36:ca:19:d1:42:a7:cf:d2:
         e2:e5:d7:c4:4d:a9:3b:d5:2d:dc:89:08:88:46:19:84:54:be:
         5c:65:fb:2b:a3:3b:ee:3a:df:6e:6f:1a:40:30:27:00:13:d1:
         dd:42:cf:19:d0:a2:fb:0b:4f:3c:b6:7f:12:52:b1:ea:92:19:
         c0:f2:04:a3:6a:5e:aa:7c:fa:c4:21:7a:fc:b9:c3:4e:f3:1f:
         28:da:a4:46:c8:7e:fe:e7:e8:65:65:e3:57:16:22:c4:ce:58:
         57:f6:46:dc:ea:b8:22:5b:ee:4b:bb:81:9e:8f:63:04:3e:f6:
         8b:a0:0d:3b:b8:35:96:c3:25:48:0d:d1:02:8f:ee:ef:9d:7e:
         e9:4e:1e:59:a0:82:73:13:09:60:8f:41:6a:aa:15:59:f4:80:
         7b:63:fe:d1:35:bd:5d:00:d8:b7:f5:93:b4:c4:e7:1b:71:fd:
         44:b5:f6:1f:05:85:c8:1f:7a:1a:90:db:2b:8f:ea:ac:30:e2:
         59:3a:b5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:08 2026 by rpki-client