Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa
File:                     3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          VqHZLlF+lgynwiJKxLVryiJgltnho+ZAp8e5MraW8TY=
Subject key identifier:   3A:13:9F:44:2A:91:B0:D2:96:65:8C:07:CF:5F:7F:65:14:81:11:86
Certificate issuer:       /CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B
Certificate serial:       2A69781F0D88B43E0CA5B3E627414212089D36CB
Authority key identifier: F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 02:58:28 +0000
ROA not before:           Sun 03 May 2026 02:53:28 +0000
ROA not after:            Sun 02 May 2027 02:58:28 +0000
asID:                     154410
IP address blocks:        175.111.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl
                          rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:69:78:1f:0d:88:b4:3e:0c:a5:b3:e6:27:41:42:12:08:9d:36:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B
        Validity
            Not Before: May  3 02:53:28 2026 GMT
            Not After : May  2 02:58:28 2027 GMT
        Subject: CN=3A139F442A91B0D296658C07CF5F7F6514811186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:3e:9c:1e:0d:6d:dc:4b:ed:f5:c5:fb:78:
                    30:81:94:61:2a:79:6a:78:24:a1:99:a5:2c:8d:ac:
                    24:ed:0e:b2:f9:e0:3c:87:14:53:64:13:fa:86:db:
                    1b:c3:53:15:03:f8:6c:21:c2:2e:d6:2b:a9:73:b3:
                    96:9b:aa:85:33:0f:27:a5:a9:01:ab:5d:8b:c0:89:
                    1d:ff:e3:4c:4b:b7:be:bc:83:f3:8b:2a:84:62:1e:
                    ca:4e:68:94:2f:3e:8a:c7:95:0b:a6:e3:54:a4:db:
                    54:7d:91:67:f8:07:f1:da:bd:8a:3a:72:8e:8c:00:
                    48:8d:55:84:e0:ad:92:50:82:ef:39:e0:ac:77:46:
                    9e:ed:d3:6f:bb:5c:6f:b6:9b:74:a5:13:fb:6d:d9:
                    f2:8c:af:7a:de:51:2f:73:8b:57:1b:29:f6:c0:dc:
                    85:40:83:25:49:aa:51:08:7c:fe:e2:9a:e8:43:59:
                    d7:ef:54:10:f7:88:82:1f:d3:e5:a1:de:0b:37:fb:
                    37:8c:1d:02:66:41:63:88:df:d9:b1:13:fa:73:11:
                    17:a6:bd:77:ed:21:26:08:54:b3:b9:5c:32:34:b3:
                    87:53:94:43:ba:5b:fb:8b:ff:5f:98:71:62:03:6e:
                    90:88:77:18:4e:92:89:9a:4d:3b:fb:34:b3:48:ec:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:13:9F:44:2A:91:B0:D2:96:65:8C:07:CF:5F:7F:65:14:81:11:86
            X509v3 Authority Key Identifier:
                keyid:F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:d5:91:6a:48:4e:47:79:06:8d:d8:a7:18:3d:c2:f9:6b:78:
         ec:f0:5f:3e:ea:96:7d:00:09:78:9b:36:d9:a6:e5:b4:65:7e:
         bd:2b:76:a1:4b:75:43:3c:91:5c:d1:0a:9c:b3:5c:84:ca:48:
         e7:3c:ed:a8:fe:e4:10:38:1a:73:39:1f:23:72:f0:cc:f1:71:
         cc:35:6d:0e:b6:ac:6c:d0:85:d6:c7:84:34:17:75:5d:86:b9:
         b3:48:78:c6:62:17:cd:35:7f:08:54:81:c9:90:16:b1:a4:83:
         ce:2e:56:a3:ad:1c:02:64:6b:4a:c8:1f:08:df:c5:64:36:b5:
         6c:46:1a:82:53:27:7e:d7:25:b7:60:33:c7:ed:b9:26:88:86:
         22:df:7d:3d:42:75:86:23:4c:cf:b3:50:a4:01:5a:60:88:6c:
         eb:a8:3f:e6:3f:98:f8:14:46:36:f8:7d:0f:a0:e7:b1:83:41:
         cc:66:85:ec:a9:dd:97:8e:14:43:0e:5e:45:33:a9:ac:2c:2e:
         52:4b:9d:02:59:f9:c5:5b:bb:25:3b:5e:c3:97:b6:86:00:26:
         46:ab:fb:32:d5:ca:14:54:12:93:a0:62:75:f5:42:00:b8:5f:
         c2:87:e2:18:ad:9d:90:14:b6:5d:ee:91:22:33:35:60:95:af:
         7d:2c:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:40 2026 by rpki-client