Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313534343130.roa
File:                     3137352e3131312e39382e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          j9TzpmBrkrC4dmhMn79OWPBXD1f+9PaIM7otVoOUOss=
Subject key identifier:   12:04:08:50:11:05:E6:51:23:C8:06:66:55:43:DC:87:40:65:9D:8B
Certificate issuer:       /CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B
Certificate serial:       3C77490C16D0A3FD1972C4014BAD22828C6A8250
Authority key identifier: F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 02:58:28 +0000
ROA not before:           Sun 03 May 2026 02:53:28 +0000
ROA not after:            Sun 02 May 2027 02:58:28 +0000
asID:                     154410
IP address blocks:        175.111.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl
                          rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:77:49:0c:16:d0:a3:fd:19:72:c4:01:4b:ad:22:82:8c:6a:82:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B
        Validity
            Not Before: May  3 02:53:28 2026 GMT
            Not After : May  2 02:58:28 2027 GMT
        Subject: CN=120408501105E65123C806665543DC8740659D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:61:56:4d:fe:d4:cb:0f:0c:2d:0b:e4:bc:
                    4a:1e:c4:ca:c5:d5:ee:65:3f:9b:d9:ea:47:d8:52:
                    f5:a4:91:17:c7:dc:26:62:22:4a:b8:d2:ad:03:68:
                    6c:83:68:71:64:d1:0a:ff:4e:93:1a:64:d4:fd:16:
                    04:25:50:d6:29:cf:12:f9:f8:f9:f7:04:75:cd:d3:
                    55:59:1b:3b:12:ae:4f:b1:67:1c:3e:81:d7:cd:74:
                    ff:59:7e:8e:24:94:b0:6d:b2:33:d4:45:9d:14:e9:
                    0b:bc:58:0f:9d:cc:8a:06:75:fd:94:a5:b9:c9:ff:
                    db:e2:af:9d:ed:e6:58:2d:3f:9f:11:92:0f:25:9a:
                    87:eb:f1:7d:6d:33:91:5f:c8:56:9f:5e:4a:82:30:
                    95:9e:3a:dd:70:15:5a:02:d2:8c:42:5e:b1:04:e5:
                    ff:75:6b:20:cc:3e:3a:db:be:78:5a:a8:2b:02:99:
                    60:b3:60:a0:e1:77:98:b3:4a:a5:06:5f:de:d0:a7:
                    bb:50:71:f0:c3:02:cd:0f:a2:a7:5f:41:14:d7:2c:
                    10:6a:7a:fa:25:b8:b1:48:ef:48:23:d1:16:82:6f:
                    4f:26:9f:99:00:2b:f1:5c:4d:a3:55:6d:c8:1e:70:
                    c7:1e:53:1c:72:21:27:1d:65:5a:74:36:92:52:06:
                    e9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:04:08:50:11:05:E6:51:23:C8:06:66:55:43:DC:87:40:65:9D:8B
            X509v3 Authority Key Identifier:
                keyid:F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:6a:c5:1e:4c:ee:4e:17:15:8d:a8:40:94:e7:fd:76:0f:99:
         3b:24:8a:a0:42:13:d6:87:f6:ac:c7:18:97:18:bb:f7:aa:4f:
         d8:1d:62:32:bd:3c:4a:b7:aa:70:b6:ee:9a:64:b8:6d:83:a2:
         cb:13:06:25:c5:12:36:55:c2:ce:e7:ea:9b:3a:40:f4:bf:10:
         73:1f:84:99:6f:81:66:16:d1:60:15:31:1f:c2:3a:98:f1:07:
         93:07:a2:5d:f5:6a:c8:c4:24:ec:52:56:c2:84:24:78:95:7e:
         de:16:2d:76:62:33:0e:fc:66:d8:84:f1:09:3a:39:67:35:a2:
         6b:e1:1e:66:10:11:86:28:c9:f7:11:de:27:93:4c:ee:0c:6a:
         31:3d:65:82:47:70:8f:56:b7:9e:62:c3:cc:aa:84:39:ef:9b:
         4d:eb:ac:6a:eb:0b:23:b1:ec:14:64:61:45:4e:8a:25:e1:b1:
         3b:9a:af:a7:48:17:c4:65:78:31:7a:7e:67:c5:1c:5e:54:30:
         dd:93:c3:09:ff:e9:80:fa:09:ef:15:41:e3:cf:14:4f:89:49:
         85:93:28:cf:22:60:22:f9:48:e7:84:00:9c:e9:4a:e4:6e:b2:
         34:0a:c8:db:23:3c:06:6d:bc:bf:67:2d:9b:87:6b:af:c3:cd:
         01:25:08:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:33 2026 by rpki-client