Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa
File:                     3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (raw, json)
Hash identifier:          x6TwTOh29XWvaL5ompdRKU75ZTX3qxSvsJNiDRmi0tk=
Subject key identifier:   55:B9:92:E3:46:A7:60:F2:59:5D:82:BF:14:88:9E:29:1F:CB:78:96
Certificate issuer:       /CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B
Certificate serial:       065FA8FBD5BB5E59E19350D10B42B174D11D72C7
Authority key identifier: F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa
Signing time:             Sun 03 May 2026 02:58:29 +0000
ROA not before:           Sun 03 May 2026 02:53:29 +0000
ROA not after:            Sun 02 May 2027 02:58:29 +0000
asID:                     138120
IP address blocks:        175.111.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl
                          rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5f:a8:fb:d5:bb:5e:59:e1:93:50:d1:0b:42:b1:74:d1:1d:72:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B
        Validity
            Not Before: May  3 02:53:29 2026 GMT
            Not After : May  2 02:58:29 2027 GMT
        Subject: CN=55B992E346A760F2595D82BF14889E291FCB7896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:26:d3:23:80:ac:af:20:e6:45:b1:5a:d1:
                    12:50:bf:83:95:5d:9a:6c:47:79:af:b6:77:82:fb:
                    df:ab:a5:41:c2:aa:41:f9:a6:c7:3e:ab:5d:37:a3:
                    d4:39:b0:81:d8:96:5c:d7:7b:95:80:bb:af:18:84:
                    4f:6b:20:38:4c:e8:56:15:d3:23:92:1a:68:ba:5a:
                    29:b0:6d:9e:f7:46:54:f0:52:41:09:11:9f:4c:f7:
                    97:bd:33:6c:2f:16:29:d2:7d:f9:19:22:98:01:40:
                    c3:81:82:e8:a6:fe:28:3e:6e:10:f5:9d:8d:d9:45:
                    76:69:28:d7:85:d9:29:8f:49:e2:f5:f3:d4:a4:6c:
                    01:c6:19:71:50:26:72:b6:09:a8:7c:5e:66:00:5d:
                    f0:bf:b9:be:b4:08:6d:18:ff:ac:97:6a:e7:d6:d9:
                    41:0d:0c:e6:06:6f:51:32:84:f8:05:02:38:bf:14:
                    4a:f3:4e:a9:a7:e1:2e:80:b0:53:cd:14:75:87:b7:
                    74:d8:71:15:f8:c7:68:dd:1c:0d:8e:ef:73:14:fb:
                    17:2d:63:76:d5:66:64:f4:51:9c:7b:51:68:3b:e1:
                    73:54:30:de:37:f9:e1:b9:72:84:b1:a1:0c:da:ac:
                    ac:73:3c:b6:af:4f:3d:d9:5e:85:3b:fb:74:b6:6e:
                    d4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B9:92:E3:46:A7:60:F2:59:5D:82:BF:14:88:9E:29:1F:CB:78:96
            X509v3 Authority Key Identifier:
                keyid:F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:ed:55:8c:ee:bb:18:fe:46:d4:e1:9d:6a:3e:3c:c5:9f:01:
         0c:7b:5a:f2:13:7c:96:d0:e9:ba:71:22:c1:32:fd:29:2d:ad:
         88:b8:6b:cf:63:a8:36:e5:1b:39:f1:7f:ec:32:a4:54:26:39:
         cd:1e:63:96:2f:cc:f4:97:b9:52:8a:ee:23:55:b1:7f:11:48:
         98:ee:b9:de:f1:44:28:13:6f:89:80:77:a1:60:41:b8:c3:7f:
         f7:23:55:3c:84:b7:95:b0:87:0b:84:9e:04:27:60:78:1a:31:
         99:e3:c5:23:12:d2:c2:de:d3:12:8f:43:dd:a0:fe:92:34:ba:
         66:99:e8:21:85:80:f3:0a:b0:4a:9b:96:1e:e8:0f:48:1d:1c:
         2e:76:dc:71:31:58:12:31:af:02:b7:b5:a9:1a:c5:2d:73:e4:
         a7:44:d3:ad:be:fa:a7:fd:20:fa:04:db:99:ed:8c:14:55:56:
         3e:2c:ab:f3:f6:5d:ff:cd:33:c4:74:cc:ec:21:64:9b:1f:17:
         80:d1:dc:b7:a4:c2:72:b7:24:09:2f:5c:36:b1:6b:c6:7b:ba:
         73:09:00:79:f3:ab:f4:df:11:33:a2:86:48:47:8a:da:9a:49:
         95:5b:a2:4c:5c:b3:62:0e:fe:ac:b5:14:e5:a6:85:ff:78:1b:
         54:9b:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:18 2026 by rpki-client