Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa
File:                     3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (raw, json)
Hash identifier:          hA+ZmrATAmvRq+AW4JB/hKKoTjrXINAaVyYkBOTFDh0=
Subject key identifier:   83:DB:68:0D:AD:37:2F:07:44:C8:48:68:E2:CC:EC:4C:4E:F4:92:6B
Certificate issuer:       /CN=E66029B9A162C470EEC1DFA42227448C5628C7C0
Certificate serial:       6A2DFC56A1AD03BE0D6221418403E77F1551F498
Authority key identifier: E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa
Signing time:             Sun 03 May 2026 02:58:54 +0000
ROA not before:           Sun 03 May 2026 02:53:54 +0000
ROA not after:            Sun 02 May 2027 02:58:54 +0000
asID:                     23756
IP address blocks:        117.102.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl
                          rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2d:fc:56:a1:ad:03:be:0d:62:21:41:84:03:e7:7f:15:51:f4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E66029B9A162C470EEC1DFA42227448C5628C7C0
        Validity
            Not Before: May  3 02:53:54 2026 GMT
            Not After : May  2 02:58:54 2027 GMT
        Subject: CN=83DB680DAD372F0744C84868E2CCEC4C4EF4926B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:32:4f:d9:ac:58:c2:a7:f4:7c:82:64:cc:e0:
                    ea:77:be:e9:70:35:7c:ca:45:ae:44:e4:78:cd:44:
                    3b:15:12:ee:20:3f:60:d7:5e:15:61:bb:c1:61:c4:
                    dd:ed:02:ce:0f:51:38:e3:36:d2:96:ce:97:ab:67:
                    b6:13:47:47:e5:5d:05:58:a1:c2:78:21:bb:05:dc:
                    c4:ab:b9:20:87:75:6f:36:de:85:99:d8:91:fe:17:
                    50:94:38:67:90:ae:ca:81:d7:03:76:45:25:7b:9b:
                    b8:81:71:aa:4e:f2:fb:34:50:76:fb:8a:25:0e:71:
                    04:50:98:08:4f:76:34:71:51:fa:53:67:8e:2d:43:
                    2e:ca:04:a0:db:13:08:26:18:b0:26:e9:4c:84:7f:
                    d6:c9:fd:8b:c3:4a:8c:28:0d:9f:8c:26:ea:73:80:
                    bf:ec:a6:bc:a6:69:31:a3:0d:bc:ee:e5:21:50:91:
                    8f:e5:2c:33:eb:e3:43:57:71:c6:3e:9d:ff:ac:0d:
                    c4:70:2f:79:d8:32:c6:b0:90:14:d6:c0:6c:c1:d2:
                    af:b8:28:8b:11:89:f4:e9:d9:b8:9a:9d:90:b3:c0:
                    dc:d7:1c:6a:34:2c:47:9b:08:c5:eb:5b:d7:86:2f:
                    cb:cb:cf:8b:c4:f6:d3:f8:0e:1d:84:ab:f0:9d:ae:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DB:68:0D:AD:37:2F:07:44:C8:48:68:E2:CC:EC:4C:4E:F4:92:6B
            X509v3 Authority Key Identifier:
                keyid:E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:c4:65:41:b3:f6:8a:aa:d4:e3:e4:9e:cc:be:65:ab:87:a3:
         9b:40:9f:c3:55:a9:b0:d6:80:97:40:03:5a:8a:f0:43:b6:84:
         c8:2b:53:09:04:9e:f3:70:7c:84:a3:20:49:21:b2:3b:52:c7:
         a2:26:76:8d:a7:7e:83:8a:ef:17:e4:90:4b:7b:90:6f:e2:93:
         a3:6a:60:f3:8f:73:22:46:66:21:f8:50:17:3d:f6:88:c4:38:
         03:96:81:57:98:ca:41:93:f0:5a:85:9d:60:95:b6:3c:6e:77:
         21:b9:3e:12:0a:40:5e:b6:e8:9b:25:1c:49:c0:51:72:e9:16:
         14:8e:3b:e1:79:a4:68:d3:5f:4e:6c:e6:bf:af:69:d0:0d:03:
         38:87:be:00:85:03:f9:0a:4c:b9:4d:fd:ba:9e:2a:30:8f:82:
         fe:97:09:df:58:58:72:3e:53:9b:4a:e3:dd:bd:48:5b:7f:fc:
         51:80:00:91:27:e7:37:1b:af:3a:33:40:5a:5c:bc:11:9c:27:
         c4:d3:20:bb:12:35:37:cc:5e:01:72:d6:74:6d:5d:ff:09:86:
         a0:c2:0a:1a:cd:13:94:8f:fb:33:8c:0a:40:e9:c5:ad:b2:92:
         20:94:38:ac:dd:02:45:d9:58:49:0a:c1:10:49:b0:b7:47:32:
         5c:b8:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:04:07 2026 by rpki-client