Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32382e302f32342d3234203d3e20313439373436.roa
File:                     3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          WbiPm+iTkpPEW0o79B7kdDb8z2SOPBUszZwMsNkDB2k=
Subject key identifier:   2F:09:9E:A0:1F:06:77:72:03:3D:79:A6:84:EF:EA:1F:CB:77:13:F3
Certificate issuer:       /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial:       6171BDDD1400ADD52E4B5AE8DA84BC43B6533620
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32382e302f32342d3234203d3e20313439373436.roa
Signing time:             Sun 03 May 2026 02:59:30 +0000
ROA not before:           Sun 03 May 2026 02:54:30 +0000
ROA not after:            Sun 02 May 2027 02:59:30 +0000
asID:                     149746
IP address blocks:        111.68.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
                          rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:71:bd:dd:14:00:ad:d5:2e:4b:5a:e8:da:84:bc:43:b6:53:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
        Validity
            Not Before: May  3 02:54:30 2026 GMT
            Not After : May  2 02:59:30 2027 GMT
        Subject: CN=2F099EA01F067772033D79A684EFEA1FCB7713F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:6a:23:b8:71:55:82:7d:e8:81:b9:72:31:
                    97:2a:07:84:e9:42:a6:80:ed:6f:d9:df:f1:6d:1d:
                    59:a7:a8:e8:ae:53:99:f7:58:d3:ab:7a:9d:5e:70:
                    d8:fb:ee:e8:2e:f0:fb:43:d9:66:5f:97:d8:e4:e4:
                    4b:10:4d:dd:43:4f:51:7b:5c:26:e8:1d:32:4a:47:
                    b6:d8:ab:bb:93:4c:53:58:f6:2e:23:98:42:a6:38:
                    da:f7:ba:28:29:de:c0:bb:57:c2:0a:6f:6b:8c:0c:
                    67:9a:cf:64:37:2b:b4:ab:2d:57:90:8e:08:02:6c:
                    87:e1:a6:50:61:ec:16:cb:3e:73:1d:80:41:62:56:
                    9e:ef:b6:2e:82:a8:16:53:3b:e5:15:74:53:f9:1f:
                    47:30:b0:6b:d5:cd:76:f6:01:bf:18:40:bd:d1:59:
                    af:62:7f:18:e7:d7:d6:f6:10:c8:b0:39:4e:ae:d4:
                    0a:ef:a2:2d:cb:c6:59:3d:0d:be:bc:52:b6:a3:00:
                    ea:2a:81:35:0b:e6:d5:1b:05:3f:eb:b1:f0:36:56:
                    49:17:e5:bc:4b:cc:08:72:04:91:9c:9e:70:2d:8b:
                    4f:af:9c:9d:95:85:c8:9a:1b:67:3f:db:64:d1:59:
                    fa:25:a3:24:e5:29:29:7a:00:01:35:1b:1d:32:ed:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:09:9E:A0:1F:06:77:72:03:3D:79:A6:84:EF:EA:1F:CB:77:13:F3
            X509v3 Authority Key Identifier:
                keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32382e302f32342d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:e5:c9:5c:7b:15:9b:ac:d9:30:9b:24:1b:61:2c:c8:ca:a8:
         4b:85:61:a9:0d:89:a6:e5:8e:9c:5f:db:78:3e:a3:49:d9:d8:
         6f:42:ee:90:6b:5e:1d:2d:ba:cb:3c:01:88:ad:ca:89:90:33:
         aa:e6:7c:cc:35:01:f5:8f:95:e6:e3:5f:2e:cf:f1:83:86:f9:
         f3:a3:5f:41:07:7c:46:b4:a2:9e:39:6f:5e:ff:25:ce:3b:16:
         2d:80:e3:7a:72:0f:b9:36:08:58:b8:ad:3f:74:b7:88:b7:33:
         9a:54:f7:00:0f:79:99:6f:f2:84:8a:fb:f7:81:e2:7a:79:74:
         2d:ec:83:12:ff:0e:13:96:11:0b:b7:c9:00:e6:ee:a1:36:51:
         50:5c:8e:ca:7a:e5:e0:5a:7c:09:68:0b:d1:30:23:e4:91:75:
         8e:fa:a6:06:28:98:5e:b1:8f:6f:45:4c:50:a8:85:a5:c4:fa:
         ec:4a:e4:bc:9f:88:56:c7:31:6e:a4:6d:39:fa:66:55:75:2f:
         39:4c:d4:dc:59:c5:35:ff:28:e1:15:2f:c2:8b:b3:95:93:85:
         e5:57:53:05:86:2f:61:cf:26:fd:f8:76:24:3f:ce:c3:fb:c9:
         ba:70:27:1a:7c:f7:03:88:b1:30:a1:6e:7e:f6:6e:ba:ed:5e:
         2d:bc:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:47 2026 by rpki-client