Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e34382e302f32332d3234203d3e20313439373436.roa
File:                     3131392e322e34382e302f32332d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          Ncz5mFTKd4IE7kNXe9gBUAT0Icl+1z3zQB7YfSDFHBU=
Subject key identifier:   18:0F:35:20:68:4F:DD:A2:CC:28:4E:F9:E2:82:FF:BE:6E:54:33:75
Certificate issuer:       /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial:       19FE8C93E5189349AD96B2D8AB0E909EC102A490
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e34382e302f32332d3234203d3e20313439373436.roa
Signing time:             Sun 03 May 2026 02:59:35 +0000
ROA not before:           Sun 03 May 2026 02:54:35 +0000
ROA not after:            Sun 02 May 2027 02:59:35 +0000
asID:                     149746
IP address blocks:        119.2.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
                          rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fe:8c:93:e5:18:93:49:ad:96:b2:d8:ab:0e:90:9e:c1:02:a4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
        Validity
            Not Before: May  3 02:54:35 2026 GMT
            Not After : May  2 02:59:35 2027 GMT
        Subject: CN=180F3520684FDDA2CC284EF9E282FFBE6E543375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3b:ae:cf:29:a7:5e:fc:60:c8:38:07:14:4b:
                    10:6b:d4:12:cd:13:9e:25:02:6e:83:4e:68:cd:01:
                    fc:ca:f5:48:f5:1b:18:e4:8b:d4:4c:0a:99:15:82:
                    c3:27:3d:f2:89:a1:61:f7:7f:c9:a9:fc:e4:30:55:
                    ff:9b:af:88:51:24:13:59:7c:42:af:61:99:07:10:
                    0f:ff:29:62:07:f7:a1:7c:61:df:c0:a4:8d:86:b9:
                    27:32:d4:18:61:45:e9:9c:51:50:2e:49:0d:79:8a:
                    f4:1e:89:59:1a:99:a7:2b:8d:a2:ea:be:6d:4f:20:
                    b1:ff:bc:11:c1:e1:2c:e4:3c:b6:a4:2f:74:8b:12:
                    52:dc:fb:9e:3b:b8:0d:9d:62:9b:54:fd:78:b0:e3:
                    c1:df:c0:74:4c:70:26:3b:79:d1:aa:7d:6f:65:a4:
                    85:6d:35:a0:6a:73:b3:53:e7:c1:54:66:7e:8c:d7:
                    d9:b5:e3:3e:29:51:44:f1:28:4f:08:99:f6:ae:68:
                    aa:d0:ce:aa:94:4e:ef:b1:a1:1e:49:1d:76:c9:49:
                    bf:20:b3:f7:ca:0f:6c:71:30:59:9a:fe:c5:cf:37:
                    9c:c5:b1:8b:c4:69:9a:9a:83:3b:53:93:95:15:bc:
                    bd:26:a7:9e:6c:2b:91:78:1e:6a:1a:6a:b3:52:8a:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0F:35:20:68:4F:DD:A2:CC:28:4E:F9:E2:82:FF:BE:6E:54:33:75
            X509v3 Authority Key Identifier:
                keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e34382e302f32332d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:0c:b0:02:cf:7b:49:3c:a4:aa:0a:ae:6c:01:28:77:80:
         b1:b6:56:90:19:91:bd:34:cf:2a:b1:89:30:0f:b8:db:ea:0d:
         47:88:8d:dc:ee:9b:2c:a9:8f:18:07:b0:f1:0f:f7:1d:3d:e4:
         ba:52:3a:92:82:13:e8:77:bd:15:79:45:96:ff:cc:07:d4:6d:
         ed:29:c9:54:bb:af:9b:0c:22:a9:75:35:78:75:f3:8e:25:09:
         e9:42:02:04:48:6e:66:92:db:69:0b:8c:ae:f1:6f:d5:8f:7f:
         98:09:46:89:ef:91:5d:ac:f0:5c:56:6d:35:40:f3:22:fb:64:
         92:04:da:94:d3:41:be:2a:b0:bc:a9:d3:02:61:a5:3c:dc:91:
         dc:f6:12:7d:c9:b3:04:8e:be:0f:e3:5c:5b:50:35:8e:ec:bd:
         0e:60:5c:a6:80:79:f1:ea:92:02:4e:94:60:a5:75:34:ac:83:
         ce:c6:17:29:fd:a6:32:5e:46:50:47:d9:a6:fc:89:12:11:c0:
         0e:36:1b:4e:7f:32:25:e8:a4:f2:77:2e:c0:a7:d5:1c:d0:3c:
         32:1c:3a:44:08:f2:e5:a2:d3:5c:3d:41:bd:29:28:8f:75:b1:
         6e:95:d9:da:63:bb:50:85:65:ce:7c:19:36:a9:73:5e:47:f7:
         34:ee:ea:38
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUGf6Mk+UYk0mtlrLYqw6QnsECpJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM4QzU2RUQxRUEwQzZGOTM5MUNEOTAwOEU3OENERjM4
MUMyNzIwQjAeFw0yNjA1MDMwMjU0MzVaFw0yNzA1MDIwMjU5MzVaMDMxMTAvBgNV
BAMTKDE4MEYzNTIwNjg0RkREQTJDQzI4NEVGOUUyODJGRkJFNkU1NDMzNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLO67PKade/GDIOAcUSxBr1BLN
E54lAm6DTmjNAfzK9Uj1Gxjki9RMCpkVgsMnPfKJoWH3f8mp/OQwVf+br4hRJBNZ
fEKvYZkHEA//KWIH96F8Yd/ApI2GuScy1BhhRemcUVAuSQ15ivQeiVkamacrjaLq
vm1PILH/vBHB4SzkPLakL3SLElLc+547uA2dYptU/Xiw48HfwHRMcCY7edGqfW9l
pIVtNaBqc7NT58FUZn6M19m14z4pUUTxKE8ImfauaKrQzqqUTu+xoR5JHXbJSb8g
s/fKD2xxMFma/sXPN5zFsYvEaZqagztTk5UVvL0mp55sK5F4HmoaarNSioyVAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUGA81IGhP3aLMKE754oL/vm5UM3UwHwYDVR0j
BBgwFoAUjIxW7R6gxvk5HNkAjnjN84HCcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWVhN2ExMTUtYjhiOC00OTBiLTgzMjAtYzllNTlhMTAwM2RkLzAvOEM4QzU2RUQx
RUEwQzZGOTM5MUNEOTAwOEU3OENERjM4MUMyNzIwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84QzhDNTZFRDFFQTBDNkY5MzkxQ0Q5MDA4RTc4Q0RGMzgxQzI3
MjBCLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04
MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzEzOTJlMzIyZTM0MzgyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzMTM0MzkzNzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF3AjAwDQYJKoZIhvcN
AQELBQADggEBAFBdDLACz3tJPKSqCq5sASh3gLG2VpAZkb00zyqxiTAPuNvqDUeI
jdzumyypjxgHsPEP9x095LpSOpKCE+h3vRV5RZb/zAfUbe0pyVS7r5sMIql1NXh1
844lCelCAgRIbmaS22kLjK7xb9WPf5gJRonvkV2s8FxWbTVA8yL7ZJIE2pTTQb4q
sLyp0wJhpTzckdz2En3JswSOvg/jXFtQNY7svQ5gXKaAefHqkgJOlGCldTSsg87G
Fyn9pjJeRlBH2ab8iRIRwA42G05/MiXopPJ3LsCn1RzQPDIcOkQI8uWi01w9Qb0p
KI91sW6V2dpju1CFZc58GTapc15H9zTu6jg=
-----END CERTIFICATE-----
Generated at Wed May 13 05:15:01 2026 by rpki-client