Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e35312e302f32342d3234203d3e20313439373436.roa
File:                     3131392e322e35312e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          u83G2z/OgRr1JotcRgVSQt+wVg3zOD/8jjA3e23r1pQ=
Subject key identifier:   EC:34:2C:84:54:6D:01:66:76:E0:17:E4:32:AF:F2:07:FD:33:55:5D
Certificate issuer:       /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial:       2F131EC637CAF7F7A097AB6BD177DE463D1E4DED
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e35312e302f32342d3234203d3e20313439373436.roa
Signing time:             Sun 03 May 2026 02:59:36 +0000
ROA not before:           Sun 03 May 2026 02:54:36 +0000
ROA not after:            Sun 02 May 2027 02:59:36 +0000
asID:                     149746
IP address blocks:        119.2.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
                          rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:13:1e:c6:37:ca:f7:f7:a0:97:ab:6b:d1:77:de:46:3d:1e:4d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
        Validity
            Not Before: May  3 02:54:36 2026 GMT
            Not After : May  2 02:59:36 2027 GMT
        Subject: CN=EC342C84546D016676E017E432AFF207FD33555D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b6:fe:56:2e:f9:20:49:ce:ea:b9:a2:51:22:
                    18:b5:89:3e:90:c3:fd:77:14:c0:d4:0d:59:d6:4e:
                    78:79:da:1d:fc:4b:49:20:62:76:bb:03:1a:5d:49:
                    62:06:24:29:4b:92:5d:2f:08:c8:cf:8d:63:d7:78:
                    26:5c:f1:de:75:5c:06:ea:c8:c8:0a:43:a0:0a:2f:
                    a7:18:10:66:ea:51:1c:38:2f:cb:14:4c:a3:89:2a:
                    db:e8:53:26:6d:b8:74:2f:56:bb:45:cf:9e:65:03:
                    1f:2a:55:0c:7a:cd:a6:e3:ba:e9:ce:7e:6e:0a:01:
                    6f:45:cd:f0:3f:83:60:18:c7:bc:a7:cd:b6:89:59:
                    2f:bb:91:14:c5:87:cd:0f:42:1b:4a:ff:58:b5:b0:
                    e8:71:36:e6:ed:30:ef:45:11:5b:24:8b:39:29:71:
                    2e:1b:03:a0:ec:ff:d1:d0:09:7d:eb:0b:e4:94:9c:
                    c0:a4:83:7a:4d:fc:63:a9:e5:55:0b:b7:a8:ba:32:
                    ae:82:49:12:75:9f:98:10:0d:18:20:40:f5:5f:80:
                    18:e3:8d:a4:ef:48:d6:11:c0:13:c8:09:22:13:4d:
                    e5:ef:65:06:86:ec:f3:65:92:d2:4e:ce:3a:78:cb:
                    39:4d:36:f9:86:fc:c6:9a:75:08:91:13:7f:f6:a6:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:34:2C:84:54:6D:01:66:76:E0:17:E4:32:AF:F2:07:FD:33:55:5D
            X509v3 Authority Key Identifier:
                keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e35312e302f32342d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:0c:65:73:9a:f7:b2:05:37:c8:eb:77:52:31:f4:d5:6b:0d:
         2a:21:e7:3c:18:27:41:be:85:f2:73:fd:01:e4:90:75:54:27:
         74:55:9c:75:44:ce:cc:66:41:f1:f6:9c:5a:c3:55:1b:d8:a3:
         60:4c:a3:99:43:32:cf:65:52:23:aa:d2:85:19:d2:35:97:06:
         16:a5:ec:9c:0c:36:eb:69:5c:4c:a8:5a:b5:33:17:72:73:ac:
         af:65:1a:15:d5:52:4f:cd:84:7e:25:c4:7b:ba:db:29:e7:06:
         38:05:cb:1d:f5:f2:b3:4e:8a:f5:c7:38:38:a5:10:21:87:cd:
         30:f3:5b:45:fe:47:ac:eb:29:d7:7a:09:93:08:66:4d:a0:1d:
         2b:79:88:fc:62:50:ef:44:6c:73:6a:d3:41:0e:37:1a:6e:0d:
         ce:31:cf:5a:12:10:9b:86:ce:a1:9a:fc:67:7f:88:c5:2a:a5:
         79:a4:ac:28:93:e9:37:53:1c:aa:2c:47:6b:c9:89:6b:ca:e8:
         b8:08:bb:ef:38:fd:3e:66:6c:a6:de:5e:76:59:f8:e4:61:3a:
         81:3b:e4:b8:78:0f:7f:43:de:ea:30:03:5a:be:a2:81:62:47:
         ce:57:36:4b:2a:fd:b3:93:07:e6:62:1e:ea:8f:9c:b4:4c:17:
         70:00:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:37:51 2026 by rpki-client