Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa
File:                     3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier:          g2Try/rsWXQysWh1yUTGg946lXBgye9fJxj3oMw4maU=
Subject key identifier:   18:E2:A8:19:1B:64:83:12:F1:84:1E:A3:41:F9:06:63:9C:48:67:12
Certificate issuer:       /CN=822159966075595E4F7698AB063AA58F2CE6EFF6
Certificate serial:       1F1F953637867D14E57E72608054A7D4B34FC000
Authority key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa
Signing time:             Sun 03 May 2026 02:59:50 +0000
ROA not before:           Sun 03 May 2026 02:54:50 +0000
ROA not after:            Sun 02 May 2027 02:59:50 +0000
asID:                     138077
IP address blocks:        117.103.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl
                          rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1f:95:36:37:86:7d:14:e5:7e:72:60:80:54:a7:d4:b3:4f:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822159966075595E4F7698AB063AA58F2CE6EFF6
        Validity
            Not Before: May  3 02:54:50 2026 GMT
            Not After : May  2 02:59:50 2027 GMT
        Subject: CN=18E2A8191B648312F1841EA341F906639C486712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:aa:71:68:2f:03:75:7d:c6:55:ed:50:4a:
                    39:ab:e6:b3:c5:ce:20:3b:e6:03:d6:64:ff:75:4b:
                    a5:6f:11:9a:49:5e:d4:83:b2:4c:94:1d:5b:a2:d1:
                    bc:d8:19:79:ec:2f:22:03:7f:ef:13:4e:ba:e0:53:
                    10:15:e6:f0:15:7f:11:b6:3b:b9:02:60:79:7c:b7:
                    26:23:22:88:9d:49:03:d1:48:86:a4:66:56:0e:2c:
                    8d:3e:35:c4:8a:84:01:97:ef:6e:c3:86:86:92:9d:
                    46:eb:06:44:ff:d3:6e:ae:8b:1f:0c:6d:e0:7f:e4:
                    34:4b:a6:fd:19:a0:32:0e:12:34:95:dc:ad:ac:5e:
                    4d:30:91:18:19:88:9c:68:8e:b1:b4:38:cb:37:e7:
                    98:ec:76:fd:93:35:68:9f:18:5f:89:ea:78:b1:99:
                    a8:5d:f0:55:07:bd:96:a4:57:68:18:6d:15:e0:86:
                    25:33:fc:02:6c:72:9b:d3:76:a6:7c:7d:40:ac:55:
                    03:97:e9:cb:13:7b:f7:f4:7b:3a:9f:37:02:41:f8:
                    5f:c9:55:f3:c3:1d:ea:ca:b6:ae:91:c0:f8:ab:f4:
                    b9:25:20:c2:a6:43:93:b5:82:1a:7a:d5:3a:8b:c0:
                    8e:8d:24:cf:8b:ca:ba:1b:52:02:5f:ca:ac:d0:a8:
                    ae:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:A8:19:1B:64:83:12:F1:84:1E:A3:41:F9:06:63:9C:48:67:12
            X509v3 Authority Key Identifier:
                keyid:82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:72:e4:4f:64:83:87:0e:85:c1:ff:4d:b7:78:52:e4:26:3b:
         07:a1:9e:23:41:6c:45:39:54:f7:cd:50:a5:a3:b3:08:25:3d:
         74:37:d5:63:8f:20:d0:87:6d:91:db:f5:d4:2a:3b:5a:66:35:
         80:8c:9e:f6:f8:be:ae:5b:76:11:2b:0b:0b:19:aa:ba:2e:84:
         17:df:1e:5a:2c:f5:a5:80:87:f3:ed:d8:65:fe:49:b2:63:24:
         b9:63:ae:45:ec:57:bb:9f:f3:e6:83:3c:58:5b:2f:c9:17:80:
         7a:ce:29:61:03:84:82:75:95:7c:f1:ca:c3:a0:7c:ab:a6:58:
         ac:07:08:2a:e5:51:6d:07:b7:d1:cb:c1:78:63:46:0f:b0:d7:
         3a:7c:e5:da:80:f7:b5:a5:0d:d4:77:da:cb:d4:26:09:c6:18:
         a3:20:b4:e3:4d:b1:38:7a:01:79:df:c0:58:30:30:9e:fe:2f:
         12:12:55:f9:a7:9f:ff:0d:6f:d2:59:19:83:af:af:f2:8a:2f:
         08:16:ac:f7:f1:c9:6d:b5:b2:98:69:c3:8f:b7:45:fa:e3:38:
         1a:64:b4:de:6c:64:55:8d:48:d4:8f:dc:17:d2:84:ab:38:47:
         f6:9b:46:54:01:f4:a5:d6:63:be:ec:1a:04:dc:61:85:19:e2:
         8f:6f:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:38 2026 by rpki-client