Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32332d3233203d3e203538333639.roa
File:                     3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          2r/DHoZQcARca/HdvnPXzAwXVYdOhWG0QN9UGO2QPik=
Subject key identifier:   68:01:C6:2D:ED:9F:22:1D:ED:73:4C:66:0A:B5:05:92:A0:92:A7:5F
Certificate issuer:       /CN=93D5F733B129227DEDF25AC1218D70CEB9366645
Certificate serial:       2A76416FACAC6DC1F6DD10E7E0CE2FFD110DAF15
Authority key identifier: 93:D5:F7:33:B1:29:22:7D:ED:F2:5A:C1:21:8D:70:CE:B9:36:66:45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93D5F733B129227DEDF25AC1218D70CEB9366645.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32332d3233203d3e203538333639.roa
Signing time:             Sun 03 May 2026 03:08:02 +0000
ROA not before:           Sun 03 May 2026 03:03:02 +0000
ROA not after:            Sun 02 May 2027 03:08:02 +0000
asID:                     58369
IP address blocks:        115.187.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.crl
                          rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93D5F733B129227DEDF25AC1218D70CEB9366645.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:76:41:6f:ac:ac:6d:c1:f6:dd:10:e7:e0:ce:2f:fd:11:0d:af:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D5F733B129227DEDF25AC1218D70CEB9366645
        Validity
            Not Before: May  3 03:03:02 2026 GMT
            Not After : May  2 03:08:02 2027 GMT
        Subject: CN=6801C62DED9F221DED734C660AB50592A092A75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:25:88:a3:1c:b4:38:dc:84:06:d6:cc:2f:
                    ce:c2:5f:d7:9e:2a:f3:9a:32:c4:2f:01:70:3c:26:
                    ea:93:51:45:cb:20:c3:1d:aa:dc:3d:87:36:85:a8:
                    d8:72:07:c0:14:48:ae:da:9e:a1:e9:5d:fc:c6:7e:
                    6e:33:8d:b4:24:f8:c4:e3:cf:c4:76:30:34:49:7d:
                    5b:6f:dd:ef:7d:e0:ba:0d:b7:c9:b1:99:0e:23:77:
                    ff:3d:15:e3:3f:80:3e:36:07:0c:27:5a:e0:2c:b9:
                    cc:0c:5e:75:72:14:03:1b:00:cd:d2:ef:a9:ec:f8:
                    87:76:29:da:0f:d5:91:5a:19:a0:65:ed:e8:d3:d5:
                    7b:59:c5:9b:25:d2:02:d3:8a:79:e5:48:97:00:95:
                    7a:1f:e4:30:40:34:44:59:e2:9c:74:3f:c5:df:3f:
                    95:a6:2a:7b:d3:fc:a6:fc:1e:ca:d2:b6:8d:f1:e5:
                    22:b3:1d:9e:bf:60:82:b8:0f:fd:cc:10:66:b5:0c:
                    f4:fe:a9:14:26:1f:4b:9e:1b:f9:6a:43:5f:f3:a4:
                    2c:bf:ed:ac:8a:78:87:22:32:5e:40:36:5c:d5:08:
                    c2:8b:bd:15:12:65:c3:e3:8e:5f:b9:a4:3c:f6:c0:
                    2f:26:f1:85:e0:f0:9e:d4:d6:94:62:5e:1e:28:ed:
                    70:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:01:C6:2D:ED:9F:22:1D:ED:73:4C:66:0A:B5:05:92:A0:92:A7:5F
            X509v3 Authority Key Identifier:
                keyid:93:D5:F7:33:B1:29:22:7D:ED:F2:5A:C1:21:8D:70:CE:B9:36:66:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93D5F733B129227DEDF25AC1218D70CEB9366645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.187.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:53:af:39:91:0c:44:60:76:b7:4b:67:ba:6f:2d:55:e4:08:
         50:16:1f:e8:39:8c:28:fc:6a:87:e6:43:17:ca:d9:e2:41:68:
         97:1f:09:b8:15:86:0e:a8:5b:a2:0d:dd:f4:ff:9b:60:e6:76:
         3a:09:a1:17:d3:86:29:ec:cf:b9:ea:a2:4d:85:21:fb:74:61:
         68:5b:40:db:b8:5a:3f:dc:17:88:ca:cd:5b:66:c2:de:2f:93:
         35:9f:0a:00:a1:e5:fe:46:bd:f6:1c:30:7b:d1:06:c1:b3:1f:
         89:21:8c:2a:fb:3f:a3:c2:80:81:0d:e5:38:2b:d2:a5:43:41:
         7d:10:c8:6d:d3:5c:82:e8:6c:bd:34:84:62:dc:e8:9b:47:93:
         fb:c5:a3:8d:86:64:6e:f9:d8:30:dd:b5:67:ca:93:67:f6:82:
         86:f4:d3:33:c0:9f:ad:72:16:10:c8:18:f6:69:06:f8:8f:cf:
         67:65:a5:89:8e:5d:ee:a0:41:84:4f:d4:e4:10:c6:13:fa:0f:
         fc:dd:c7:0e:ce:8b:2f:2e:1e:2b:b6:00:d8:40:d6:75:8b:aa:
         1a:11:7e:9d:a9:79:75:58:81:ee:7f:7b:a5:72:6b:72:12:74:
         f9:b4:c7:f6:3a:ee:fa:a0:3e:34:12:4f:40:8b:d2:61:26:a1:
         fe:e0:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:29 2026 by rpki-client