Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa
File:                     3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (raw, json)
Hash identifier:          sfi5wZHa7EFMZctUVQihd5OvgHWotWx/JrU33FAshF0=
Subject key identifier:   DC:DD:D2:60:5C:9C:05:8E:B0:8A:99:3A:4B:8C:AC:E3:23:43:81:12
Certificate issuer:       /CN=EBF23572810F8726C4B72E50589964A910C50B4B
Certificate serial:       7D858E2CC2453700561048FE389AAB5E828C274C
Authority key identifier: EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa
Signing time:             Sun 03 May 2026 03:09:40 +0000
ROA not before:           Sun 03 May 2026 03:04:40 +0000
ROA not after:            Sun 02 May 2027 03:09:40 +0000
asID:                     45295
IP address blocks:        113.212.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:85:8e:2c:c2:45:37:00:56:10:48:fe:38:9a:ab:5e:82:8c:27:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF23572810F8726C4B72E50589964A910C50B4B
        Validity
            Not Before: May  3 03:04:40 2026 GMT
            Not After : May  2 03:09:40 2027 GMT
        Subject: CN=DCDDD2605C9C058EB08A993A4B8CACE323438112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:c8:d5:af:8e:8e:94:e6:f2:3a:77:8f:c0:
                    fb:ab:d7:13:7a:d5:b7:30:7e:89:b6:ff:12:19:3e:
                    4f:d6:1e:20:d2:d5:68:e4:1c:33:5b:da:49:a5:d5:
                    5d:98:60:e1:3c:54:19:23:7b:4d:79:d1:40:e5:f5:
                    c0:ff:da:18:21:79:ce:b5:17:99:c6:22:12:e8:46:
                    bc:80:64:73:7b:ac:68:d6:7f:1f:1b:2d:a2:f1:e5:
                    e2:c0:dd:d0:9a:ab:43:17:b0:88:9c:c7:fb:33:00:
                    ca:20:e9:05:1d:a1:d6:e0:50:46:ad:c9:01:8d:f7:
                    d5:5d:fe:55:66:19:7f:8b:aa:1d:45:32:fd:d2:62:
                    1e:1a:c1:db:74:47:95:b6:b7:b9:7a:83:4d:1a:08:
                    81:7d:2d:f7:35:95:7c:8c:fe:96:c9:92:aa:66:b9:
                    2d:74:1b:28:10:ff:a3:b5:bf:f1:48:36:98:f0:f2:
                    b4:b4:22:26:67:c7:3c:e1:40:43:9c:c0:67:35:2e:
                    a2:ab:62:e4:cd:a8:6e:92:b1:c6:bd:3b:15:fb:f1:
                    42:9c:d4:d9:f8:c5:c7:e4:79:b1:9c:22:ae:7a:28:
                    31:c4:c5:79:a9:8b:6a:61:51:c2:4f:14:d7:aa:29:
                    6c:1a:2f:fa:23:04:ef:16:8f:8d:91:e5:a7:43:2d:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DD:D2:60:5C:9C:05:8E:B0:8A:99:3A:4B:8C:AC:E3:23:43:81:12
            X509v3 Authority Key Identifier:
                keyid:EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:ea:da:7f:80:f5:90:4f:99:51:29:13:d5:ec:70:b2:a9:
         0d:d0:9e:03:83:f8:2b:b0:3a:ab:f8:71:7a:cc:bb:b4:1c:b6:
         dd:ab:61:c1:e1:b4:d7:c5:c7:66:f0:df:f6:37:1f:ce:00:80:
         c8:00:67:9d:08:3a:3b:75:9f:2a:a7:9d:da:76:9e:76:ee:1b:
         57:5d:02:47:8f:c9:da:aa:a6:bd:b0:01:3f:7b:4d:b8:36:48:
         92:94:d6:f3:f0:eb:d3:bc:35:70:04:b9:64:69:e4:1f:10:ee:
         0f:2c:dd:2d:d7:a5:7d:1d:36:91:b7:2e:b4:79:d7:9a:93:f5:
         35:1f:6a:62:7d:fe:3e:c3:63:06:06:45:3b:bb:b4:9f:63:55:
         56:1b:a3:2c:66:3e:3c:d7:c5:fb:bb:08:3b:fc:69:64:f4:c7:
         c7:6c:78:96:42:61:39:af:2a:ba:44:da:83:48:21:b1:30:8f:
         93:3a:3b:22:ee:4c:e0:1a:7b:99:34:f5:3c:36:01:43:f7:e6:
         6e:53:14:cd:f6:3d:45:42:de:c6:e6:ff:51:f9:44:47:fa:f1:
         95:d3:8b:26:bc:75:87:38:9f:f2:ff:ec:1c:ad:8e:d7:0f:95:
         de:6d:06:63:2a:c6:c5:2f:3d:f7:e0:64:cf:a3:97:43:0b:f9:
         2e:a1:a7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:27 2026 by rpki-client