Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34382e302f32342d3234203d3e203338373833.roa
File:                     3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier:          RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=
Subject key identifier:   56:30:B9:33:E8:05:5B:B9:D3:0E:CF:72:EA:6D:4E:F8:04:DE:9D:65
Certificate issuer:       /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37
Certificate serial:       6110F5F2BDE7B97DF9AF8B73125C518DE28E501D
Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34382e302f32342d3234203d3e203338373833.roa
Signing time:             Sun 03 May 2026 03:11:51 +0000
ROA not before:           Sun 03 May 2026 03:06:51 +0000
ROA not after:            Sun 02 May 2027 03:11:51 +0000
asID:                     38783
IP address blocks:        115.178.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl
                          rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:10:f5:f2:bd:e7:b9:7d:f9:af:8b:73:12:5c:51:8d:e2:8e:50:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37
        Validity
            Not Before: May  3 03:06:51 2026 GMT
            Not After : May  2 03:11:51 2027 GMT
        Subject: CN=5630B933E8055BB9D30ECF72EA6D4EF804DE9D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:a3:4c:57:61:14:a5:1e:c2:a7:c3:34:29:
                    4b:f5:a1:ec:31:e0:ae:a1:9f:04:98:85:09:a5:93:
                    5e:03:82:b2:f4:f9:13:91:15:98:f2:57:02:54:b3:
                    8d:67:b9:44:a9:2f:6b:b0:d4:1d:ed:6a:6b:06:e8:
                    17:9e:8f:66:ce:30:54:a0:89:2f:ed:fc:e9:f0:a2:
                    fe:64:87:c6:f8:d4:e3:11:16:6a:82:f6:6f:59:01:
                    34:79:29:d6:b2:62:a6:6e:d9:7a:34:48:0c:32:8a:
                    58:7c:d3:37:05:ea:1a:ca:df:50:a5:e8:96:96:f7:
                    92:e6:1e:7c:59:f1:4f:c3:be:ad:61:10:71:7b:27:
                    a7:62:11:7d:89:b9:e9:77:42:5b:da:81:4e:53:69:
                    ae:4b:0d:4f:b6:5b:07:a5:83:20:00:b8:ea:36:0c:
                    32:c8:45:9c:78:0d:8e:a8:07:fd:a2:03:44:4b:db:
                    3b:61:94:98:32:1e:aa:3d:92:80:b2:d2:53:52:65:
                    a5:4c:ba:d6:77:41:59:dd:25:5a:14:b6:c0:d7:92:
                    6c:a7:94:ff:8e:b3:36:d6:e2:3d:1b:2b:ba:02:38:
                    ca:47:fc:74:75:b0:8f:56:7d:a7:83:7d:17:27:8a:
                    c7:6a:e3:44:e1:60:e3:33:6e:0d:6f:60:7b:5f:c2:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:30:B9:33:E8:05:5B:B9:D3:0E:CF:72:EA:6D:4E:F8:04:DE:9D:65
            X509v3 Authority Key Identifier:
                keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34382e302f32342d3234203d3e203338373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:d3:bf:25:ab:6d:61:4e:d5:f5:2a:3b:ac:6e:c8:1a:cf:f6:
         53:6d:75:89:68:e9:6b:38:ab:97:f6:dc:aa:2b:7d:0d:51:18:
         a5:e6:f6:b2:e5:55:7b:bd:40:94:48:bd:cd:62:f5:ae:6c:2c:
         f4:b7:18:94:db:d5:6d:d4:12:a3:b1:ca:9e:86:43:3b:52:f1:
         39:0d:1f:9b:12:89:5d:18:75:36:26:c2:10:75:3a:a0:ea:6f:
         f8:0b:25:e7:cd:39:9a:5c:51:21:81:32:a4:33:f9:4b:d3:04:
         d9:b9:b5:07:3b:51:13:1f:b5:ca:a0:98:de:f4:da:9c:a5:f0:
         b1:d4:df:18:6a:88:f1:b9:5a:b2:e2:56:5f:26:4b:53:79:ae:
         0c:2e:81:14:88:04:52:91:81:1e:9d:77:b1:fe:22:dc:3e:5a:
         33:f9:02:39:2b:4b:05:90:be:aa:be:67:02:bc:dc:b2:ba:c3:
         66:4a:cf:a6:b6:5c:7c:15:e2:b4:ae:c3:94:82:49:c6:30:e9:
         ad:37:8d:41:2a:8f:f1:61:97:c4:b7:f0:80:bc:4a:14:78:c0:
         07:96:e7:04:54:a0:b1:ce:9f:2e:e4:a6:8d:e4:cd:61:b0:a5:
         a1:b5:ab:fd:8c:81:e8:4e:d1:32:0d:6d:0b:62:23:eb:5a:a4:
         78:dd:d1:c3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYRD18r3nuX35r4tzElxRjeKOUB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE
OUZEN0YzNzAeFw0yNjA1MDMwMzA2NTFaFw0yNzA1MDIwMzExNTFaMDMxMTAvBgNV
BAMTKDU2MzBCOTMzRTgwNTVCQjlEMzBFQ0Y3MkVBNkQ0RUY4MDRERTlENjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkM6NMV2EUpR7Cp8M0KUv1oewx
4K6hnwSYhQmlk14DgrL0+RORFZjyVwJUs41nuUSpL2uw1B3tamsG6Beej2bOMFSg
iS/t/Onwov5kh8b41OMRFmqC9m9ZATR5KdayYqZu2Xo0SAwyilh80zcF6hrK31Cl
6JaW95LmHnxZ8U/Dvq1hEHF7J6diEX2Juel3QlvagU5Taa5LDU+2WwelgyAAuOo2
DDLIRZx4DY6oB/2iA0RL2zthlJgyHqo9koCy0lNSZaVMutZ3QVndJVoUtsDXkmyn
lP+OszbW4j0bK7oCOMpH/HR1sI9WfaeDfRcnisdq40ThYOMzbg1vYHtfwpd3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVjC5M+gFW7nTDs9y6m1O+ATenWUwHwYDVR0j
BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0
REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3
RjM3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RlZmU4ZjliLThjMzQtNDM0Mi1h
MGZlLWNhMTA3NWZiYTVmZi8wLzMxMzEzNTJlMzEzNzM4MmUzNDM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHOyMDANBgkqhkiG
9w0BAQsFAAOCAQEAQNO/JattYU7V9So7rG7IGs/2U211iWjpazirl/bcqit9DVEY
peb2suVVe71AlEi9zWL1rmws9LcYlNvVbdQSo7HKnoZDO1LxOQ0fmxKJXRh1NibC
EHU6oOpv+Asl5805mlxRIYEypDP5S9ME2bm1BztREx+1yqCY3vTanKXwsdTfGGqI
8blasuJWXyZLU3muDC6BFIgEUpGBHp13sf4i3D5aM/kCOStLBZC+qr5nArzcsrrD
ZkrPprZcfBXitK7DlIJJxjDprTeNQSqP8WGXxLfwgLxKFHjAB5bnBFSgsc6fLuSm
jeTNYbClobWr/YyB6E7RMg1tC2Ij61qkeN3Rww==
-----END CERTIFICATE-----
Generated at Wed May 13 03:52:44 2026 by rpki-client