Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
File:                     3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier:          nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=
Subject key identifier:   B3:2E:3E:EB:0B:26:B6:7E:13:9F:22:12:00:48:24:28:66:DE:19:F4
Certificate issuer:       /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37
Certificate serial:       037C891A9A36CD9A4503656A47344F90CF394E5B
Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
Signing time:             Sun 03 May 2026 03:11:52 +0000
ROA not before:           Sun 03 May 2026 03:06:52 +0000
ROA not after:            Sun 02 May 2027 03:11:52 +0000
asID:                     38783
IP address blocks:        115.178.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl
                          rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7c:89:1a:9a:36:cd:9a:45:03:65:6a:47:34:4f:90:cf:39:4e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37
        Validity
            Not Before: May  3 03:06:52 2026 GMT
            Not After : May  2 03:11:52 2027 GMT
        Subject: CN=B32E3EEB0B26B67E139F22120048242866DE19F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:a8:f2:dc:42:b7:4f:e3:b2:28:ce:97:e7:
                    cc:d8:30:81:c3:36:c1:b0:0d:68:e6:46:c6:a8:e0:
                    d0:04:ca:ba:7f:1f:d7:29:19:05:f0:5d:ca:46:6c:
                    ab:e6:5a:16:0e:5e:c5:7b:d4:65:c7:cc:6f:72:aa:
                    2c:51:86:d3:1a:98:6d:ef:8f:94:9c:e1:78:6d:a8:
                    12:f5:71:b7:cc:74:35:99:cd:49:eb:a4:6d:e8:ea:
                    d0:b4:0b:f5:46:92:9f:db:37:3a:2b:4f:38:b7:4d:
                    30:56:21:b4:27:03:0c:5b:7c:9b:ce:a5:8b:ff:db:
                    96:33:58:e8:a3:1c:cf:e8:8e:5a:5c:22:0d:fd:15:
                    ed:77:22:a2:ed:3b:b1:2b:00:2b:57:ab:91:4a:23:
                    59:63:16:01:22:de:98:3c:32:28:97:79:77:ae:31:
                    b9:17:d8:90:62:6e:34:c1:3d:fc:09:f4:4b:80:c6:
                    a4:fd:e6:54:00:c3:24:99:53:e8:b6:32:c4:7e:4d:
                    10:38:8c:c8:de:58:3a:3b:a8:ad:c4:01:5b:54:b3:
                    a6:5c:9f:0d:ae:19:25:b7:3d:c5:be:c3:15:20:1f:
                    52:75:61:fd:60:bd:69:9e:e8:a3:c2:b2:fa:39:a2:
                    87:d6:93:5f:de:92:b4:21:b9:58:be:13:e3:aa:65:
                    25:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2E:3E:EB:0B:26:B6:7E:13:9F:22:12:00:48:24:28:66:DE:19:F4
            X509v3 Authority Key Identifier:
                keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:12:dc:93:fa:e1:2e:16:ae:f5:cc:71:bb:a8:ec:49:e8:6a:
         f9:74:02:5b:e6:16:07:5a:d8:50:f6:b4:2f:55:4e:c8:b3:e2:
         6f:ce:c5:34:0d:03:e4:88:b6:48:66:9e:4f:fd:2d:fc:c9:a0:
         be:cf:2c:f8:46:8f:47:3e:af:b5:38:04:89:86:21:06:9c:21:
         eb:10:a8:4c:40:a1:20:69:7b:ea:45:cf:51:93:0f:2c:89:b5:
         74:6c:52:c3:5a:25:cb:7a:2a:1b:69:04:80:5c:5d:b0:ce:3a:
         b8:97:97:11:46:a0:5f:b4:49:2c:48:c5:82:e8:e7:a0:09:96:
         9a:a0:3e:92:5b:9e:3e:6b:cc:63:87:7c:93:f9:97:1e:87:68:
         61:82:e6:c1:61:3b:0e:32:cc:31:6a:d1:e9:cd:44:0f:4b:87:
         0c:4f:8a:5e:db:32:bf:e0:50:0b:d0:af:85:b8:46:80:74:09:
         73:14:dd:fc:8c:43:ca:32:4f:73:52:ee:a7:b4:05:50:42:9a:
         62:77:f1:f7:b6:31:b1:c7:cd:c7:b0:dd:f2:f5:78:44:71:37:
         7f:96:58:0c:d0:3f:3c:a4:ee:50:a2:66:51:f8:4a:28:ba:ca:
         16:d7:b4:c9:0a:26:40:b0:2e:c1:d7:82:d7:1f:95:ee:a5:c2:
         6f:88:c4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:37 2026 by rpki-client