Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35302e302f32342d3234203d3e203338373833.roa
File:                     3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier:          n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=
Subject key identifier:   F1:F1:66:A8:1C:13:37:72:56:C9:6B:D4:B5:2F:50:72:CC:BD:9C:4D
Certificate issuer:       /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37
Certificate serial:       6BB4D42E0C653E98CDE108AD781668CF21DEFE74
Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35302e302f32342d3234203d3e203338373833.roa
Signing time:             Sun 03 May 2026 03:11:51 +0000
ROA not before:           Sun 03 May 2026 03:06:51 +0000
ROA not after:            Sun 02 May 2027 03:11:51 +0000
asID:                     38783
IP address blocks:        115.178.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl
                          rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b4:d4:2e:0c:65:3e:98:cd:e1:08:ad:78:16:68:cf:21:de:fe:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37
        Validity
            Not Before: May  3 03:06:51 2026 GMT
            Not After : May  2 03:11:51 2027 GMT
        Subject: CN=F1F166A81C13377256C96BD4B52F5072CCBD9C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:59:7d:4a:53:bf:25:f7:1e:4f:34:59:78:
                    cf:0e:8d:36:31:c6:e2:ee:c5:6b:0a:7d:69:9d:32:
                    f7:03:4f:ea:b4:5b:bb:8c:4b:e1:d1:f8:f5:ef:be:
                    6b:a9:7d:6b:a3:f4:7e:2e:41:a1:da:81:37:92:ac:
                    9a:18:83:3f:06:ff:f7:50:e4:e6:07:a7:03:53:da:
                    5c:51:cd:37:9b:40:d1:0d:81:19:6e:30:a9:b1:ce:
                    cc:35:eb:d3:b0:01:72:ff:5d:1b:38:51:63:32:bd:
                    47:bf:37:4b:c2:84:2e:d0:41:27:47:d5:86:98:41:
                    17:a8:27:5a:d6:b0:d5:6a:1a:56:cf:26:ca:3d:fe:
                    8d:6e:79:9b:fc:9d:1e:c5:29:bf:74:15:46:a7:0f:
                    34:f6:7d:84:9a:36:a6:df:ce:24:9d:f4:c0:27:6d:
                    65:34:46:5f:bb:1a:a0:f7:ea:7a:89:0e:95:06:2f:
                    9a:33:78:19:50:d0:92:34:35:5e:62:a1:69:ad:d9:
                    d7:ca:8a:79:af:ef:41:9b:f0:aa:f3:3c:6d:06:79:
                    06:7e:00:9c:0b:73:e1:b9:b1:e1:a6:65:e2:39:17:
                    1a:e3:de:5c:5f:29:e9:9d:a7:68:65:e6:5e:bd:6f:
                    74:f1:b5:45:51:30:8c:de:d2:e1:6a:c1:58:ca:fc:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F1:66:A8:1C:13:37:72:56:C9:6B:D4:B5:2F:50:72:CC:BD:9C:4D
            X509v3 Authority Key Identifier:
                keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35302e302f32342d3234203d3e203338373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:e9:2f:69:05:7c:b3:1f:be:63:15:68:5f:e7:f7:42:57:cd:
         f6:8d:a5:be:08:15:92:26:5c:30:2a:2e:74:a5:20:fc:bb:43:
         b3:29:d5:b4:15:90:db:35:95:b6:03:67:56:28:32:0e:e7:b1:
         92:7b:1a:81:77:62:62:10:2c:09:a2:16:40:ea:82:d5:5a:9a:
         96:ce:7b:49:d3:6e:d8:d6:b9:fb:d1:1b:4f:63:40:d5:9a:80:
         45:18:3b:e5:d6:68:55:79:cb:aa:ba:e4:66:fb:00:e5:fb:d9:
         5e:84:b7:b3:37:14:82:b1:55:04:4d:48:27:7f:c8:07:38:0d:
         54:b3:03:55:e7:1e:5d:75:28:a7:8a:54:31:62:30:66:2c:77:
         b9:45:29:d7:55:41:50:a9:e7:72:03:61:79:34:06:04:69:92:
         55:e0:3c:a1:e0:df:56:45:8c:c8:77:18:67:87:d4:aa:30:89:
         7c:d3:7b:4e:f6:40:c2:4d:fe:7b:63:5c:ad:88:61:60:ac:1f:
         4c:fd:c6:d4:d5:24:53:73:33:54:1f:f6:6f:d0:5a:81:96:53:
         4a:22:bf:37:9b:0d:db:3b:fd:53:c2:17:39:11:96:6b:d4:9d:
         d6:60:dc:6f:10:5a:6e:11:4e:d2:93:95:0f:73:85:58:96:b3:
         34:01:06:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:28 2026 by rpki-client