Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35352e302f32342d3234203d3e203338373833.roa
File:                     3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier:          MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=
Subject key identifier:   FE:8B:4A:0B:55:BF:5C:F3:B3:CD:96:B7:D0:92:C7:33:D5:7C:70:45
Certificate issuer:       /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37
Certificate serial:       32C368BE195249D90ABB03ED2FDD790048030F3D
Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35352e302f32342d3234203d3e203338373833.roa
Signing time:             Sun 03 May 2026 03:11:51 +0000
ROA not before:           Sun 03 May 2026 03:06:51 +0000
ROA not after:            Sun 02 May 2027 03:11:51 +0000
asID:                     38783
IP address blocks:        115.178.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl
                          rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c3:68:be:19:52:49:d9:0a:bb:03:ed:2f:dd:79:00:48:03:0f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37
        Validity
            Not Before: May  3 03:06:51 2026 GMT
            Not After : May  2 03:11:51 2027 GMT
        Subject: CN=FE8B4A0B55BF5CF3B3CD96B7D092C733D57C7045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:67:55:b2:5b:12:12:9d:10:7e:fb:15:a1:3c:
                    e8:2b:80:23:2b:df:ae:6f:d6:fe:f1:50:2a:92:e2:
                    2f:fd:96:bb:3d:e8:79:20:b6:3c:ea:4a:9d:ba:1b:
                    bf:33:3d:bd:3a:57:75:c1:bf:1e:a9:05:db:44:4a:
                    67:83:be:50:e9:f0:8d:85:36:27:65:22:9d:81:eb:
                    b2:5e:fe:f6:52:d5:11:b6:94:42:d6:fe:6c:82:00:
                    4c:ac:b3:9a:c1:df:83:92:0a:29:fd:1e:5d:c7:48:
                    8f:c9:83:ad:6a:fa:9e:cb:33:a0:be:48:55:81:a3:
                    9a:14:c7:b1:18:0e:c0:8b:3d:5f:df:22:b1:f7:37:
                    52:67:11:ed:38:5a:cf:e6:1f:6f:89:89:f9:01:15:
                    57:79:40:68:f7:48:d0:91:08:af:91:78:c4:29:00:
                    5d:7e:a1:1c:2f:ee:30:f5:12:f2:5b:3a:13:36:c4:
                    dc:8a:32:e3:1a:dd:f1:12:2c:4b:df:9d:da:f7:0d:
                    19:23:a8:a4:c8:71:2a:ab:12:0e:70:35:b5:07:0b:
                    01:cc:6f:53:b2:12:b9:84:77:fe:0a:8f:b7:6b:cc:
                    35:aa:8f:0a:25:cc:14:55:a0:39:a7:fa:03:aa:e1:
                    ac:5b:1c:40:e6:ef:63:9e:4b:82:6b:97:3e:2a:6c:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8B:4A:0B:55:BF:5C:F3:B3:CD:96:B7:D0:92:C7:33:D5:7C:70:45
            X509v3 Authority Key Identifier:
                keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35352e302f32342d3234203d3e203338373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:d4:7d:93:1e:ae:b3:05:8e:4b:63:f8:2c:d6:65:47:0a:e0:
         b9:97:e1:dc:e4:fe:af:24:23:fd:4c:fe:e3:0b:bd:41:49:e2:
         88:ad:01:70:9c:0a:e6:d6:43:ed:6e:22:2c:e4:0e:ce:43:fa:
         6b:07:a7:cf:2e:d3:c8:60:0e:3c:cb:c4:91:00:a0:50:e1:50:
         f3:12:29:d3:84:04:7d:21:65:05:cf:fa:16:d6:be:e8:80:73:
         b0:d6:d7:ae:a8:1c:5c:cf:db:4e:fc:9a:cb:6d:19:b0:25:fb:
         e6:ff:6f:e6:f7:b2:44:57:37:7d:2c:09:bf:a7:f7:f6:9b:aa:
         e9:d7:41:6b:d7:8c:09:b0:bb:c1:b3:fd:11:18:28:3d:15:4e:
         2a:d1:28:55:d5:df:80:ff:ee:67:93:d2:20:cd:f3:f9:21:c1:
         a4:89:c6:e2:ad:0e:75:78:71:04:8a:24:c4:c6:56:c0:b4:f4:
         ba:cb:fb:35:60:97:50:79:d6:62:9f:30:77:8e:d1:18:ac:64:
         f2:a5:4c:2a:a3:df:d7:fd:99:b7:14:2c:aa:b3:82:03:68:5f:
         cc:34:62:26:ed:7f:a4:42:7f:ec:86:10:08:58:4e:d7:43:b8:
         59:65:20:58:ae:de:73:0f:e9:11:76:0a:5e:4c:b9:10:0c:14:
         20:e2:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:58 2026 by rpki-client