Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37362e302f32342d3234203d3e203536323333.roa
File:                     3131312e36372e37362e302f32342d3234203d3e203536323333.roa (raw, json)
Hash identifier:          zUL5UQNXnc8QhEgTnOt/ZHUWtyhWWgBBUQzy5H70VK4=
Subject key identifier:   15:EF:2C:1E:AB:63:75:1F:2A:97:F3:09:AB:B4:14:AE:11:98:A4:86
Certificate issuer:       /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Certificate serial:       36EB7E5ADEB960E36E32AF53F45EBED91234808F
Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37362e302f32342d3234203d3e203536323333.roa
Signing time:             Sun 03 May 2026 03:13:26 +0000
ROA not before:           Sun 03 May 2026 03:08:26 +0000
ROA not after:            Sun 02 May 2027 03:13:26 +0000
asID:                     56233
IP address blocks:        111.67.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
                          rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:eb:7e:5a:de:b9:60:e3:6e:32:af:53:f4:5e:be:d9:12:34:80:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
        Validity
            Not Before: May  3 03:08:26 2026 GMT
            Not After : May  2 03:13:26 2027 GMT
        Subject: CN=15EF2C1EAB63751F2A97F309ABB414AE1198A486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:b1:ff:88:e1:b1:8c:cb:aa:f6:7f:49:77:
                    6a:78:3d:da:bf:6f:83:e0:b8:4f:02:11:05:6c:9c:
                    ef:78:4f:06:1d:9f:76:7c:d0:4f:97:b5:d8:88:2d:
                    92:26:9f:82:b4:b8:c2:26:c1:cc:53:70:3a:2d:96:
                    28:ab:d4:06:dd:d1:31:1e:d3:ff:56:8f:69:9a:e2:
                    90:30:19:fb:93:f7:59:6d:2d:4e:d1:b7:4a:b9:de:
                    93:4c:93:9e:84:0a:9f:0b:5f:81:6c:38:4a:bf:1e:
                    f0:43:40:b9:f4:a3:58:03:39:e7:79:b5:4c:2d:b1:
                    61:27:2e:17:2e:a7:9a:91:fc:cd:74:e0:ef:5b:a1:
                    a2:56:b8:fd:5f:ce:4d:d8:62:45:b2:d2:b9:e7:4c:
                    a4:a9:90:86:2b:52:81:1a:ec:ed:1b:8c:ca:e9:d2:
                    60:d2:10:b3:21:f6:51:a3:01:ab:6c:e0:7f:92:03:
                    94:e6:e9:a5:b0:c4:e0:1f:fe:60:af:0d:bc:6c:ac:
                    fd:11:81:7e:2e:91:86:de:68:1b:2e:1b:ac:48:cd:
                    1d:08:5b:54:15:b1:86:4f:18:5d:ab:c2:4c:fe:a5:
                    a9:dc:db:c9:c8:c0:89:2c:c9:b5:1f:fd:ab:d4:ff:
                    34:6b:cc:6d:cb:e3:58:2c:d4:54:cd:d8:33:b8:52:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EF:2C:1E:AB:63:75:1F:2A:97:F3:09:AB:B4:14:AE:11:98:A4:86
            X509v3 Authority Key Identifier:
                keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37362e302f32342d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:e7:15:3e:0b:2b:ae:69:53:da:a7:26:8d:a8:28:c0:f5:fe:
         8c:21:77:3e:94:65:1b:e0:78:4c:d9:9e:9a:fc:c3:40:11:7a:
         f7:8f:af:7c:d6:ba:3e:0c:60:e9:30:84:20:bd:f1:72:af:ec:
         1d:8a:5d:7f:40:c0:01:68:8f:78:63:1f:73:13:d9:36:1c:63:
         cf:81:88:a3:49:23:5f:06:5f:0e:2e:f2:d8:ac:48:67:a3:b6:
         ea:14:d0:d8:09:d3:3a:0b:08:69:98:d7:9d:8d:34:bd:0a:76:
         64:ee:4d:b4:a7:3b:65:b2:1a:bc:99:64:c6:a8:25:60:5c:d5:
         56:e8:73:0d:57:c4:84:8c:a3:99:e8:cb:83:19:6e:d7:81:2b:
         34:98:ed:7f:76:9f:54:bb:2b:49:31:30:99:ff:a4:76:f7:4f:
         38:a1:e2:88:ea:f0:45:ea:7a:5f:e0:e9:5d:a7:90:05:1d:22:
         d6:af:7f:3a:d3:7d:45:fb:e0:92:68:28:cb:16:4e:e7:0b:31:
         30:92:d1:db:61:5d:af:5f:4e:5e:7b:52:cf:2f:a9:f6:97:00:
         60:1a:5d:96:a6:8f:64:09:9e:68:a0:85:26:3f:69:30:b2:85:
         63:2f:76:a6:d7:ab:b9:4f:a5:17:83:0d:be:e0:a9:c9:9d:71:
         9d:bd:cd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:43 2026 by rpki-client