Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203338353036.roa
File:                     3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (raw, json)
Hash identifier:          2dlHVfZFD/szRhd8hUNYHiAVCewx+xASxFEiirRYGTg=
Subject key identifier:   3D:9D:3F:30:BF:32:68:B3:05:F0:A7:F8:6C:5B:5A:D8:DF:4D:08:5D
Certificate issuer:       /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial:       418A23ED6B18BFC19DEE81E93AF3F8C99918E736
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203338353036.roa
Signing time:             Sun 03 May 2026 03:15:56 +0000
ROA not before:           Sun 03 May 2026 03:10:56 +0000
ROA not after:            Sun 02 May 2027 03:15:56 +0000
asID:                     38506
IP address blocks:        111.92.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
                          rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8a:23:ed:6b:18:bf:c1:9d:ee:81:e9:3a:f3:f8:c9:99:18:e7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
        Validity
            Not Before: May  3 03:10:56 2026 GMT
            Not After : May  2 03:15:56 2027 GMT
        Subject: CN=3D9D3F30BF3268B305F0A7F86C5B5AD8DF4D085D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:b4:d1:cb:f2:95:20:96:a9:12:10:79:28:
                    0b:88:34:da:e5:64:d0:4e:91:d4:ba:6d:08:a6:72:
                    fa:05:62:fa:d1:b6:2d:8f:48:f5:1f:b1:30:6f:93:
                    62:17:06:ad:a7:9c:b4:43:9a:40:0e:4a:dc:cc:8c:
                    cd:6e:5a:3f:29:81:36:d7:80:35:d6:d6:54:a0:b4:
                    08:5c:a0:df:e9:16:59:71:d5:5d:49:00:f0:d1:db:
                    61:2a:4b:4e:b6:1c:0b:b3:d4:b1:e5:be:c0:af:c5:
                    1c:7a:ab:58:27:f5:fb:fb:3c:03:49:d9:f7:99:a3:
                    4f:3f:8c:e7:94:10:db:7c:99:79:7a:0f:2e:ca:4a:
                    50:c4:4e:b6:f4:59:77:df:8b:55:66:c3:73:76:50:
                    fb:77:aa:1f:55:b3:1d:08:22:4b:46:e9:20:79:b5:
                    02:13:09:f6:11:64:98:80:03:5e:8e:66:b4:29:35:
                    f4:40:ef:91:d9:3a:09:ef:66:03:c3:bd:fc:ac:42:
                    64:32:ca:3f:71:ea:23:d2:a3:83:88:b9:2f:50:04:
                    17:58:9f:b3:0d:da:52:c4:d3:02:70:1f:b4:08:c9:
                    ce:f9:ee:d4:cf:89:a6:c1:5c:bb:96:6a:a9:0a:ff:
                    81:6a:70:f5:33:00:50:64:b2:06:fe:61:30:5a:93:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9D:3F:30:BF:32:68:B3:05:F0:A7:F8:6C:5B:5A:D8:DF:4D:08:5D
            X509v3 Authority Key Identifier:
                keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203338353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:18:c8:28:d4:44:04:ac:6c:e4:dd:b6:c6:1e:14:3e:f5:
         7f:c9:22:04:d4:32:65:e1:53:a9:93:04:01:f4:62:89:7f:30:
         fb:71:da:fe:43:e7:a0:70:cd:79:b9:0e:51:42:26:ec:5a:4e:
         96:fa:25:4e:a4:d0:6a:3a:04:f6:35:79:71:7b:f9:da:73:d2:
         f6:4f:d2:2e:79:0e:1c:9e:39:42:f7:43:75:35:88:0a:8e:4c:
         aa:e8:5f:19:7c:39:44:3c:d1:83:94:4c:ad:cc:37:32:ad:44:
         36:35:fe:bb:a3:1a:e4:df:9f:3e:a6:0c:5e:bc:d6:a5:b6:a9:
         0d:f1:08:ec:6a:19:14:84:38:e8:15:59:6c:80:37:d7:ed:84:
         c1:60:b3:11:52:5c:5d:39:fb:d7:89:da:9b:6c:84:0e:ae:06:
         37:73:ff:57:f0:8f:75:02:74:a8:b4:1a:c1:02:12:8e:ed:1f:
         5c:ee:88:fc:bc:03:1e:71:72:6d:02:aa:46:bd:0e:5f:14:05:
         69:c2:80:27:a7:25:bd:41:65:8f:ac:de:72:03:97:2e:57:d8:
         4d:9d:81:78:b6:9d:de:15:dc:75:68:68:e3:9b:5c:7f:1a:20:
         55:9c:2f:53:92:e5:09:78:e1:25:4f:4c:61:4f:94:5d:25:0f:
         ef:9b:34:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:32 2026 by rpki-client