Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa
File:                     3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier:          Zs7TRnZe5BNsoAw7Vlg7d8WTD6Yej6D1y1DZK+qwGSo=
Subject key identifier:   81:91:73:E6:0B:CD:00:75:52:E6:5E:AC:93:DD:7D:42:3A:0A:A2:7D
Certificate issuer:       /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial:       06582944B27D077592FFEE48C9AE34BF1BAFDA33
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa
Signing time:             Sun 03 May 2026 03:15:58 +0000
ROA not before:           Sun 03 May 2026 03:10:58 +0000
ROA not after:            Sun 02 May 2027 03:15:58 +0000
asID:                     23671
IP address blocks:        111.92.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
                          rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:58:29:44:b2:7d:07:75:92:ff:ee:48:c9:ae:34:bf:1b:af:da:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
        Validity
            Not Before: May  3 03:10:58 2026 GMT
            Not After : May  2 03:15:58 2027 GMT
        Subject: CN=819173E60BCD007552E65EAC93DD7D423A0AA27D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:ce:7d:4a:f2:2e:b7:45:eb:8a:12:ae:06:
                    48:c0:ad:20:80:68:56:53:56:1e:56:01:8e:fa:89:
                    f4:10:05:58:16:f8:f6:8c:e1:8b:59:cf:33:a6:e2:
                    ae:15:d1:fe:0f:a8:6b:89:0e:40:1c:69:5d:b2:45:
                    45:69:3d:d5:05:3b:d6:6f:55:ca:07:9f:d3:77:93:
                    82:ba:4b:a4:0c:8a:6f:c0:49:f1:e7:f4:c0:6e:45:
                    cb:a5:5f:b5:23:cf:08:aa:3f:e7:26:20:df:57:b1:
                    6b:1f:f9:22:14:7f:e4:9c:bb:23:f8:6e:5b:b3:5a:
                    f0:41:ee:fd:9a:11:59:b5:cf:da:7d:71:b4:f4:72:
                    0a:7b:12:d7:d1:48:a7:95:05:19:b8:57:39:b6:6b:
                    94:23:3b:23:59:94:3e:04:c2:c4:ea:a4:7b:6e:ff:
                    47:2d:19:ba:a1:64:fa:58:7d:cb:b4:7d:31:c1:3d:
                    05:ef:72:bf:92:d8:6e:dc:b2:ae:fb:b1:fe:2c:ce:
                    26:a5:66:88:29:8f:aa:8a:35:8a:ed:4f:83:1a:71:
                    d4:a7:84:d6:24:92:28:e7:4c:76:e8:55:6f:dc:e9:
                    4e:5f:9c:d7:28:db:b4:39:1f:3b:f8:93:23:3c:ae:
                    f6:49:c0:e9:76:d3:79:81:78:7a:37:9b:37:93:1a:
                    31:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:91:73:E6:0B:CD:00:75:52:E6:5E:AC:93:DD:7D:42:3A:0A:A2:7D
            X509v3 Authority Key Identifier:
                keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:40:6d:9d:62:80:58:d5:a6:88:a2:5b:53:0a:88:94:55:67:
         4c:88:ce:b0:04:c7:53:6d:a5:de:eb:95:af:eb:73:75:54:b7:
         cc:6b:ad:5f:5a:88:62:90:49:16:f0:15:ef:29:c2:e4:c0:1c:
         a4:1a:94:53:0f:ae:60:ae:b3:36:b3:46:87:70:71:53:9d:ef:
         83:20:2a:8b:07:c4:de:c9:3d:5b:5b:e5:07:fa:18:15:07:01:
         c8:1e:15:4d:a5:2b:0a:94:1e:e6:b4:33:7a:c5:19:eb:0e:47:
         f7:d1:32:1a:ee:0c:13:7a:6f:50:dc:95:8f:1e:b4:eb:45:48:
         2e:9a:6b:a2:ed:56:bd:17:fe:1e:ca:8c:88:06:f9:e0:e9:64:
         5a:01:51:d8:02:bf:6d:a3:43:82:a4:8c:3a:8f:38:c3:94:8b:
         2f:0e:db:f1:42:5b:de:e2:6d:31:d2:2c:ea:e4:99:a2:5e:ad:
         a2:4a:54:2f:b4:cd:9d:3d:ec:14:70:52:62:5c:ab:aa:0e:c0:
         09:13:8d:a8:c4:38:4a:09:0b:08:c3:f5:42:9d:8a:a0:6f:fe:
         c8:b1:fb:f8:25:ae:7b:54:f1:1e:3a:f9:3a:ab:b8:7d:48:58:
         54:e1:ae:e8:41:0a:a8:ce:36:23:b1:f4:2f:72:83:2f:42:93:
         64:7f:ee:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:00:48 2026 by rpki-client