Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3132382e302f32342d3234203d3e2039373934.roa
File:                     3131352e3137382e3132382e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          J0ntfgTPkfPKvKvVcWD2Q36jzI4ZWWnM1gxPoaSsXPk=
Subject key identifier:   44:F9:2B:CE:65:FE:7D:90:91:AB:20:E2:94:95:38:A3:D8:42:44:B2
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       19479CA3864B825540800BED9116BEA7A9D1F574
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3132382e302f32342d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:24 +0000
ROA not before:           Sun 03 May 2026 03:12:24 +0000
ROA not after:            Sun 02 May 2027 03:17:24 +0000
asID:                     9794
IP address blocks:        115.178.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:47:9c:a3:86:4b:82:55:40:80:0b:ed:91:16:be:a7:a9:d1:f5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:24 2026 GMT
            Not After : May  2 03:17:24 2027 GMT
        Subject: CN=44F92BCE65FE7D9091AB20E2949538A3D84244B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:af:82:8a:9b:d5:c6:1e:e4:fb:88:8e:7c:
                    fe:3b:ca:a9:29:3a:a4:10:d5:33:97:02:97:10:c4:
                    f6:cc:07:f0:f0:2d:cf:fb:95:f1:83:5a:93:d6:6e:
                    ae:5b:81:64:e0:61:26:49:bd:d1:3f:ff:06:47:9d:
                    28:f7:2b:4c:6c:db:21:9b:d6:01:ab:2c:1f:d5:40:
                    13:8e:eb:e0:25:db:11:76:7a:b7:a4:83:e4:86:73:
                    94:a4:3a:b8:ee:7e:ed:3d:6e:9a:59:a4:1f:73:71:
                    67:ae:38:8a:4b:4b:b2:a7:53:11:52:22:7c:d9:00:
                    5b:25:b2:d7:61:47:ef:00:a2:06:9f:ef:26:41:6e:
                    34:68:28:49:45:41:c3:f0:88:9e:8a:c6:4a:10:e6:
                    41:4f:e7:df:3f:23:fb:e1:3b:57:e0:36:ce:84:ff:
                    41:37:05:78:df:a0:a3:ef:78:fd:26:e3:5f:13:72:
                    8a:b8:39:2e:9a:cd:50:8d:53:ff:c0:a2:25:48:34:
                    35:7b:c0:8e:e5:0c:f9:fd:73:9b:be:4c:8e:99:a2:
                    52:ab:65:0e:65:c6:24:d0:33:3c:00:45:0e:f2:2d:
                    b9:00:b2:5f:d1:aa:75:a0:b0:dc:3a:b9:47:1e:bb:
                    1c:45:8a:19:05:6a:54:04:3e:26:b4:a4:7f:12:1b:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:2B:CE:65:FE:7D:90:91:AB:20:E2:94:95:38:A3:D8:42:44:B2
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3132382e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:3e:b3:d0:8f:62:00:be:e5:29:fd:36:c5:33:89:6b:74:b1:
         bb:76:63:a8:93:37:45:bc:4f:d1:2c:41:00:b6:9b:b8:07:a2:
         73:7e:cb:04:28:a8:22:42:63:6c:af:40:99:14:cc:d5:9c:39:
         a7:43:a1:05:25:ab:7b:0c:0c:7a:cd:0d:23:65:f4:cd:54:9e:
         40:cc:83:7f:9d:b3:8e:b8:03:e7:e3:25:7e:bf:94:55:ad:11:
         1d:74:99:15:54:68:f6:bd:1e:99:75:95:59:66:34:ac:19:9b:
         6b:de:b8:36:86:65:eb:98:6b:8d:1f:79:b6:41:df:7c:7a:73:
         e7:64:83:71:11:9a:d0:ff:34:b1:21:46:27:25:66:99:ed:9a:
         d2:a3:70:1f:ae:b8:08:d3:4d:06:f3:c0:5c:96:d2:46:eb:c1:
         dd:23:ca:d0:ef:a1:1e:82:8b:2d:9c:12:b8:f0:93:71:44:5b:
         9e:0d:d6:34:55:f1:36:90:94:89:c4:88:de:2c:71:e5:c7:46:
         3c:b1:29:57:5b:ce:67:15:8f:68:55:9e:d2:b2:60:75:ec:5f:
         43:cd:9e:34:37:79:79:4d:55:44:7b:15:62:ba:b1:74:3d:37:
         fd:ee:36:09:34:f6:ff:06:5f:bb:78:d3:6b:11:ef:f3:f9:88:
         e7:f7:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:46 2026 by rpki-client