Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133312e302f32342d3234203d3e2039373934.roa
File:                     3131352e3137382e3133312e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          lqQ8GwaEipIuQ0lhmv2/ejFv1kxY3Zmg9YbZPJ94qWw=
Subject key identifier:   22:74:FC:98:E9:F0:CF:AC:24:F3:EF:77:6C:62:8E:2D:A0:AF:1E:40
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       3DD3D713FCCEC150244CB2B129AB5ED4D800B38F
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133312e302f32342d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:19 +0000
ROA not before:           Sun 03 May 2026 03:12:19 +0000
ROA not after:            Sun 02 May 2027 03:17:19 +0000
asID:                     9794
IP address blocks:        115.178.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d3:d7:13:fc:ce:c1:50:24:4c:b2:b1:29:ab:5e:d4:d8:00:b3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:19 2026 GMT
            Not After : May  2 03:17:19 2027 GMT
        Subject: CN=2274FC98E9F0CFAC24F3EF776C628E2DA0AF1E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:95:85:45:bf:28:3a:a5:37:f7:7f:8f:2e:
                    f3:5d:8d:08:d9:6a:d6:79:3e:be:a0:34:8e:ed:d5:
                    dd:f7:46:24:cd:b6:a0:4b:af:3d:5c:28:46:bc:7c:
                    12:eb:45:ed:0f:e9:03:47:d7:5f:e7:18:0a:8c:ef:
                    15:11:86:4e:52:f1:6a:df:8c:d4:17:a3:07:a7:21:
                    fd:76:ab:d6:4d:fb:43:06:02:f5:91:d7:4d:3f:6d:
                    2d:d3:c8:40:fc:41:64:c4:40:6d:ec:50:37:8d:91:
                    51:e9:46:a8:84:90:40:24:52:e4:d5:95:be:db:cf:
                    a4:44:d4:ef:40:b6:10:08:21:c2:2c:45:70:e8:ce:
                    2d:e7:3b:a1:51:c5:cc:68:6b:71:73:61:6b:e8:f1:
                    14:b3:68:10:22:2a:ff:5c:d4:e6:bb:84:a7:3e:75:
                    a5:80:35:a0:cc:91:bd:be:ba:2e:7d:1a:25:f5:2b:
                    1d:7a:3f:1c:4e:70:09:78:82:91:96:9e:12:81:8b:
                    8b:78:1c:ca:98:ef:4c:84:2e:de:df:4c:84:7a:73:
                    05:36:60:6a:6b:52:b3:b4:57:5f:bb:9f:a5:67:29:
                    10:54:71:f1:85:b4:e7:ca:73:54:45:e9:ea:2b:0b:
                    33:46:35:88:70:5b:cf:f6:0c:4e:91:f8:30:98:80:
                    18:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:74:FC:98:E9:F0:CF:AC:24:F3:EF:77:6C:62:8E:2D:A0:AF:1E:40
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133312e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:5e:9d:e9:cd:96:91:22:86:62:57:61:ac:97:46:a9:fc:
         b8:1b:f9:19:5a:9a:53:9b:b2:39:49:b6:f4:83:58:b9:70:70:
         b1:d6:56:e3:0f:7a:d7:3d:57:bf:da:bf:61:cf:81:3b:1f:4c:
         6b:42:36:d9:22:7c:ab:4a:a2:66:72:eb:21:07:39:0a:5c:a3:
         63:fc:2c:7c:00:b4:3c:d9:95:91:be:f3:05:11:06:1c:f5:04:
         0b:42:55:8a:f9:28:6d:0f:49:f8:7b:0d:fb:13:30:77:92:c3:
         d5:c5:b6:81:11:25:98:a7:d4:9e:d9:69:8f:d3:09:1e:1c:8f:
         1e:79:91:9e:37:d7:dc:53:50:65:92:31:4c:08:d5:9b:ab:58:
         9a:ce:7f:4e:4f:b1:23:eb:67:54:20:7f:de:93:92:9f:c2:96:
         07:63:06:04:93:b0:8e:39:f5:e0:c7:cd:6c:3f:5d:01:a0:f6:
         54:40:3c:23:50:77:19:8d:e8:84:dc:38:0f:c4:86:2e:0a:66:
         e2:4a:42:e9:24:e5:50:68:18:75:5e:a3:7f:aa:82:26:49:d8:
         c1:47:f1:c2:14:e0:3b:2d:b6:33:2f:5d:03:2a:ad:11:26:86:
         e7:17:8b:d1:3f:54:6e:5d:a0:a0:30:dc:e0:d3:09:3c:a8:03:
         69:a5:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:46 2026 by rpki-client