Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133322e302f32342d3234203d3e2039373934.roa
File:                     3131352e3137382e3133322e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          uQfsUnNgDTRx508qnHN1MrCvwot9FUO+aviaRA11qpM=
Subject key identifier:   10:60:66:3F:8F:0C:FA:AB:4C:75:68:17:31:AA:AF:48:BE:9E:CA:6C
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       59B432B1B77E429E4C765645C8735A47A79FFD08
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133322e302f32342d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:06 +0000
ROA not before:           Sun 03 May 2026 03:12:06 +0000
ROA not after:            Sun 02 May 2027 03:17:06 +0000
asID:                     9794
IP address blocks:        115.178.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b4:32:b1:b7:7e:42:9e:4c:76:56:45:c8:73:5a:47:a7:9f:fd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:06 2026 GMT
            Not After : May  2 03:17:06 2027 GMT
        Subject: CN=1060663F8F0CFAAB4C75681731AAAF48BE9ECA6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:96:07:e9:7e:fa:3a:32:f6:78:d4:72:03:
                    d3:ce:d9:8a:05:29:48:78:b9:d6:fc:7f:c0:07:19:
                    78:40:3e:28:cb:7f:a1:54:8a:31:72:cb:38:d2:31:
                    60:36:10:c5:c8:31:a2:80:52:99:f1:5a:88:c5:62:
                    b2:d3:db:b6:cc:e7:db:55:a8:79:a9:c5:a5:77:a1:
                    97:1f:de:c7:f7:e0:45:d4:ef:aa:40:87:26:1e:a4:
                    9c:df:4f:41:aa:5f:5a:de:99:6b:cf:5b:ff:89:03:
                    05:ea:c3:22:e7:c4:86:66:ea:5c:e0:54:b2:45:da:
                    58:44:5f:7f:e3:7a:1c:91:6c:9b:33:97:d4:11:83:
                    90:84:af:63:33:f9:ce:d6:b7:d5:4c:4d:f6:ab:18:
                    ed:24:a6:18:35:9d:12:c2:95:20:36:11:37:81:71:
                    13:3e:b3:77:95:24:fd:f9:42:04:a7:ef:87:46:c3:
                    68:84:3c:89:a5:50:cb:50:27:03:1c:12:94:c7:7d:
                    5d:51:6b:c7:f7:a1:95:c6:d5:77:6c:af:20:57:b9:
                    83:79:14:7b:11:c0:71:75:27:d2:0b:0e:08:50:37:
                    c6:ab:c6:fd:40:4f:6f:f6:8b:1a:24:c8:9c:93:44:
                    b5:5a:d4:04:8b:6f:bf:92:ab:53:48:cd:78:11:8b:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:60:66:3F:8F:0C:FA:AB:4C:75:68:17:31:AA:AF:48:BE:9E:CA:6C
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133322e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:24:df:fb:85:0f:da:a3:51:6d:52:15:23:df:ae:4e:02:21:
         4e:28:dc:b7:89:0d:9d:d8:0a:77:fe:94:8b:af:24:61:8f:dd:
         d2:be:bb:6c:8a:c6:33:af:64:a7:b1:3f:3e:b0:64:b3:f3:f5:
         53:89:73:6b:f6:f2:70:0f:93:70:b2:d2:39:92:f7:a3:f0:55:
         2c:50:42:92:e0:5f:25:0a:4b:dc:a1:13:fc:62:28:60:aa:16:
         11:0d:1e:dc:7b:71:b0:91:fa:15:03:4d:75:48:be:a5:43:25:
         2d:fc:e7:4d:a0:11:de:dd:ef:d7:c9:2e:26:13:16:99:76:75:
         9b:b6:3e:ae:b4:f1:6e:03:e9:71:68:be:6f:ac:c1:61:ae:85:
         ab:be:f3:f4:0d:ab:90:be:82:06:67:a6:6d:4f:4b:62:bf:46:
         90:f4:72:ef:63:9a:35:65:b6:ba:3d:3d:88:16:db:78:92:57:
         d6:8f:38:25:a6:0d:7c:bd:63:a2:00:59:fd:da:c3:4f:a3:11:
         70:62:56:32:a6:fa:64:95:9d:1b:13:e8:bc:9e:ce:ed:24:64:
         73:da:bb:f1:b8:65:2c:59:f0:6d:74:04:e1:d4:15:6c:22:3e:
         59:67:e6:2c:50:f5:87:a7:79:b1:a0:63:3d:35:c2:e5:5f:c4:
         0d:85:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:08 2026 by rpki-client