Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133342e302f32342d3234203d3e2039373934.roa
File:                     3131352e3137382e3133342e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          D/5CbVK49l+cVGGMN2tetDqniVOADtF67ietnsuJbls=
Subject key identifier:   3A:05:53:BF:E6:3D:94:2C:36:2C:D9:88:D2:D4:B5:D0:11:78:07:12
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       5235170EB9E1C9FAF36888DAA5341BE975195C78
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133342e302f32342d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:26 +0000
ROA not before:           Sun 03 May 2026 03:12:26 +0000
ROA not after:            Sun 02 May 2027 03:17:26 +0000
asID:                     9794
IP address blocks:        115.178.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:35:17:0e:b9:e1:c9:fa:f3:68:88:da:a5:34:1b:e9:75:19:5c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:26 2026 GMT
            Not After : May  2 03:17:26 2027 GMT
        Subject: CN=3A0553BFE63D942C362CD988D2D4B5D011780712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:21:7f:69:7f:96:4f:7b:95:1f:f4:de:8f:
                    09:aa:60:40:97:10:e2:08:12:ef:2c:25:e1:dc:9e:
                    c5:e7:fb:96:bf:b8:51:9a:d4:62:89:d4:da:ad:1a:
                    39:ef:ab:a5:b5:64:71:3e:2f:ef:a2:c1:b3:ae:23:
                    4b:4f:e7:c3:07:5f:52:3b:17:69:e3:49:67:c9:87:
                    a1:29:60:1a:fd:02:1d:10:2c:3d:08:21:9a:3a:e8:
                    de:bd:e4:02:a3:b1:41:4e:c6:c7:20:e2:0f:be:5f:
                    6e:94:ae:e3:da:61:07:e3:9a:1d:48:42:ef:53:5d:
                    93:a6:4f:eb:f5:6a:ea:8f:ed:68:81:0e:77:b7:b2:
                    f5:cf:d3:20:ad:e2:f3:36:ba:2a:7a:3c:1b:a5:57:
                    58:70:f9:b5:ed:32:ed:6b:be:d6:41:bc:fa:61:00:
                    04:b5:9e:d1:1c:ac:17:c9:1b:89:34:d6:80:67:25:
                    a8:5a:df:df:8c:07:6a:06:ac:1e:44:2d:dd:42:b5:
                    7d:c1:73:25:99:a0:cb:1b:33:22:5b:0b:24:23:29:
                    0c:17:21:94:18:0e:9e:ad:ad:ad:38:ed:fa:b2:9f:
                    09:84:a0:8a:01:7c:cf:24:5a:c1:4f:5f:10:8e:e0:
                    a4:93:d9:6b:f3:90:80:3d:ef:2f:d6:57:fa:0e:8c:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:05:53:BF:E6:3D:94:2C:36:2C:D9:88:D2:D4:B5:D0:11:78:07:12
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133342e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:88:29:1a:7b:42:4b:a2:b6:e2:83:f5:32:9b:9a:ab:89:dc:
         ea:49:f5:bc:0b:2f:7d:74:8c:1a:43:de:ea:e0:d9:a7:f1:01:
         ca:72:41:5a:dc:da:aa:68:d9:b5:d3:70:f7:6f:dd:a7:4d:d6:
         10:93:78:f0:b3:30:4c:bd:20:55:fa:20:1a:d3:e9:63:e1:c9:
         be:8a:a6:a9:64:73:dc:88:63:4d:2b:f6:7d:4a:55:c5:b7:67:
         20:88:f2:65:28:eb:db:e4:e4:df:05:69:b8:6e:da:8d:29:ba:
         91:9d:4e:f0:8d:51:8d:4b:81:11:c2:6a:56:68:c5:01:cb:05:
         66:77:48:c6:60:f0:d5:ec:a4:2e:2e:98:52:15:83:d7:6b:74:
         18:77:b0:08:99:2f:e3:38:ab:97:04:88:15:ec:6a:89:e2:c2:
         03:34:30:35:cd:52:a0:4c:9c:41:4d:74:c0:43:4d:10:f0:3d:
         ee:2e:5d:e9:7a:2a:c3:bd:46:a1:c3:86:bf:ef:28:47:d8:67:
         33:68:52:a7:1c:2a:61:ec:8d:1d:39:c1:23:79:30:89:74:49:
         31:a4:92:b6:7a:1f:27:cd:ae:c4:c9:39:e6:62:55:94:00:4b:
         f6:2d:86:69:be:81:a7:14:ef:9c:90:17:86:60:63:4a:17:7e:
         64:85:34:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:59 2026 by rpki-client