Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa
File:                     3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa (raw, json)
Hash identifier:          sVStbcQT0Dg1mRwp+9cYAazoCqlBRysLCitqo3Go7nY=
Subject key identifier:   2B:78:CC:32:6D:23:19:73:03:42:0F:56:11:BA:20:A9:58:5F:CC:AE
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       49B5CFF893B41310B7E1D914197AC37F47D9A51D
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:12 +0000
ROA not before:           Sun 03 May 2026 03:12:12 +0000
ROA not after:            Sun 02 May 2027 03:17:12 +0000
asID:                     9794
IP address blocks:        115.178.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b5:cf:f8:93:b4:13:10:b7:e1:d9:14:19:7a:c3:7f:47:d9:a5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:12 2026 GMT
            Not After : May  2 03:17:12 2027 GMT
        Subject: CN=2B78CC326D23197303420F5611BA20A9585FCCAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:b6:91:bb:f5:81:8d:57:a3:77:41:86:e4:
                    ea:d8:9f:12:de:5b:37:1f:cb:30:b6:d2:f7:09:15:
                    70:34:32:d3:2a:22:fe:3e:c1:33:6f:b5:01:54:71:
                    12:c6:e8:be:10:a3:0c:81:13:b7:76:d5:12:16:6d:
                    c6:08:13:0e:6e:cb:33:62:a2:43:35:5b:16:0e:d4:
                    d6:f7:17:9e:e6:cb:36:c6:46:ba:78:9a:da:4f:d9:
                    c9:2f:b6:5f:c1:8e:0a:83:ce:49:b8:da:78:b8:8c:
                    84:76:07:e2:9c:cb:7f:97:13:1b:5d:3a:9e:e1:5a:
                    df:07:fd:97:ea:33:85:38:be:30:c9:af:62:f0:e3:
                    8b:8e:aa:ce:74:4e:0a:21:6e:77:01:d2:fe:dd:c1:
                    1a:7c:bd:3d:ec:a4:19:a1:53:6c:3f:8f:3b:82:e3:
                    d1:22:11:ef:78:85:ff:1c:48:fa:6f:50:db:54:a9:
                    44:29:d2:cc:d4:52:09:84:42:f0:52:21:61:e3:1a:
                    2c:f3:28:48:f8:33:47:9e:48:43:af:bc:f2:4f:b3:
                    9e:7a:a8:52:0b:d9:7d:10:00:5e:14:53:fc:ef:b0:
                    72:25:a1:5d:a3:d2:db:58:a7:66:41:89:89:53:e0:
                    a4:52:09:4d:12:dd:3e:43:4d:63:91:1c:b2:f0:e3:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:78:CC:32:6D:23:19:73:03:42:0F:56:11:BA:20:A9:58:5F:CC:AE
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:93:a6:ff:d9:fe:86:00:13:3d:b5:9a:b3:c5:49:ab:f5:01:
         e9:4b:3f:8f:54:c0:46:3a:95:05:c1:cf:91:74:11:04:03:14:
         eb:0a:75:9a:58:6d:25:e8:6f:86:ed:27:ac:cc:c3:08:2e:0c:
         af:62:46:c6:c2:df:6d:5e:e5:c6:ef:96:37:b8:5b:97:f5:ab:
         f4:1c:09:b7:00:32:39:87:c1:8c:4d:07:42:d7:8b:b4:57:2d:
         28:f3:fd:30:4a:24:64:11:8a:eb:0b:a8:bc:8f:d6:24:99:fe:
         d8:90:2f:1f:3b:b5:88:c9:7e:d6:6a:dd:af:d7:cb:67:3e:55:
         5e:f9:5a:e7:0e:5e:9e:5d:dc:bd:5c:a7:fd:1c:a3:76:17:3a:
         de:86:57:8a:e8:c8:78:d5:02:2e:90:77:f3:a5:3b:f0:9f:d4:
         3f:f4:03:bb:ca:9f:98:68:51:24:a2:8a:c6:b2:b8:be:3d:3c:
         21:23:6e:c3:72:03:b3:a2:19:03:fc:62:b0:60:77:4b:e7:68:
         44:e4:30:71:74:6f:f8:77:d4:63:80:f9:3e:be:68:e9:8c:be:
         7c:8e:dd:0e:9f:65:6f:ec:41:08:88:26:2a:7d:01:31:13:d7:
         69:f0:a9:80:6b:a7:23:88:06:9e:a8:c2:f1:6d:9c:fc:2f:ba:
         1d:83:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:20 2026 by rpki-client