Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e2039373934.roa
File:                     3131352e3137382e3134382e302f32322d3234203d3e2039373934.roa (raw, json)
Hash identifier:          QXOOYFlo5kakVBFYaRLQnx6Y+qjxDGO1x/uBgyANFVE=
Subject key identifier:   1D:67:84:D8:10:00:94:D3:57:DF:3B:3E:21:06:76:E9:EF:81:4B:74
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       29E390114FB59C1F52E6626126F427710E84FB60
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:04 +0000
ROA not before:           Sun 03 May 2026 03:12:04 +0000
ROA not after:            Sun 02 May 2027 03:17:04 +0000
asID:                     9794
IP address blocks:        115.178.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e3:90:11:4f:b5:9c:1f:52:e6:62:61:26:f4:27:71:0e:84:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:04 2026 GMT
            Not After : May  2 03:17:04 2027 GMT
        Subject: CN=1D6784D8100094D357DF3B3E210676E9EF814B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c8:f6:7f:17:e4:8e:d5:95:a6:34:dc:05:d5:
                    53:ff:31:e8:1b:d4:52:9f:a0:49:5b:4e:56:3e:a1:
                    98:a6:87:9e:42:e0:9c:f1:52:6d:c0:1a:f9:f8:b2:
                    9e:30:20:35:ba:28:92:8c:90:ee:38:16:1b:74:6c:
                    8d:62:b9:6a:b4:9b:f0:75:ab:89:f2:50:1b:0d:ac:
                    12:39:57:b5:43:2b:5f:2a:cc:c1:06:31:71:cd:27:
                    3d:5d:09:7f:33:9a:32:bb:7c:e6:57:96:44:ed:39:
                    27:e8:15:4b:34:00:f8:e7:ee:1d:bc:a1:5d:b1:31:
                    2f:46:37:ae:45:a2:e8:5d:68:b2:41:9a:3c:fa:b4:
                    52:7c:8a:47:8f:61:27:ee:fe:14:ec:63:dc:bc:af:
                    0e:44:d7:63:39:dd:c6:d1:c8:4e:3c:b7:a9:5c:2c:
                    a0:77:af:f1:4c:cd:5b:99:8b:de:8a:8d:4c:f7:de:
                    e9:44:78:25:cf:3a:ae:46:af:3d:0b:3f:3b:06:45:
                    41:51:58:93:ac:13:35:d3:8a:d2:6d:31:73:88:87:
                    9f:65:3c:6f:d0:d3:16:22:da:39:8c:db:b9:d6:fa:
                    1e:ad:90:bc:4a:77:0d:27:73:a5:00:0f:e7:09:e5:
                    73:e9:82:60:7e:1a:ee:22:de:29:63:56:0a:cb:c6:
                    cc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:67:84:D8:10:00:94:D3:57:DF:3B:3E:21:06:76:E9:EF:81:4B:74
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:60:78:c1:a3:11:06:67:22:4c:55:14:98:81:f1:16:70:0f:
         2c:02:bf:dc:d2:3c:e0:12:6f:4c:be:90:af:b2:b6:0f:7b:e9:
         46:00:43:cf:e5:93:a7:40:4d:ef:ed:88:cc:84:9f:11:ca:de:
         84:23:9d:60:25:cc:c0:be:2e:e5:db:70:f5:04:d7:0e:5f:f1:
         c4:21:32:c7:ac:42:17:ff:d2:79:92:24:a7:0b:24:76:0e:83:
         41:d2:49:ef:f9:05:fe:86:ff:24:81:a6:1f:37:fc:7c:36:85:
         3c:46:86:57:4d:44:2f:34:ae:bb:c3:c9:c9:99:3b:44:ab:f1:
         02:d3:f6:7c:34:dc:c4:1a:3f:a1:8b:06:7e:69:c7:da:cc:3e:
         1a:a2:bc:f8:9f:bd:72:be:19:2b:a1:0c:e4:5a:af:0b:53:30:
         25:e4:e1:f1:9e:6b:85:02:0e:90:f3:21:26:e5:3a:a3:ac:0a:
         b8:40:3b:99:cf:02:76:b7:7d:90:b2:c3:d1:17:40:f8:99:f4:
         ec:c0:c2:da:bf:55:f6:83:01:50:4f:6b:35:38:be:d2:23:da:
         11:da:e1:58:c0:61:1b:d4:37:0b:08:52:51:a5:28:ac:a2:d2:
         fc:e9:b6:0e:46:c5:ae:4e:39:1f:12:82:c4:72:54:a4:61:52:
         ec:1c:3f:83
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKeOQEU+1nB9S5mJhJvQncQ6E+2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMDRaFw0yNzA1MDIwMzE3MDRaMDMxMTAvBgNV
BAMTKDFENjc4NEQ4MTAwMDk0RDM1N0RGM0IzRTIxMDY3NkU5RUY4MTRCNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMyPZ/F+SO1ZWmNNwF1VP/Megb
1FKfoElbTlY+oZimh55C4JzxUm3AGvn4sp4wIDW6KJKMkO44Fht0bI1iuWq0m/B1
q4nyUBsNrBI5V7VDK18qzMEGMXHNJz1dCX8zmjK7fOZXlkTtOSfoFUs0APjn7h28
oV2xMS9GN65FouhdaLJBmjz6tFJ8ikePYSfu/hTsY9y8rw5E12M53cbRyE48t6lc
LKB3r/FMzVuZi96KjUz33ulEeCXPOq5Grz0LPzsGRUFRWJOsEzXTitJtMXOIh59l
PG/Q0xYi2jmM27nW+h6tkLxKdw0nc6UAD+cJ5XPpgmB+Gu4i3iljVgrLxszrAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUHWeE2BAAlNNX3zs+IQZ26e+BS3QwHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTM0MzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnOylDANBgkqhkiG
9w0BAQsFAAOCAQEAq2B4waMRBmciTFUUmIHxFnAPLAK/3NI84BJvTL6Qr7K2D3vp
RgBDz+WTp0BN7+2IzISfEcrehCOdYCXMwL4u5dtw9QTXDl/xxCEyx6xCF//SeZIk
pwskdg6DQdJJ7/kF/ob/JIGmHzf8fDaFPEaGV01ELzSuu8PJyZk7RKvxAtP2fDTc
xBo/oYsGfmnH2sw+GqK8+J+9cr4ZK6EM5FqvC1MwJeTh8Z5rhQIOkPMhJuU6o6wK
uEA7mc8Cdrd9kLLD0RdA+Jn07MDC2r9V9oMBUE9rNTi+0iPaEdrhWMBhG9Q3CwhS
UaUorKLS/Om2DkbFrk45HxKCxHJUpGFS7Bw/gw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:28:46 2026 by rpki-client