Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa
File:                     3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa (raw, json)
Hash identifier:          b1b/vDhQE75TtqmclYBzlCTy3gXzi6HuGFmdw2fyLmg=
Subject key identifier:   A5:7F:4B:8F:8E:BE:6A:AB:1D:0B:A3:99:0F:CD:4D:F9:13:D5:BB:9F
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       25EF823A8D90FD119A5F28D9D0D55FC2B2A654CC
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:21 +0000
ROA not before:           Sun 03 May 2026 03:12:21 +0000
ROA not after:            Sun 02 May 2027 03:17:21 +0000
asID:                     9794
IP address blocks:        115.178.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ef:82:3a:8d:90:fd:11:9a:5f:28:d9:d0:d5:5f:c2:b2:a6:54:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:21 2026 GMT
            Not After : May  2 03:17:21 2027 GMT
        Subject: CN=A57F4B8F8EBE6AAB1D0BA3990FCD4DF913D5BB9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:53:3b:80:62:e3:d8:fa:6f:53:a1:ac:87:
                    93:d8:8f:32:92:8c:7e:b2:a6:59:0b:2f:32:8a:fc:
                    a0:35:63:ad:29:59:06:00:34:65:9c:b0:c8:e9:92:
                    43:06:9f:d1:19:b6:a7:c7:b9:cb:c4:c0:13:76:b3:
                    4f:f1:6d:7f:b2:97:42:29:d5:2b:5b:2e:5a:17:67:
                    63:33:6b:b3:07:6b:85:58:b3:34:b8:37:ad:58:2e:
                    b2:f4:7d:61:5f:9a:5f:b7:50:a8:00:cb:80:3c:9a:
                    9a:4b:cc:1a:58:17:95:9d:38:89:ae:65:38:05:59:
                    40:8b:54:5a:1b:07:2e:26:36:0f:87:16:35:b7:73:
                    06:58:72:31:96:53:95:7c:63:cf:d5:1a:b6:2e:8a:
                    10:a8:ce:31:f8:c2:b2:e8:ac:04:eb:78:32:7c:38:
                    9b:6d:26:2b:c2:34:89:d4:8a:b5:a0:2b:60:0d:1e:
                    50:7e:d3:6a:2f:4e:1a:42:b5:07:2c:6f:b1:45:1f:
                    43:36:b6:5e:72:b4:db:df:1c:26:60:f5:9d:be:c3:
                    b6:7a:09:8c:fb:e3:7c:b1:75:94:77:d1:31:9b:4b:
                    c9:19:e4:f9:9a:e5:c8:08:dd:c9:f8:d1:2b:e7:26:
                    37:e8:85:f2:45:64:e8:9e:e7:31:47:e7:f2:b6:9c:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:4B:8F:8E:BE:6A:AB:1D:0B:A3:99:0F:CD:4D:F9:13:D5:BB:9F
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:45:97:d5:d2:01:7b:e3:a0:53:ad:98:97:aa:70:4b:25:81:
         4e:32:f8:b4:a8:7e:53:20:79:d5:37:72:2c:c5:6e:6a:db:a4:
         c1:78:8e:0e:27:45:64:ef:54:7f:75:8b:1e:1e:a4:5c:74:61:
         48:41:2f:a8:4b:02:ce:9e:2a:ec:30:63:fa:d1:dc:58:51:74:
         9d:f8:dc:af:76:d9:00:5d:56:30:9e:06:88:c7:9d:f7:26:40:
         ae:c1:8e:9a:d0:92:9d:da:6a:a2:0d:fb:a5:db:67:6e:22:7a:
         7f:f0:58:47:fc:f3:94:e1:7d:fa:9e:16:60:93:52:ba:ef:c4:
         d5:a0:85:f2:b1:4f:f7:ff:8b:fb:64:5d:ca:de:02:bc:a9:17:
         ec:f5:62:b6:c7:9e:73:22:5d:27:2e:26:a0:a4:4e:10:51:61:
         eb:6d:8a:3c:9f:3f:5f:12:0e:9d:96:58:ad:3e:a0:8a:30:64:
         04:5b:a6:2d:ce:f8:35:b1:94:f4:f1:eb:b9:d8:97:09:75:96:
         ce:ff:11:d5:4e:76:f8:4b:c0:fe:90:63:3d:8a:e9:89:3b:11:
         74:e6:a7:a3:5a:7f:a5:33:09:a5:b0:5b:71:97:8b:ab:7d:62:
         14:47:39:f0:3d:24:ad:60:fa:3b:2f:f6:d1:cb:c8:3c:ed:9c:
         84:8e:fd:22
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJe+COo2Q/RGaXyjZ0NVfwrKmVMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMjFaFw0yNzA1MDIwMzE3MjFaMDMxMTAvBgNV
BAMTKEE1N0Y0QjhGOEVCRTZBQUIxRDBCQTM5OTBGQ0Q0REY5MTNENUJCOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYiFM7gGLj2PpvU6Gsh5PYjzKS
jH6yplkLLzKK/KA1Y60pWQYANGWcsMjpkkMGn9EZtqfHucvEwBN2s0/xbX+yl0Ip
1StbLloXZ2Mza7MHa4VYszS4N61YLrL0fWFfml+3UKgAy4A8mppLzBpYF5WdOImu
ZTgFWUCLVFobBy4mNg+HFjW3cwZYcjGWU5V8Y8/VGrYuihCozjH4wrLorATreDJ8
OJttJivCNInUirWgK2ANHlB+02ovThpCtQcsb7FFH0M2tl5ytNvfHCZg9Z2+w7Z6
CYz743yxdZR30TGbS8kZ5Pma5cgI3cn40SvnJjfohfJFZOie5zFH5/K2nPx/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUpX9Lj46+aqsdC6OZD81N+RPVu58wHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTM1MzIyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnOymDANBgkqhkiG
9w0BAQsFAAOCAQEArkWX1dIBe+OgU62Yl6pwSyWBTjL4tKh+UyB51TdyLMVuatuk
wXiODidFZO9Uf3WLHh6kXHRhSEEvqEsCzp4q7DBj+tHcWFF0nfjcr3bZAF1WMJ4G
iMed9yZArsGOmtCSndpqog37pdtnbiJ6f/BYR/zzlOF9+p4WYJNSuu/E1aCF8rFP
9/+L+2Rdyt4CvKkX7PVitseecyJdJy4moKROEFFh622KPJ8/XxIOnZZYrT6gijBk
BFumLc74NbGU9PHrudiXCXWWzv8R1U52+EvA/pBjPYrpiTsRdOano1p/pTMJpbBb
cZeLq31iFEc58D0krWD6Oy/20cvIPO2chI79Ig==
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:23 2026 by rpki-client