Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa
File:                     3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa (raw, json)
Hash identifier:          izMiwPM+w4qm0w5Ba6mdISSyqugvvojJkoTJd4QJhus=
Subject key identifier:   7D:12:52:6E:D4:8F:AB:89:12:CF:26:AD:8E:9D:83:70:9F:30:E1:C1
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       0243C7438A145319F47C50D66A31B637209B6016
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:09 +0000
ROA not before:           Sun 03 May 2026 03:12:09 +0000
ROA not after:            Sun 02 May 2027 03:17:09 +0000
asID:                     9794
IP address blocks:        115.178.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:43:c7:43:8a:14:53:19:f4:7c:50:d6:6a:31:b6:37:20:9b:60:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:09 2026 GMT
            Not After : May  2 03:17:09 2027 GMT
        Subject: CN=7D12526ED48FAB8912CF26AD8E9D83709F30E1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:91:22:75:2c:da:b1:33:a8:80:b8:22:5b:
                    cf:bf:5e:1e:54:b6:94:76:73:30:23:70:09:1e:ed:
                    4a:42:23:1f:78:84:8e:16:a8:e9:74:bd:af:82:72:
                    29:cb:29:b9:a2:e5:15:53:88:64:51:f3:62:72:2d:
                    6f:d7:87:a6:a7:bf:33:c6:9e:f6:77:21:96:77:e4:
                    03:fd:e6:40:0b:fa:6b:1e:3a:df:05:ae:2d:81:49:
                    53:6c:77:90:38:d8:07:f9:3a:2d:00:d2:3e:7f:81:
                    d3:27:54:b9:4a:18:5f:48:80:f0:a4:86:14:dc:06:
                    ce:a7:b0:9b:71:9c:d2:0e:90:ed:3e:d2:c7:86:a4:
                    6e:a9:b4:1b:1b:5b:06:3f:77:a8:40:bb:f0:91:bc:
                    42:9f:f0:da:58:b0:f1:b5:ec:cc:c9:7f:da:76:22:
                    49:d6:c2:13:cb:68:5b:73:1e:f8:f9:0b:8b:7b:22:
                    39:d6:af:a9:b7:78:9c:6d:2d:e6:bc:40:36:65:9f:
                    d4:7a:1e:62:50:d2:22:1b:8a:72:a1:36:08:9d:a0:
                    45:1a:b5:64:5c:84:28:b6:65:f5:e0:4c:1a:e1:36:
                    b1:e0:24:03:01:8d:dc:e2:d1:c5:98:30:4b:fd:3b:
                    ca:d1:9f:57:2e:53:f8:00:6c:23:6d:8c:cf:e3:36:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:12:52:6E:D4:8F:AB:89:12:CF:26:AD:8E:9D:83:70:9F:30:E1:C1
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:c5:57:8b:8b:ed:ea:da:0d:55:19:ea:07:07:67:32:55:
         45:8b:6c:df:f0:96:d8:f4:99:ca:74:4b:34:2c:8b:aa:84:c7:
         7c:46:d6:41:7d:7c:27:0a:d2:75:16:2e:c2:6c:67:66:a1:af:
         48:c1:53:3f:6d:7f:54:62:ad:41:df:40:07:c7:da:1d:76:9e:
         c9:65:1e:d8:39:39:3f:8a:dd:aa:21:17:2e:2a:56:1e:f2:e3:
         ff:9f:b2:4a:c0:05:86:e4:18:7e:9e:87:26:c9:4b:c2:9f:7d:
         85:77:c6:04:8f:51:3e:82:44:10:a3:8e:e5:ce:33:b7:46:d1:
         23:a9:8c:03:23:0e:b4:6a:a6:30:eb:a8:8d:d9:43:68:6c:7c:
         5c:b5:6a:2e:06:03:68:c4:4e:f3:8d:d0:95:63:ce:5c:0b:9f:
         c5:53:50:15:cf:81:55:80:5f:3c:79:f7:78:d5:1c:ef:20:04:
         bb:7a:2c:7a:03:60:c5:e0:c6:f5:8a:a9:b0:c8:f8:a3:fc:c9:
         f3:d3:c1:f9:24:9f:ea:0f:af:47:22:fd:e7:07:9d:3a:27:00:
         c5:1e:29:7b:3e:0b:43:a5:f4:ea:90:f8:71:57:16:66:d6:6f:
         52:fd:8e:56:af:2a:ff:28:5f:cf:c6:c8:1e:9f:d8:17:19:53:
         07:90:bb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:43 2026 by rpki-client