Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa
File:                     3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (raw, json)
Hash identifier:          4bHdH/nQKsRxntIjD5Kf1DkiOm+lTlJKIYuhg4eAcVw=
Subject key identifier:   93:59:B1:1E:D1:CF:0C:ED:F4:6B:30:BE:CD:4B:C2:D7:48:C6:7B:EC
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       59A3F9900D8C0DA66EBA25E9D91043063C813AAE
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa
Signing time:             Sun 05 Apr 2026 03:00:02 +0000
ROA not before:           Sun 05 Apr 2026 02:55:02 +0000
ROA not after:            Sun 04 Apr 2027 03:00:02 +0000
asID:                     18004
IP address blocks:        115.178.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 18:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a3:f9:90:0d:8c:0d:a6:6e:ba:25:e9:d9:10:43:06:3c:81:3a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Apr  5 02:55:02 2026 GMT
            Not After : Apr  4 03:00:02 2027 GMT
        Subject: CN=9359B11ED1CF0CEDF46B30BECD4BC2D748C67BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f5:d0:ae:5b:fb:ff:77:04:6e:e5:ab:b8:8c:
                    85:3f:30:58:44:30:cb:e3:90:50:71:a7:2e:4e:0d:
                    80:b3:22:99:3a:da:58:53:6d:24:6d:0a:b6:c8:68:
                    94:a6:13:cb:d4:32:1f:0f:6a:c3:a2:17:29:29:33:
                    e9:c9:fa:40:22:96:6b:3b:87:fc:79:26:6c:46:83:
                    69:40:70:92:c3:f4:43:57:b2:b1:fd:79:de:70:ee:
                    f9:c3:22:51:8c:7d:20:98:83:91:06:f2:18:4c:ea:
                    6b:33:c0:b4:04:b3:fe:e8:1a:95:c4:f5:54:64:32:
                    11:9a:7a:9d:d3:a2:36:af:71:09:ae:34:76:9b:a1:
                    ef:8f:bc:fe:6a:7a:c2:39:05:20:32:a9:83:27:11:
                    fc:a5:68:73:25:f8:87:c1:f4:af:6b:0a:97:c0:67:
                    dd:1a:5c:9f:ff:0b:7a:a8:59:d4:25:00:88:c3:f6:
                    f9:dd:89:31:84:fe:f0:1c:9c:6a:3c:c4:80:9d:96:
                    1f:e1:61:a4:38:5c:57:35:b6:d5:3b:8f:70:ba:cf:
                    13:32:04:9b:9b:93:d4:62:58:00:c0:59:ba:6f:74:
                    98:d0:b9:0d:4f:0f:00:17:65:9b:a4:3e:cb:2d:51:
                    67:11:ff:cd:3e:a7:d5:f7:8c:43:9b:70:05:fc:2f:
                    23:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:59:B1:1E:D1:CF:0C:ED:F4:6B:30:BE:CD:4B:C2:D7:48:C6:7B:EC
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:2a:59:3d:01:43:58:bc:3b:df:33:95:d1:83:ac:96:e1:f0:
         96:3d:96:25:34:6f:e4:9c:be:17:3b:1d:93:dc:8a:4c:79:04:
         34:96:d4:2f:fa:30:80:7a:61:c9:74:30:ce:64:7b:ad:8d:d4:
         46:e6:3b:a9:93:09:9f:0b:a4:a9:b8:6d:19:b4:6d:d4:99:59:
         6e:ca:8f:99:f0:ee:04:84:45:dc:48:67:7e:ad:60:10:3b:fd:
         86:8d:fb:8e:09:97:e6:d4:a8:b3:18:3a:31:05:cb:75:ad:e9:
         53:10:fc:ca:38:4f:25:78:e3:a3:30:1d:c3:c8:bc:e5:3a:34:
         a7:8f:17:65:6b:0b:cf:56:fb:9c:70:dc:36:d2:bd:e8:62:57:
         19:6c:bb:4c:f5:fb:27:9f:c8:b1:fb:b5:f8:16:2e:7d:3c:9b:
         44:ef:d8:55:99:3a:e4:d0:dd:a5:66:b5:e1:7f:78:35:51:d5:
         c5:24:2e:6a:f2:4b:ab:a3:2a:b6:d8:77:d7:9a:58:19:54:52:
         43:fa:c9:82:5a:db:fd:b3:23:9a:f3:0f:1d:b2:9a:79:7a:f9:
         b1:f6:dd:b1:5f:a1:4a:74:45:0c:9d:73:65:97:d6:75:ae:f9:
         2a:1a:3d:c7:79:fe:7d:b5:c2:4b:57:fe:49:f1:0f:84:7c:e9:
         26:03:79:f9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWaP5kA2MDaZuuiXp2RBDBjyBOq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFG
M0IxOTc2NjAeFw0yNjA0MDUwMjU1MDJaFw0yNzA0MDQwMzAwMDJaMDMxMTAvBgNV
BAMTKDkzNTlCMTFFRDFDRjBDRURGNDZCMzBCRUNENEJDMkQ3NDhDNjdCRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa9dCuW/v/dwRu5au4jIU/MFhE
MMvjkFBxpy5ODYCzIpk62lhTbSRtCrbIaJSmE8vUMh8PasOiFykpM+nJ+kAilms7
h/x5JmxGg2lAcJLD9ENXsrH9ed5w7vnDIlGMfSCYg5EG8hhM6mszwLQEs/7oGpXE
9VRkMhGaep3TojavcQmuNHaboe+PvP5qesI5BSAyqYMnEfylaHMl+IfB9K9rCpfA
Z90aXJ//C3qoWdQlAIjD9vndiTGE/vAcnGo8xICdlh/hYaQ4XFc1ttU7j3C6zxMy
BJubk9RiWADAWbpvdJjQuQ1PDwAXZZukPsstUWcR/80+p9X3jEObcAX8LyPJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUk1mxHtHPDO30azC+zUvC10jGe+wwHwYDVR0j
BBgwFoAUc12HuoZ3OscBN89TEWNYofOxl2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMC83MzVEODdCQTg2
NzczQUM3MDEzN0NGNTMxMTYzNThBMUYzQjE5NzY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFGM0Ix
OTc2Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNWQzNjRhLWRhMGItNDU0MC05
MzQ5LTU5MzBiZDcyNWNlMy8wLzMxMzEzNTJlMzEzNzM4MmUzMTM5MzIyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzMTM4MzAzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFc7LAMA0GCSqG
SIb3DQEBCwUAA4IBAQB+Klk9AUNYvDvfM5XRg6yW4fCWPZYlNG/knL4XOx2T3IpM
eQQ0ltQv+jCAemHJdDDOZHutjdRG5jupkwmfC6SpuG0ZtG3UmVluyo+Z8O4EhEXc
SGd+rWAQO/2GjfuOCZfm1KizGDoxBct1relTEPzKOE8leOOjMB3DyLzlOjSnjxdl
awvPVvuccNw20r3oYlcZbLtM9fsnn8ix+7X4Fi59PJtE79hVmTrk0N2lZrXhf3g1
UdXFJC5q8kuroyq22HfXmlgZVFJD+smCWtv9syOa8w8dspp5evmx9t2xX6FKdEUM
nXNll9Z1rvkqGj3Hef59tcJLV/5J8Q+EfOkmA3n5
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:41 2026 by rpki-client