Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa
File:                     3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (raw, json)
Hash identifier:          yafTrlcxxOhmLsvoERrkvoW2n6E+e/d/hRY2XZ2/Be0=
Subject key identifier:   B4:82:80:E6:B7:B5:FB:67:94:F9:79:3F:A1:B7:7D:B8:70:E3:C1:34
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       2DD2836014E04D34F8B8795DE5382560165BA6C9
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa
Signing time:             Sun 05 Apr 2026 04:00:02 +0000
ROA not before:           Sun 05 Apr 2026 03:55:02 +0000
ROA not after:            Sun 04 Apr 2027 04:00:02 +0000
asID:                     18004
IP address blocks:        115.178.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 18:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d2:83:60:14:e0:4d:34:f8:b8:79:5d:e5:38:25:60:16:5b:a6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Apr  5 03:55:02 2026 GMT
            Not After : Apr  4 04:00:02 2027 GMT
        Subject: CN=B48280E6B7B5FB6794F9793FA1B77DB870E3C134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:d1:b9:14:fd:df:63:a2:26:30:7b:56:ac:
                    aa:a5:02:ea:9b:89:f6:1c:ba:8f:e5:b0:7e:55:06:
                    e2:4f:b9:29:55:6d:2d:e5:58:18:e8:40:3f:ab:43:
                    fd:a2:4d:f6:ab:dc:aa:bf:ce:7d:34:49:bf:85:20:
                    94:39:c2:7f:ca:4c:be:ca:60:52:72:1f:aa:ce:2d:
                    e7:7f:b0:55:68:13:e7:28:0d:f2:38:c5:f6:10:a4:
                    fb:9c:12:f4:b6:04:c5:5c:a6:7f:c6:a0:6f:66:58:
                    fd:df:37:af:f1:7f:36:c8:94:77:cf:69:a5:35:12:
                    6f:20:33:16:97:57:b2:64:7e:41:70:9e:12:e9:2d:
                    c5:d3:4c:4c:3b:5e:5b:3d:68:64:81:54:a9:37:de:
                    75:1f:cf:a6:b1:3a:4d:29:20:d2:af:dd:c8:31:66:
                    e0:bf:77:8b:79:41:aa:28:64:ba:3a:64:9d:9e:02:
                    05:49:f7:c7:21:78:e0:17:80:a6:27:8a:9d:1d:61:
                    10:b0:3b:68:02:0c:bc:6b:f9:c7:ca:3e:cf:1c:e9:
                    ec:62:48:2e:e3:41:68:ea:2e:f7:d3:25:ed:13:36:
                    d8:1f:7d:24:8e:da:1d:20:f4:09:5d:33:86:4e:4a:
                    d9:f4:9f:64:02:65:46:ac:6d:ab:3b:16:4d:78:0e:
                    16:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:82:80:E6:B7:B5:FB:67:94:F9:79:3F:A1:B7:7D:B8:70:E3:C1:34
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:ef:67:fc:5b:9b:8f:21:d8:77:dc:0f:18:2b:82:e8:37:37:
         b8:d8:e0:75:83:43:82:fc:eb:57:06:0f:ed:14:5e:9b:e0:b4:
         c6:85:8c:3a:f3:42:8a:7f:11:87:fc:ac:1a:74:bb:53:07:ca:
         bb:bd:a3:d4:52:e9:29:b6:7b:fc:fe:1a:41:78:a8:ad:4d:df:
         48:c1:d8:0d:b9:cd:8d:ae:f7:5d:62:29:78:74:43:e2:61:f8:
         9c:f5:47:95:b5:af:87:94:a0:6a:44:15:b9:de:c7:53:7c:63:
         18:d1:46:2f:47:bd:27:25:68:8b:dc:f8:85:30:6e:60:95:8a:
         24:de:92:ec:1c:4e:3c:a8:d0:b1:44:99:61:37:44:be:db:db:
         01:2d:a2:8e:56:db:12:fd:a9:e5:ef:a3:d7:c8:82:01:17:fb:
         43:e4:e8:ee:de:87:6f:24:cb:1a:cb:57:58:03:79:a5:b5:50:
         8b:db:33:38:4b:e8:6d:11:58:ab:cc:17:0e:a7:e5:74:06:1f:
         aa:14:85:c1:33:09:c8:5b:03:c5:98:40:5c:28:1e:c5:ff:78:
         d3:d4:54:a1:3e:8b:47:b6:df:ce:68:8e:0e:c2:07:f5:3c:e0:
         4f:00:8d:4e:85:92:ab:71:09:25:e8:01:44:d7:69:d1:c7:81:
         1b:86:93:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:05 2026 by rpki-client