Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/3139322e3134352e3232382e302f32332d3234203d3e20313430303331.roa
File:                     3139322e3134352e3232382e302f32332d3234203d3e20313430303331.roa (raw, json)
Hash identifier:          QIrlBs0TTDg2xjO/SB49yDW2zY9RwuZ4JAxZkBr6ucA=
Subject key identifier:   6A:51:E5:EA:25:2C:5C:77:9C:F8:E7:04:6B:70:EA:06:1A:88:70:34
Certificate issuer:       /CN=B10811E98433E40D5FC6AFC366AA6FEE28172365
Certificate serial:       1DCD2177B67655BCC6B376B8BBDB1A5E54F856C5
Authority key identifier: B1:08:11:E9:84:33:E4:0D:5F:C6:AF:C3:66:AA:6F:EE:28:17:23:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/3139322e3134352e3232382e302f32332d3234203d3e20313430303331.roa
Signing time:             Thu 22 Oct 2026 09:55:19 +0000
ROA not before:           Thu 22 Oct 2026 09:50:19 +0000
ROA not after:            Thu 21 Oct 2027 09:55:19 +0000
asID:                     140031
IP address blocks:        192.145.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.crl
                          rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 19:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cd:21:77:b6:76:55:bc:c6:b3:76:b8:bb:db:1a:5e:54:f8:56:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10811E98433E40D5FC6AFC366AA6FEE28172365
        Validity
            Not Before: Oct 22 09:50:19 2026 GMT
            Not After : Oct 21 09:55:19 2027 GMT
        Subject: CN=6A51E5EA252C5C779CF8E7046B70EA061A887034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:9c:0a:f3:71:87:31:c2:e9:d8:ec:6d:96:
                    0e:5a:44:7b:b7:dd:bd:c3:f4:fc:a1:dd:da:dc:fc:
                    45:e8:dc:38:8b:f9:e9:a6:fc:33:6c:54:66:de:ef:
                    6f:7c:0e:ac:fa:84:1d:85:6a:a6:a3:36:59:e3:1e:
                    44:37:a6:2d:64:e2:5e:67:6a:2c:0e:fd:57:d5:9d:
                    f8:12:b6:cb:75:57:08:b1:5c:3f:c6:6c:3b:d8:03:
                    28:40:e7:af:84:57:3c:42:79:da:b3:f9:d1:fa:75:
                    dc:ae:30:60:6d:34:d7:4f:48:65:44:54:b2:8f:ec:
                    80:ad:e0:5e:7e:3c:7e:c2:d5:43:aa:a6:42:e5:a0:
                    ca:53:dc:58:cf:9c:20:62:8c:d9:88:8a:07:ec:52:
                    ad:4c:f5:d4:e8:1b:e4:09:0c:df:dc:f1:b0:27:52:
                    9e:86:69:28:88:64:d5:a0:e8:f5:a4:44:9a:ae:21:
                    fe:91:94:f2:96:f3:74:8f:37:31:58:5b:13:f3:cb:
                    4b:39:36:a7:77:53:d4:6c:57:4e:b8:a2:52:a5:66:
                    bd:6b:2b:8d:2a:a4:4b:1c:00:39:77:84:51:80:be:
                    b2:d3:10:97:90:a5:fd:29:c6:25:b4:d3:ef:96:4f:
                    a6:ba:7e:b2:60:06:6e:bf:46:13:b0:60:e0:46:c9:
                    7d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:51:E5:EA:25:2C:5C:77:9C:F8:E7:04:6B:70:EA:06:1A:88:70:34
            X509v3 Authority Key Identifier:
                keyid:B1:08:11:E9:84:33:E4:0D:5F:C6:AF:C3:66:AA:6F:EE:28:17:23:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/3139322e3134352e3232382e302f32332d3234203d3e20313430303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:de:1a:ee:11:d5:ee:4a:57:57:b3:04:83:11:9d:da:47:65:
         99:68:d4:b2:c0:bb:91:9f:a4:3a:36:e4:56:e7:cd:80:e9:5d:
         ee:09:c7:88:36:e7:08:26:9c:f3:17:23:3c:57:64:06:f5:7c:
         61:96:91:eb:12:14:8c:00:87:a5:5a:b6:f0:e3:98:63:95:83:
         60:ed:80:f7:69:93:cc:50:a0:8a:8e:f9:61:4c:e6:55:ed:04:
         c6:87:e1:d6:30:6d:73:b3:92:48:bb:37:30:be:cc:ea:26:de:
         3d:be:6f:2e:1f:11:83:fb:31:3b:19:3a:37:7c:db:37:e8:41:
         ea:e9:d4:0f:81:be:e7:30:11:ff:a4:6a:b7:72:67:35:20:a6:
         c6:c4:36:61:7c:a7:e4:4f:8f:9b:1f:ba:79:6f:49:88:59:ca:
         a3:96:20:88:df:31:7f:31:cb:21:80:1c:7a:f3:de:05:68:32:
         bd:46:61:3e:34:1e:7a:b6:2f:1e:d2:5d:25:5a:06:99:fb:a4:
         17:9f:4c:18:98:b9:c2:9b:35:72:d1:47:ad:ba:90:81:e5:c1:
         09:14:70:b9:0c:f1:4c:70:f3:4f:c0:84:b7:c4:a8:ec:e3:de:
         07:35:be:8c:9e:55:85:90:ad:0a:bc:f8:b0:27:b6:ec:c5:08:
         0f:e0:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:40:32 2026 by rpki-client