Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3132302e38392e39342e302f32332d3234203d3e203536323333.roa
File:                     3132302e38392e39342e302f32332d3234203d3e203536323333.roa (raw, json)
Hash identifier:          Ywxuhkdga9hO4itaG+v5I5zsagA1Lbo8qR7ItHh5q8A=
Subject key identifier:   1F:05:D6:02:1E:94:91:6F:D0:6D:C7:2C:15:0D:4D:8B:1C:54:77:BA
Certificate issuer:       /CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Certificate serial:       7DD92DF9288F0D07BADF53C12D9200CEB40873B1
Authority key identifier: E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3132302e38392e39342e302f32332d3234203d3e203536323333.roa
Signing time:             Sun 03 May 2026 02:11:05 +0000
ROA not before:           Sun 03 May 2026 02:06:05 +0000
ROA not after:            Sun 02 May 2027 02:11:05 +0000
asID:                     56233
IP address blocks:        120.89.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
                          rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:2d:f9:28:8f:0d:07:ba:df:53:c1:2d:92:00:ce:b4:08:73:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
        Validity
            Not Before: May  3 02:06:05 2026 GMT
            Not After : May  2 02:11:05 2027 GMT
        Subject: CN=1F05D6021E94916FD06DC72C150D4D8B1C5477BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:ee:46:01:ca:33:9a:3e:7a:bd:7a:11:01:
                    d1:a6:60:56:03:90:2e:02:94:51:17:f8:88:59:76:
                    b6:25:eb:c8:9e:cc:9d:88:44:85:f5:6a:b2:76:e5:
                    97:92:f5:14:13:c8:07:db:2e:9a:60:f3:ae:2f:81:
                    31:55:07:0d:d4:9e:85:cb:d4:dd:51:43:81:82:90:
                    38:97:5d:e0:bc:4f:47:48:5e:ae:f9:ca:31:75:4a:
                    ed:94:2e:44:13:d2:f5:4c:fd:d0:ec:53:09:e0:f0:
                    a6:b9:09:14:04:75:b5:e1:64:ad:f6:ab:09:18:73:
                    73:34:43:e4:8a:c0:6c:a4:c1:09:a8:82:80:fa:68:
                    2b:c7:91:ba:86:9a:b0:91:b9:c1:d9:7e:4f:ec:4e:
                    7d:0f:95:e6:b0:6b:e1:fa:53:55:c4:d1:84:2f:84:
                    8c:18:38:85:44:be:13:e1:45:5b:bb:88:35:4a:f1:
                    98:27:42:2c:f1:76:de:37:85:4c:04:55:36:61:d5:
                    19:ff:67:4b:11:81:1c:eb:58:a6:82:e4:25:f3:5e:
                    9a:55:8f:8c:92:b0:1b:70:09:4c:2f:63:89:fa:e2:
                    b6:16:6c:3c:03:28:4b:6c:4b:89:df:23:1d:f2:62:
                    23:5d:d8:0a:49:78:f6:d7:07:c5:35:82:fa:ca:ec:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:05:D6:02:1E:94:91:6F:D0:6D:C7:2C:15:0D:4D:8B:1C:54:77:BA
            X509v3 Authority Key Identifier:
                keyid:E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3132302e38392e39342e302f32332d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.89.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:d2:08:0b:e0:8d:56:ec:e6:e2:ea:ab:b7:83:1a:c8:ca:d3:
         7d:b7:df:35:8f:47:de:b7:9f:a8:d4:89:53:47:be:2b:f8:30:
         38:20:ce:60:6c:6a:4b:7e:30:f0:60:ce:d6:d8:f3:a2:fa:cb:
         f4:f0:2d:82:0b:e1:3e:ba:e7:7e:d2:46:50:92:40:ec:e5:2b:
         29:da:89:77:57:84:55:88:9b:4c:e7:83:2e:83:8f:ba:81:c0:
         b9:40:a8:e4:45:d5:61:2e:f3:12:c3:87:b1:ba:c8:fa:0d:fd:
         6e:00:8e:74:76:e8:40:7f:1b:79:67:39:94:bb:28:fa:91:85:
         20:a6:7a:09:ae:6d:fa:4f:e4:c8:e7:56:a2:82:60:c0:cf:bb:
         15:63:16:0e:2d:c9:f2:60:d9:c6:ae:4f:8c:00:30:b7:13:46:
         4b:b3:c6:e2:52:68:fc:b3:1f:c4:66:9a:04:5f:8c:eb:4c:6a:
         4c:aa:e1:7e:71:6e:49:41:3b:8e:81:e8:e7:92:fa:3a:bd:d3:
         09:a3:90:c7:0b:57:ee:83:84:de:db:e3:06:2f:cf:25:41:90:
         44:fe:c8:93:2e:4d:f7:a5:4d:e7:1f:a5:cc:55:02:34:b5:3d:
         0a:44:be:e8:37:02:a4:5e:32:aa:32:94:cc:d4:64:56:92:8a:
         a1:b8:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:32 2026 by rpki-client