Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa
File:                     3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (raw, json)
Hash identifier:          NixEwf5mDvcBcm4WRaep6YCV7NZr3+VpuhyzC3KObpI=
Subject key identifier:   A1:89:3E:83:89:B4:41:9E:D0:38:D4:4D:1D:D1:BB:E5:18:17:BF:B5
Certificate issuer:       /CN=ED63844C4B15010EA3F230F69A770C2B1C84C105
Certificate serial:       0C92BC1F5C1030A45193127AD9CCF20E064BBEDA
Authority key identifier: ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa
Signing time:             Sun 03 May 2026 02:11:59 +0000
ROA not before:           Sun 03 May 2026 02:06:59 +0000
ROA not after:            Sun 02 May 2027 02:11:59 +0000
asID:                     136825
IP address blocks:        123.253.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl
                          rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:92:bc:1f:5c:10:30:a4:51:93:12:7a:d9:cc:f2:0e:06:4b:be:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED63844C4B15010EA3F230F69A770C2B1C84C105
        Validity
            Not Before: May  3 02:06:59 2026 GMT
            Not After : May  2 02:11:59 2027 GMT
        Subject: CN=A1893E8389B4419ED038D44D1DD1BBE51817BFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:1e:4a:8b:17:e9:75:d4:2d:df:ca:0e:67:
                    84:60:82:4b:fd:34:e3:fe:32:de:60:73:69:20:a1:
                    d6:f1:92:7a:21:8b:27:b5:95:6b:65:d3:44:b4:1b:
                    08:c6:6a:b5:e7:58:b2:dd:db:40:b4:8e:fc:19:19:
                    0f:6d:d7:5e:35:aa:5b:6b:ee:69:04:c9:35:78:ea:
                    e5:56:ab:e5:34:79:71:fe:e8:5d:84:7a:9c:6b:b6:
                    59:32:d3:54:8e:8b:df:2b:2e:70:43:66:b3:b9:69:
                    a5:32:a5:57:a0:7f:fd:79:7a:dd:d2:e2:21:25:8a:
                    ab:29:51:ad:bb:4c:ec:85:f0:1e:25:24:68:aa:3c:
                    50:e7:55:a1:7a:d7:56:b6:b3:2c:60:e3:3b:fa:ff:
                    95:d8:da:2c:2f:13:b6:d5:94:90:e4:8a:af:a0:ce:
                    c6:9c:d9:59:44:16:0c:92:37:af:9a:b0:aa:d6:9c:
                    5d:2e:b7:92:b9:e6:23:19:f3:23:1a:c2:62:78:59:
                    f3:47:9d:97:25:ab:c5:22:f1:49:5a:00:86:69:93:
                    e6:54:18:86:f8:b1:c5:af:cb:7b:be:cd:f4:4d:93:
                    9b:73:3b:98:8c:2b:12:13:71:fe:bd:fa:e2:31:73:
                    57:1b:0f:7b:84:5e:fb:00:7c:f9:47:7e:2c:70:bc:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:89:3E:83:89:B4:41:9E:D0:38:D4:4D:1D:D1:BB:E5:18:17:BF:B5
            X509v3 Authority Key Identifier:
                keyid:ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:6f:21:1a:9d:39:cb:06:8a:44:69:7d:03:70:ed:e3:61:b3:
         91:15:48:d4:0b:a6:99:84:32:ef:dc:b6:d7:ed:b4:4c:f3:f1:
         ed:77:cf:e0:af:b6:ea:ae:d2:e3:75:a8:e3:76:0a:53:c8:27:
         ef:fb:f2:df:67:9e:35:d1:7c:ec:12:81:08:04:13:76:51:20:
         f3:84:1b:14:d4:7a:d2:03:73:93:5c:79:d3:0d:ad:af:54:9a:
         f5:63:6b:82:73:b3:b5:fd:fb:c2:f2:4f:1b:67:f7:c1:fe:a5:
         cb:b1:6b:b4:bd:f8:96:68:7d:c5:14:83:80:c5:37:c0:06:ff:
         f3:3a:e8:71:d5:10:f5:bd:7d:68:71:62:47:59:a9:fc:ec:33:
         5e:cb:69:c2:3e:44:f4:55:27:7d:a9:00:ae:b7:fb:15:06:6e:
         f1:10:fb:23:bd:2c:3e:5c:2d:9d:85:6a:36:9f:76:21:83:2d:
         98:b2:c0:2e:3f:cf:b3:8e:9a:77:78:d1:be:0e:50:ba:67:78:
         70:7b:0f:83:49:05:f7:67:f9:10:fc:15:07:af:29:82:22:e9:
         77:33:d5:eb:fb:f8:60:14:8e:37:3a:e8:5c:9b:de:fd:99:cf:
         eb:94:87:95:c4:d1:46:29:4f:9d:be:a0:41:6f:82:31:7f:b3:
         6d:20:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:01:58 2026 by rpki-client