Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa
File:                     3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa (raw, json)
Hash identifier:          Gt77/DpvHcyfECJ/rzUv8b/LftlAsDwob9ro6Az9CBg=
Subject key identifier:   E7:51:60:EB:2E:8C:31:7D:75:07:2B:72:3A:F0:FF:9F:17:C0:25:0B
Certificate issuer:       /CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3
Certificate serial:       7F7A3C3BD0D2BF254E1FEF9C3C4F3F05C4115CA9
Authority key identifier: 2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa
Signing time:             Sun 03 May 2026 02:15:00 +0000
ROA not before:           Sun 03 May 2026 02:10:00 +0000
ROA not after:            Sun 02 May 2027 02:15:00 +0000
asID:                     46029
IP address blocks:        117.121.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl
                          rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7a:3c:3b:d0:d2:bf:25:4e:1f:ef:9c:3c:4f:3f:05:c4:11:5c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3
        Validity
            Not Before: May  3 02:10:00 2026 GMT
            Not After : May  2 02:15:00 2027 GMT
        Subject: CN=E75160EB2E8C317D75072B723AF0FF9F17C0250B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:84:b9:e4:46:7e:4a:ec:23:a1:65:eb:94:
                    fc:ef:8e:82:c9:52:6e:cf:47:6e:36:05:9d:61:c3:
                    e7:ac:b9:e8:6d:99:4b:88:d6:77:21:4f:7b:7e:d3:
                    db:de:d9:00:18:79:5e:fc:84:d0:b5:e6:30:96:3c:
                    ae:92:8a:eb:d4:6a:3a:77:17:1a:dd:e8:8d:dd:61:
                    aa:e7:28:52:ec:8d:b2:44:cb:b8:a1:d5:67:fd:8f:
                    5f:83:9f:32:9a:d6:e2:1f:50:9a:ba:4d:12:04:23:
                    c3:be:ad:9a:ac:de:4d:70:f7:fb:e2:3e:7e:f3:9a:
                    e7:58:50:41:74:91:b1:ad:31:26:73:b8:e2:a7:4f:
                    71:73:78:f9:fb:73:3e:fc:cb:22:cf:9e:83:f7:f7:
                    5b:64:e2:63:42:e7:8d:f9:82:51:97:e3:68:5b:32:
                    c8:30:ad:1f:f4:be:60:8a:ff:f2:c4:db:fc:15:36:
                    16:de:a0:cd:db:bb:35:37:95:c2:fd:90:20:28:c4:
                    ec:5b:41:76:32:5a:f5:e2:4c:d6:fe:44:5f:54:d6:
                    f3:3a:9e:72:c8:84:9e:8a:38:93:03:d9:44:71:40:
                    aa:54:ec:fa:cf:1f:0e:39:84:92:56:ab:dd:66:5b:
                    83:81:9f:55:d3:3e:d7:7d:ea:ad:3f:83:32:2b:9f:
                    72:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:51:60:EB:2E:8C:31:7D:75:07:2B:72:3A:F0:FF:9F:17:C0:25:0B
            X509v3 Authority Key Identifier:
                keyid:2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.121.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:6b:96:d2:c3:7b:bf:b7:9d:9e:18:14:67:f5:da:10:e4:4e:
         e4:83:19:a7:92:50:dc:93:2e:66:9e:b4:96:cb:a6:a0:db:da:
         02:49:75:98:b6:38:33:67:4f:70:eb:e8:74:b1:53:7a:48:73:
         64:27:a9:08:1b:a1:ad:5f:bf:f2:f4:e2:6d:b3:05:ac:93:dd:
         b5:16:ed:b3:e9:2f:83:4e:35:1d:88:cb:a7:3d:7d:00:ca:6c:
         60:18:81:18:ed:c9:06:ce:c7:56:47:d9:f9:e5:d9:6b:50:84:
         55:76:20:b6:34:82:f0:01:1d:9a:cd:8b:8e:71:3b:a6:25:da:
         57:d6:c8:a4:39:47:ff:3f:4d:55:1a:d0:84:32:33:09:b3:c3:
         a3:72:c0:70:78:bd:51:53:c4:2c:be:63:f4:b1:d6:2e:f7:e1:
         c0:01:a5:69:3f:86:6b:75:b7:6b:87:0c:02:98:6b:da:4b:75:
         6f:7a:79:d9:16:f0:8b:63:c0:17:e3:da:92:e4:36:3c:f2:76:
         98:e3:34:dd:9e:cb:0f:91:81:3f:35:72:32:a2:67:bd:8d:0d:
         a1:51:28:69:ce:fb:79:55:5d:71:ff:38:c1:cf:b4:fe:82:ba:
         42:5b:68:8f:55:d1:fd:de:6e:58:f8:bf:14:cc:83:f3:b9:e4:
         b5:50:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:49 2026 by rpki-client