Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa
File:                     3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa (raw, json)
Hash identifier:          UH+sfXi3uyUzmqtZ5a3kiK88kT3KnsNHU+6St14pVbU=
Subject key identifier:   E0:56:2E:FE:CC:F1:E6:43:F8:91:01:73:09:93:01:6C:FF:8D:7F:DE
Certificate issuer:       /CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3
Certificate serial:       7E721228685F58706E804637B8E14554C9861207
Authority key identifier: 2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa
Signing time:             Sun 03 May 2026 02:14:58 +0000
ROA not before:           Sun 03 May 2026 02:09:58 +0000
ROA not after:            Sun 02 May 2027 02:14:58 +0000
asID:                     46029
IP address blocks:        117.121.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl
                          rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:72:12:28:68:5f:58:70:6e:80:46:37:b8:e1:45:54:c9:86:12:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3
        Validity
            Not Before: May  3 02:09:58 2026 GMT
            Not After : May  2 02:14:58 2027 GMT
        Subject: CN=E0562EFECCF1E643F89101730993016CFF8D7FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:7f:94:69:e5:b1:4c:cc:01:7e:fc:b4:dc:
                    7e:ce:84:4a:1c:1c:84:0d:38:12:84:8c:0a:6c:16:
                    24:fc:78:47:c1:8c:bf:57:35:09:89:e1:68:ab:16:
                    98:5c:0e:45:d9:64:43:81:f8:40:92:d7:fd:78:ce:
                    3e:18:3d:d1:6d:8d:79:9b:e6:ae:95:91:0d:3a:2b:
                    04:5e:18:92:41:3b:2b:6e:ba:b8:32:1b:19:5e:73:
                    23:ad:f8:44:ea:d5:af:8c:2e:0b:87:d3:6c:8f:cd:
                    8a:41:ba:45:30:5c:2d:22:b5:4b:4e:f5:60:58:4c:
                    2a:2d:ca:0a:98:14:65:ed:51:71:83:03:0c:8b:2a:
                    3d:7e:9f:cb:9b:bb:1b:da:5c:8b:bf:51:29:44:70:
                    ee:ce:fa:27:53:82:dd:3e:ab:f6:2d:e2:90:75:6b:
                    91:e6:fb:d7:84:a2:cd:1e:9c:21:f2:4b:e7:05:d0:
                    fd:91:fc:22:e1:5f:e0:fc:53:6e:f3:60:83:c7:bb:
                    69:1c:4a:57:fb:3e:6f:5b:af:0f:4b:72:9f:7f:07:
                    c9:d4:fc:63:4b:2f:ab:d5:df:8f:3d:ef:f4:24:74:
                    fc:39:fc:fe:02:84:a8:ff:5b:ed:e9:b7:69:24:2a:
                    37:7c:5a:ba:5a:4b:01:bb:80:b7:9a:f7:66:c3:f5:
                    fa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:56:2E:FE:CC:F1:E6:43:F8:91:01:73:09:93:01:6C:FF:8D:7F:DE
            X509v3 Authority Key Identifier:
                keyid:2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.121.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:39:ef:46:db:71:b2:b8:69:a4:15:53:b1:47:7e:1b:e9:fa:
         18:f9:b9:4a:e4:28:24:60:ff:a6:fb:90:a0:41:83:02:cf:f2:
         d0:95:c7:95:dc:fe:6f:27:d2:f5:cb:3d:f9:f2:12:de:45:fc:
         c9:a9:85:99:18:7a:48:a4:e5:00:1d:ba:1d:ab:8f:08:c7:ab:
         54:94:a0:04:ea:85:4b:9d:d9:0e:87:f1:7d:4b:ec:84:d5:7e:
         99:9f:7b:2b:d6:11:1f:ad:98:1e:9e:4e:45:66:bc:ed:b2:a8:
         02:ae:90:ee:14:61:f9:17:13:54:f9:25:4f:f5:0a:a6:8d:af:
         8d:d2:da:84:b7:b3:4f:e4:85:79:b4:1f:0b:52:2d:e4:c8:5e:
         2d:dc:ef:23:52:35:02:f8:31:0d:05:93:e8:06:ff:5d:b4:6e:
         6a:93:5b:9b:3e:82:74:82:2a:24:9b:24:88:6a:a4:21:43:61:
         fb:d7:33:c1:19:7e:54:d8:3a:a1:09:ff:1f:de:94:2b:4d:58:
         ff:53:66:08:07:55:e6:cc:60:54:9e:8c:29:01:52:61:f4:41:
         ea:97:fd:2d:d0:f6:cb:0e:09:dd:8c:12:1c:95:c8:26:76:96:
         57:e5:22:eb:d1:0c:e1:2e:ac:85:81:aa:99:b2:b8:01:7c:8c:
         7c:9b:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:36 2026 by rpki-client