Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3132322e3130322e34302e302f32312d3234203d3e203338373538.roa
File:                     3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (raw, json)
Hash identifier:          +GuHf2Sf8fgzz63MUl6JUjs+OpYd+b5d1QqlS8U/zLw=
Subject key identifier:   36:44:E6:B0:1E:9E:B6:F2:DD:CE:F7:C4:EB:61:FE:7C:8F:7C:28:3B
Certificate issuer:       /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial:       7CC53EDF9AF2C5DFB7463B007D9FA05F6F8875A1
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3132322e3130322e34302e302f32312d3234203d3e203338373538.roa
Signing time:             Sun 03 May 2026 02:17:06 +0000
ROA not before:           Sun 03 May 2026 02:12:06 +0000
ROA not after:            Sun 02 May 2027 02:17:06 +0000
asID:                     38758
IP address blocks:        122.102.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c5:3e:df:9a:f2:c5:df:b7:46:3b:00:7d:9f:a0:5f:6f:88:75:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
        Validity
            Not Before: May  3 02:12:06 2026 GMT
            Not After : May  2 02:17:06 2027 GMT
        Subject: CN=3644E6B01E9EB6F2DDCEF7C4EB61FE7C8F7C283B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:ae:a1:7f:16:17:b3:01:44:a4:4b:3a:4f:
                    a1:7f:dd:2c:a3:f1:01:8b:63:ed:c8:9b:ad:e2:d7:
                    b1:90:66:be:73:f4:0a:96:45:5d:8e:a7:a6:9b:cc:
                    bd:9d:91:b8:20:dd:72:36:91:82:65:44:c4:40:41:
                    20:48:ba:58:29:ba:79:a9:c5:cb:03:ce:25:d6:34:
                    bc:ef:76:30:b5:13:ea:b5:c4:87:94:62:35:d2:4d:
                    74:5e:cc:85:d9:9f:16:c5:75:1d:4b:ff:61:80:e0:
                    f8:49:33:c3:aa:fc:05:7a:08:9f:03:29:25:b9:87:
                    a8:61:6a:d4:2b:d7:50:4f:96:20:7d:dd:61:93:b0:
                    f5:f6:35:3e:00:a4:9f:d4:c1:14:6b:8a:78:2f:5f:
                    51:ee:90:e1:36:20:b3:2f:9d:75:de:40:f2:3b:c3:
                    a3:a6:40:73:dc:06:3f:2e:0d:6e:f7:39:0b:e7:a8:
                    b0:4d:68:63:8b:0e:c7:73:e3:8a:5f:75:55:eb:9a:
                    42:17:97:17:03:cf:ce:39:06:c1:25:30:52:c5:4b:
                    5e:10:94:39:fd:c4:17:d9:63:f5:64:42:67:c4:24:
                    be:36:f2:3c:8f:74:ae:8e:4e:ce:e2:94:41:21:0b:
                    45:b2:ef:ed:6a:6b:ba:ed:2c:34:af:bf:5c:7e:f8:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:44:E6:B0:1E:9E:B6:F2:DD:CE:F7:C4:EB:61:FE:7C:8F:7C:28:3B
            X509v3 Authority Key Identifier:
                keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3132322e3130322e34302e302f32312d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.102.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:59:89:aa:93:02:57:4f:a4:d3:ea:b0:73:5c:9d:88:69:d0:
         12:b7:70:c1:fe:47:76:2a:13:d5:a8:43:55:ba:ae:57:fb:a1:
         ad:17:aa:9f:6a:48:e0:19:c8:0b:4a:4d:a6:f4:9f:6c:b0:77:
         8f:54:52:2c:58:57:7c:c4:dd:6b:9a:b8:64:e8:dd:b4:26:38:
         78:95:e6:92:d9:04:3b:26:20:85:39:38:37:d7:33:26:c2:f7:
         b7:9e:aa:7c:b9:08:49:7d:4e:02:a9:95:ef:bc:cd:60:bf:9b:
         2d:7d:df:78:bd:14:55:d8:d1:f2:e4:a9:c3:38:41:24:08:49:
         f9:ed:3c:c3:7d:18:61:23:21:a8:15:98:61:83:5c:ba:4b:56:
         c1:a8:34:75:f6:6f:38:11:2e:f8:f8:b3:cd:38:5f:49:1f:1b:
         af:b5:18:fc:44:c4:d0:3b:40:3c:37:6a:6e:cd:28:de:9b:64:
         bc:ae:3a:60:e0:17:0e:61:9e:49:ff:e5:f7:8c:eb:83:ce:3f:
         0b:d1:c7:69:c6:16:5f:56:fe:4c:2c:3b:09:c0:01:dc:14:0b:
         51:6b:bf:7c:52:b3:9b:58:cf:01:db:88:14:67:e3:69:6a:81:
         f6:d3:ad:52:44:40:e1:d3:20:d9:85:cc:bc:ae:1a:10:0a:4d:
         62:58:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:56 2026 by rpki-client