Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa
File:                     3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (raw, json)
Hash identifier:          zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=
Subject key identifier:   51:9B:64:6F:2E:79:EE:E2:23:7D:8A:A4:49:34:AF:55:CE:AB:3B:FF
Certificate issuer:       /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Certificate serial:       06B3F48E0F2A296FA42F2337DBD1AA1ADAF968A4
Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa
Signing time:             Sun 03 May 2026 02:22:59 +0000
ROA not before:           Sun 03 May 2026 02:17:59 +0000
ROA not after:            Sun 02 May 2027 02:22:59 +0000
asID:                     142327
IP address blocks:        124.40.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
                          rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b3:f4:8e:0f:2a:29:6f:a4:2f:23:37:db:d1:aa:1a:da:f9:68:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
        Validity
            Not Before: May  3 02:17:59 2026 GMT
            Not After : May  2 02:22:59 2027 GMT
        Subject: CN=519B646F2E79EEE2237D8AA44934AF55CEAB3BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:9b:d3:d2:3f:57:84:f6:18:5a:4b:bf:3d:
                    a7:bc:f9:be:98:62:2b:67:47:14:8a:6c:d3:8b:ae:
                    cc:0c:a6:48:fa:3d:4a:dd:fb:6e:ac:5c:bf:f1:56:
                    7e:20:90:1e:c6:b8:4d:0a:dc:47:48:1a:0d:10:76:
                    f6:61:e7:f4:4f:7b:6a:34:ca:c1:30:ea:be:b2:81:
                    67:b6:17:7b:7f:38:4c:6a:47:3d:27:e8:b7:48:2b:
                    3b:3a:9d:4f:25:57:75:79:f6:64:e2:3f:a6:94:15:
                    db:29:0d:95:da:4e:a0:02:cc:f7:1f:c2:d4:7c:a7:
                    dd:04:3a:73:fd:96:14:22:7c:19:88:67:0c:6e:e3:
                    0e:70:65:35:64:71:6f:85:4c:d5:58:b8:13:b4:7b:
                    78:01:de:87:8f:de:5e:fb:61:44:c8:92:5d:f5:77:
                    9f:66:99:e4:78:af:4b:db:72:f4:e8:48:50:65:98:
                    e8:eb:9d:52:16:98:63:75:39:72:b6:01:f4:6f:d2:
                    7a:db:1a:bc:fc:51:54:34:72:b7:18:ff:f5:7f:ba:
                    08:15:9d:ac:a7:00:51:44:d7:dd:be:aa:3e:e8:ae:
                    dc:06:55:4b:fd:d2:28:4d:a7:7d:0e:3b:2a:06:9d:
                    a4:c5:37:55:05:66:d0:9e:89:f7:84:b1:79:c9:37:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9B:64:6F:2E:79:EE:E2:23:7D:8A:A4:49:34:AF:55:CE:AB:3B:FF
            X509v3 Authority Key Identifier:
                keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:2a:b0:1b:83:bb:f0:e5:89:3a:6d:0c:b5:bc:c7:15:2a:fe:
         c1:30:b5:27:a4:17:73:02:0c:88:21:7e:e7:da:01:5c:ac:90:
         a4:31:7b:d2:60:7f:ef:93:5e:b6:7a:23:68:f9:9d:2f:90:90:
         43:a3:ef:59:7b:81:bb:e8:5c:ce:4b:2e:06:7a:3c:e2:73:5a:
         58:fe:40:a6:20:d0:f9:ab:bc:46:8f:40:8b:e2:f8:74:e1:d7:
         b0:e6:17:7a:88:9f:da:dc:47:d3:81:56:89:0b:99:00:b7:a2:
         63:73:92:e4:3c:d7:ec:1c:1d:d6:53:fd:e5:23:3e:d6:95:38:
         c5:9a:4f:57:00:fa:eb:a4:30:5a:31:f8:25:6e:d3:be:5f:09:
         33:54:6d:d0:17:ec:8f:65:a6:f7:c9:be:11:97:3f:a7:d9:97:
         c3:97:aa:40:4c:f4:5d:9e:9f:67:39:fe:ef:33:f7:6e:59:48:
         a7:b7:fb:d9:6c:74:e1:ae:48:3f:bd:75:34:c8:b9:7c:2b:b5:
         af:b0:dc:3d:d5:30:b7:93:2b:22:4b:24:af:93:9f:84:c7:53:
         34:ed:45:1d:af:83:ae:2d:62:a0:a8:e6:34:23:1f:6c:97:69:
         f2:af:8d:f5:d0:a3:b4:60:49:39:42:b4:95:81:a8:ba:2e:f6:
         e2:cc:8e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:29 2026 by rpki-client