Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232372e302f32342d3234203d3e203338353232.roa
File:                     3132322e34392e3232372e302f32342d3234203d3e203338353232.roa (raw, json)
Hash identifier:          P6T6SjVrPXLutt26o6Ki+NfxhSmkmj/N4pjTNevrao8=
Subject key identifier:   EA:00:4B:C8:51:38:1A:12:F4:E9:86:BF:58:E1:7C:4C:85:15:55:87
Certificate issuer:       /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C
Certificate serial:       2D0D1AC70A2EA7CA520E75460C95799463E07500
Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232372e302f32342d3234203d3e203338353232.roa
Signing time:             Sun 03 May 2026 02:23:13 +0000
ROA not before:           Sun 03 May 2026 02:18:13 +0000
ROA not after:            Sun 02 May 2027 02:23:13 +0000
asID:                     38522
IP address blocks:        122.49.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl
                          rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0d:1a:c7:0a:2e:a7:ca:52:0e:75:46:0c:95:79:94:63:e0:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C
        Validity
            Not Before: May  3 02:18:13 2026 GMT
            Not After : May  2 02:23:13 2027 GMT
        Subject: CN=EA004BC851381A12F4E986BF58E17C4C85155587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:3f:80:e8:7e:e5:3f:d3:67:14:f9:f4:39:
                    cb:53:b3:cf:dd:e0:d5:a9:15:a2:96:ff:8d:52:73:
                    e4:0f:84:17:5e:71:ed:89:29:e6:5c:14:03:a0:8e:
                    dc:0f:50:41:de:f5:dd:a7:91:64:5f:f9:d8:69:cc:
                    ef:c6:35:05:b9:ec:e3:f3:51:dc:7d:30:df:cc:3b:
                    16:24:ec:d9:84:03:9a:c0:1e:4c:20:fe:f4:74:04:
                    bf:fa:1b:4f:08:a6:8c:4a:80:0b:55:c5:69:83:c7:
                    36:7c:90:4b:f1:c8:05:6a:11:f1:0c:f3:45:dd:25:
                    8a:96:34:a9:68:8e:34:69:f3:9e:42:df:df:d6:fb:
                    86:61:f9:56:07:0b:4a:cb:d2:ec:f2:39:69:4e:e7:
                    d3:83:cd:e9:3c:1a:52:a6:64:58:41:8f:80:4d:f4:
                    32:7c:ef:c9:f8:ed:81:1c:c2:89:9f:ae:3c:7d:fd:
                    25:39:b0:1f:92:42:e0:26:d1:3d:17:8f:23:d5:48:
                    0d:c9:23:aa:c5:62:51:5d:e5:12:52:9e:f3:ea:fb:
                    98:86:7c:ce:dd:99:e1:9e:00:36:78:f2:8a:13:97:
                    ad:43:71:a0:09:92:72:70:21:4b:fc:8c:b4:b5:b6:
                    a3:77:f3:15:b2:6d:08:14:34:d3:49:3a:c3:f8:d4:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:00:4B:C8:51:38:1A:12:F4:E9:86:BF:58:E1:7C:4C:85:15:55:87
            X509v3 Authority Key Identifier:
                keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232372e302f32342d3234203d3e203338353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:7e:27:d1:7c:b6:40:76:bb:f2:ad:f4:5f:96:ec:ed:42:21:
         d8:1d:dc:6c:4d:de:fc:93:4b:94:b4:c3:61:06:1b:e9:f6:d6:
         11:70:e1:7e:bd:00:d0:e1:9c:9a:a6:5c:2d:b1:fe:da:96:41:
         01:f1:69:6a:6a:ce:74:5c:67:1b:82:b0:f3:b0:76:03:b8:3a:
         2d:ad:92:53:40:cb:ed:5b:c7:bd:2a:8a:dc:3f:c8:ca:4b:39:
         45:4a:30:a1:cd:5e:e1:f8:76:13:54:01:de:30:0c:04:4e:ae:
         4a:60:12:ad:91:78:86:7e:61:9a:5b:0f:a1:a1:6b:f2:c0:28:
         f6:b9:d1:1f:39:d0:0c:69:2a:86:ed:44:c0:95:82:3a:3d:ae:
         22:91:1a:4f:91:7f:04:9a:7c:84:b6:51:7d:e0:60:b6:95:a7:
         ba:0b:74:22:bf:45:84:3c:cd:43:ac:0f:ff:01:ba:48:03:bd:
         fa:17:59:c7:57:55:66:96:17:6e:bf:7c:5a:a4:96:0f:ff:8b:
         6e:21:4e:d8:b3:ad:d9:15:82:82:55:f5:2b:99:88:5e:8b:05:
         cc:0f:1c:cf:d6:b3:7c:40:c3:05:4c:ad:d2:a3:a2:e7:9b:82:
         79:27:ca:e3:05:a0:3f:39:f7:fa:9c:32:39:35:88:82:67:65:
         4c:60:51:0e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULQ0axwoup8pSDnVGDJV5lGPgdQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3
MjBGNEY1QzAeFw0yNjA1MDMwMjE4MTNaFw0yNzA1MDIwMjIzMTNaMDMxMTAvBgNV
BAMTKEVBMDA0QkM4NTEzODFBMTJGNEU5ODZCRjU4RTE3QzRDODUxNTU1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmz+A6H7lP9NnFPn0OctTs8/d
4NWpFaKW/41Sc+QPhBdece2JKeZcFAOgjtwPUEHe9d2nkWRf+dhpzO/GNQW57OPz
Udx9MN/MOxYk7NmEA5rAHkwg/vR0BL/6G08IpoxKgAtVxWmDxzZ8kEvxyAVqEfEM
80XdJYqWNKlojjRp855C39/W+4Zh+VYHC0rL0uzyOWlO59ODzek8GlKmZFhBj4BN
9DJ878n47YEcwomfrjx9/SU5sB+SQuAm0T0XjyPVSA3JI6rFYlFd5RJSnvPq+5iG
fM7dmeGeADZ48ooTl61DcaAJknJwIUv8jLS1tqN38xWybQgUNNNJOsP41AB5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6gBLyFE4GhL06Ya/WOF8TIUVVYcwHwYDVR0j
BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5
QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0
RjVDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlNDM0OTgxLTM2YmItNDUzOS05
YjU1LTA3YjY3MjA4ZmQwNi8wLzMxMzIzMjJlMzQzOTJlMzIzMjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHox4zANBgkqhkiG
9w0BAQsFAAOCAQEAFX4n0Xy2QHa78q30X5bs7UIh2B3cbE3e/JNLlLTDYQYb6fbW
EXDhfr0A0OGcmqZcLbH+2pZBAfFpamrOdFxnG4Kw87B2A7g6La2SU0DL7VvHvSqK
3D/Iyks5RUowoc1e4fh2E1QB3jAMBE6uSmASrZF4hn5hmlsPoaFr8sAo9rnRHznQ
DGkqhu1EwJWCOj2uIpEaT5F/BJp8hLZRfeBgtpWnugt0Ir9FhDzNQ6wP/wG6SAO9
+hdZx1dVZpYXbr98WqSWD/+LbiFO2LOt2RWCglX1K5mIXosFzA8cz9azfEDDBUyt
0qOi55uCeSfK4wWgPzn3+pwyOTWIgmdlTGBRDg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:48:56 2026 by rpki-client