Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232392e302f32342d3234203d3e203338353232.roa
File:                     3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (raw, json)
Hash identifier:          LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=
Subject key identifier:   49:3A:B5:A6:64:AA:7A:34:61:3B:5C:C7:90:8F:EE:FC:39:C0:B5:B0
Certificate issuer:       /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C
Certificate serial:       1B236EFEFC99C52221183DDF3BE4C7D62C549B33
Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232392e302f32342d3234203d3e203338353232.roa
Signing time:             Sun 03 May 2026 02:23:12 +0000
ROA not before:           Sun 03 May 2026 02:18:12 +0000
ROA not after:            Sun 02 May 2027 02:23:12 +0000
asID:                     38522
IP address blocks:        122.49.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl
                          rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:23:6e:fe:fc:99:c5:22:21:18:3d:df:3b:e4:c7:d6:2c:54:9b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C
        Validity
            Not Before: May  3 02:18:12 2026 GMT
            Not After : May  2 02:23:12 2027 GMT
        Subject: CN=493AB5A664AA7A34613B5CC7908FEEFC39C0B5B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:bf:5f:e0:9c:3e:5a:77:35:e9:32:e2:9c:
                    36:7e:3f:5e:30:c3:04:7d:72:c5:c1:49:32:34:9c:
                    83:94:25:2a:8d:4f:6d:1e:1f:22:e5:73:c5:fe:92:
                    0e:34:8e:7f:2a:69:51:8c:7d:50:f8:a5:1a:70:03:
                    a6:29:6d:a7:2e:14:90:b4:b3:fc:e9:ec:b2:9c:f6:
                    fc:22:e2:1a:14:ed:84:eb:9f:79:a2:f3:e5:c4:d1:
                    ae:4a:8e:1a:7b:de:a4:37:2f:16:1b:a0:2f:d2:cc:
                    fe:d0:12:df:3b:ef:53:c4:21:10:ea:d6:9c:00:7f:
                    32:36:a5:92:c7:4f:2e:78:da:c0:50:87:2c:eb:7a:
                    63:99:af:2f:a3:07:ae:56:96:f1:38:45:13:ca:5a:
                    97:35:e4:99:8b:37:b2:57:2d:3b:80:42:c3:be:e5:
                    5f:05:30:74:be:45:d8:e9:13:b8:50:4d:a1:32:34:
                    77:ce:16:ae:59:7e:66:29:ee:bf:92:b4:f3:e4:1f:
                    c7:12:5e:f3:6b:46:d4:b1:30:1c:ac:4a:d4:63:c4:
                    55:76:88:9e:8a:8d:46:a3:9e:3b:c2:1f:e4:8d:b8:
                    b9:6a:02:bc:11:cb:77:d0:03:c1:05:cd:fd:ed:7f:
                    08:ee:bb:1a:ec:5b:dc:3d:80:64:a0:42:f5:7a:b8:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3A:B5:A6:64:AA:7A:34:61:3B:5C:C7:90:8F:EE:FC:39:C0:B5:B0
            X509v3 Authority Key Identifier:
                keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232392e302f32342d3234203d3e203338353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:63:00:9b:45:51:69:58:2b:f5:9b:b1:df:90:60:ea:f3:c1:
         f6:53:fd:48:b6:56:17:01:6e:cb:75:76:2f:7b:93:5d:cd:98:
         47:af:1a:ab:3d:de:a9:c0:83:62:07:c4:b6:70:a6:00:f6:06:
         7e:05:e4:8d:ae:a4:a3:16:7b:55:b4:5a:e5:38:f8:e5:c3:18:
         34:51:b0:60:1c:b6:a0:f8:a6:71:70:ef:7c:73:2a:a0:c2:01:
         e6:12:1c:37:4b:16:7e:71:30:d4:ee:e4:30:cc:a4:c6:61:ab:
         8a:b9:69:4b:6c:23:5d:1d:51:79:84:04:3e:d8:40:cf:2a:ab:
         de:02:c5:c1:c7:6c:2f:3f:7c:f2:6e:29:ad:33:d9:2a:b1:03:
         c8:ed:8f:70:f4:de:78:ab:5b:a9:7d:65:a7:19:c6:6d:aa:c4:
         48:ea:c4:4b:39:7d:a6:2e:a2:84:3f:9a:70:6d:4f:f0:36:3a:
         96:60:b9:a1:9e:ff:d1:24:25:2d:ec:9e:28:22:14:fe:75:3b:
         80:65:29:3f:74:7e:55:5a:c3:8e:7e:d5:7f:f5:8e:b3:db:c9:
         8e:42:69:5b:52:56:38:85:7c:03:34:69:ff:76:df:c0:53:30:
         02:80:ef:43:bc:86:50:bb:ff:83:8b:ed:40:81:f6:4d:c7:9d:
         16:e1:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:33 2026 by rpki-client