Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3233312e302f32342d3234203d3e203338353232.roa
File:                     3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (raw, json)
Hash identifier:          d4e56HgLh9AA7Y863xNC1lhRqueOBxmIf+oM0rBgMzo=
Subject key identifier:   A4:35:2C:54:CA:B3:E9:FD:97:C1:29:ED:76:4B:D6:1D:56:43:5F:06
Certificate issuer:       /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C
Certificate serial:       4DE795A7A407F2A67B01518D048453E44906ECD8
Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3233312e302f32342d3234203d3e203338353232.roa
Signing time:             Sun 03 May 2026 02:23:12 +0000
ROA not before:           Sun 03 May 2026 02:18:12 +0000
ROA not after:            Sun 02 May 2027 02:23:12 +0000
asID:                     38522
IP address blocks:        122.49.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl
                          rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e7:95:a7:a4:07:f2:a6:7b:01:51:8d:04:84:53:e4:49:06:ec:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C
        Validity
            Not Before: May  3 02:18:12 2026 GMT
            Not After : May  2 02:23:12 2027 GMT
        Subject: CN=A4352C54CAB3E9FD97C129ED764BD61D56435F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:ad:f6:67:1b:97:24:0c:fc:79:99:53:23:
                    9c:fc:29:92:f0:b7:a6:0a:c9:a1:0c:ec:bd:da:ba:
                    5c:c1:07:aa:e5:fd:be:d1:9b:27:43:24:66:5e:82:
                    e0:cf:c3:fd:c0:8c:35:62:8c:9e:e3:a8:9d:2e:5a:
                    bc:d5:8a:16:11:32:01:ad:55:53:3f:68:b2:79:42:
                    d9:7a:d8:49:64:87:09:5c:66:47:96:5c:81:e3:cf:
                    26:15:75:fd:41:62:a5:be:5c:73:16:2c:91:1b:75:
                    d9:51:90:69:03:f1:71:19:4b:88:2d:c0:9c:84:c0:
                    75:e4:94:7b:07:94:cf:d9:bb:57:c9:5c:31:47:65:
                    9f:c5:75:2d:d9:ab:cf:4a:8f:a4:db:c1:55:4d:53:
                    3f:48:65:fb:6a:d6:95:23:25:03:42:83:5c:ae:cf:
                    b1:a1:21:ae:e9:26:98:33:e1:5a:ab:93:e2:58:f7:
                    ed:e2:0b:1e:8f:53:97:28:13:e1:fc:2e:2a:9f:05:
                    ea:8d:e7:aa:dd:25:e7:80:a5:92:37:95:92:c4:b0:
                    ab:4b:bc:f1:15:80:6e:b6:d2:45:9f:2d:20:08:f7:
                    07:5d:32:f5:00:de:45:20:92:ad:ff:2e:d4:3f:d0:
                    8b:c2:78:c4:89:fb:0d:35:50:f9:07:42:50:bc:d0:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:35:2C:54:CA:B3:E9:FD:97:C1:29:ED:76:4B:D6:1D:56:43:5F:06
            X509v3 Authority Key Identifier:
                keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3233312e302f32342d3234203d3e203338353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:60:91:dc:62:27:4b:ee:e3:1a:b0:7f:37:36:61:43:83:
         11:a7:87:32:91:81:ea:4a:dd:e2:e3:fb:6c:d7:f8:48:53:c7:
         ea:e5:b8:67:28:8f:e5:bb:73:90:32:68:66:fb:13:cb:4f:f7:
         fe:ab:2d:70:d8:a2:34:c9:aa:e8:29:9d:90:18:f0:72:28:5b:
         02:b4:13:16:69:b6:9f:f3:d3:97:b7:f4:45:2e:87:ad:1f:2d:
         ac:2a:27:0b:64:22:a1:89:df:a9:4f:8c:88:66:6f:4d:bc:a5:
         fb:a2:a6:39:70:f2:f6:08:0d:c1:e7:f3:5a:d2:b3:10:ee:c7:
         66:6e:2d:c2:ff:77:87:a5:7e:e8:ef:f0:86:6a:0b:65:b5:e4:
         2c:1b:5c:51:20:17:a7:7f:e4:39:f9:52:4e:23:ef:92:a6:c4:
         76:59:c6:a0:47:5b:21:32:7f:79:e7:f1:02:be:2c:5a:f9:66:
         4b:7b:41:72:d2:17:34:c5:03:88:ed:29:93:8f:26:15:d3:b8:
         22:fe:1b:fc:e8:cc:73:07:72:19:e7:94:41:51:63:d0:68:fb:
         41:49:24:c4:25:9e:16:f8:82:0b:09:c2:a9:ed:76:3b:cb:c4:
         94:24:f3:2f:06:c2:ac:a4:24:b5:6e:76:35:32:b3:26:00:b6:
         aa:7f:ff:d8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTeeVp6QH8qZ7AVGNBIRT5EkG7NgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3
MjBGNEY1QzAeFw0yNjA1MDMwMjE4MTJaFw0yNzA1MDIwMjIzMTJaMDMxMTAvBgNV
BAMTKEE0MzUyQzU0Q0FCM0U5RkQ5N0MxMjlFRDc2NEJENjFENTY0MzVGMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsa32ZxuXJAz8eZlTI5z8KZLw
t6YKyaEM7L3aulzBB6rl/b7RmydDJGZeguDPw/3AjDVijJ7jqJ0uWrzVihYRMgGt
VVM/aLJ5Qtl62ElkhwlcZkeWXIHjzyYVdf1BYqW+XHMWLJEbddlRkGkD8XEZS4gt
wJyEwHXklHsHlM/Zu1fJXDFHZZ/FdS3Zq89Kj6TbwVVNUz9IZftq1pUjJQNCg1yu
z7GhIa7pJpgz4Vqrk+JY9+3iCx6PU5coE+H8LiqfBeqN56rdJeeApZI3lZLEsKtL
vPEVgG620kWfLSAI9wddMvUA3kUgkq3/LtQ/0IvCeMSJ+w01UPkHQlC80DFVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUpDUsVMqz6f2XwSntdkvWHVZDXwYwHwYDVR0j
BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5
QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0
RjVDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlNDM0OTgxLTM2YmItNDUzOS05
YjU1LTA3YjY3MjA4ZmQwNi8wLzMxMzIzMjJlMzQzOTJlMzIzMzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHox5zANBgkqhkiG
9w0BAQsFAAOCAQEAEeBgkdxiJ0vu4xqwfzc2YUODEaeHMpGB6krd4uP7bNf4SFPH
6uW4ZyiP5btzkDJoZvsTy0/3/qstcNiiNMmq6CmdkBjwcihbArQTFmm2n/PTl7f0
RS6HrR8trConC2QioYnfqU+MiGZvTbyl+6KmOXDy9ggNwefzWtKzEO7HZm4twv93
h6V+6O/whmoLZbXkLBtcUSAXp3/kOflSTiPvkqbEdlnGoEdbITJ/eefxAr4sWvlm
S3tBctIXNMUDiO0pk48mFdO4Iv4b/OjMcwdyGeeUQVFj0Gj7QUkkxCWeFviCCwnC
qe12O8vElCTzLwbCrKQktW52NTKzJgC2qn//2A==
-----END CERTIFICATE-----
Generated at Wed May 13 06:55:16 2026 by rpki-client