Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa
File:                     3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (raw, json)
Hash identifier:          ZC4+oqUfm9Dn/bzPBC5/o0iqNV8btw9KufEPtcg/nWs=
Subject key identifier:   AF:D8:4E:0F:DA:D3:30:A3:AA:94:C5:22:BF:03:0D:12:06:68:12:69
Certificate issuer:       /CN=C44E75B2D9630F4622CD4C79A40ECE650A3C8565
Certificate serial:       528395D3D42BB28CD8D9A361E548B44020266807
Authority key identifier: C4:4E:75:B2:D9:63:0F:46:22:CD:4C:79:A4:0E:CE:65:0A:3C:85:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa
Signing time:             Sun 03 May 2026 02:24:04 +0000
ROA not before:           Sun 03 May 2026 02:19:04 +0000
ROA not after:            Sun 02 May 2027 02:24:04 +0000
asID:                     152045
IP address blocks:        210.79.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl
                          rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:83:95:d3:d4:2b:b2:8c:d8:d9:a3:61:e5:48:b4:40:20:26:68:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C44E75B2D9630F4622CD4C79A40ECE650A3C8565
        Validity
            Not Before: May  3 02:19:04 2026 GMT
            Not After : May  2 02:24:04 2027 GMT
        Subject: CN=AFD84E0FDAD330A3AA94C522BF030D1206681269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:14:e4:ef:f8:c5:5e:45:1c:d8:22:af:c0:
                    65:61:ad:68:d7:1a:68:57:49:6f:c2:af:47:c0:95:
                    6d:04:48:50:07:ae:81:b9:64:f3:81:a1:32:48:51:
                    b8:e0:71:92:0b:00:ca:c9:8b:7f:44:05:29:44:53:
                    53:0e:9e:55:26:1e:7c:3a:70:38:f7:51:5b:47:42:
                    72:9c:fa:a6:c3:d8:c0:b5:ab:67:a1:77:3f:00:9a:
                    6f:f5:4e:48:c1:42:6a:99:dd:c6:83:23:20:2c:2a:
                    80:fd:22:79:bf:bf:fb:fd:dc:52:42:4b:5b:27:04:
                    2d:ba:29:48:e5:29:4a:c5:b1:15:49:01:3b:d2:b3:
                    93:0f:37:e4:ee:11:a1:f3:e8:47:9a:3f:18:b1:8c:
                    79:55:7b:e9:99:66:b0:4e:e1:88:9c:e9:80:4f:8d:
                    76:9e:8f:1e:62:28:75:92:d2:8f:48:a2:81:80:35:
                    23:d1:a4:c8:34:ca:69:7e:39:13:4d:a0:76:2d:0f:
                    16:7b:49:ba:b2:e7:eb:b5:35:ce:9b:ed:19:a6:29:
                    df:da:5d:37:4c:dc:55:fe:14:33:a3:d3:16:11:f8:
                    75:ab:4c:44:35:c9:b3:13:60:7f:4c:15:94:15:03:
                    b8:7e:54:a4:a7:41:99:9e:f2:0d:ee:32:71:e0:33:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D8:4E:0F:DA:D3:30:A3:AA:94:C5:22:BF:03:0D:12:06:68:12:69
            X509v3 Authority Key Identifier:
                keyid:C4:4E:75:B2:D9:63:0F:46:22:CD:4C:79:A4:0E:CE:65:0A:3C:85:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:90:d6:ac:e4:99:4f:94:39:a4:fc:48:4d:7a:b7:4a:d6:7e:
         05:36:d9:0b:43:a2:78:39:bc:c2:bd:24:30:99:b1:31:12:4c:
         e7:c0:27:0b:96:52:35:ff:58:8a:be:61:d5:6d:8c:b8:bb:d8:
         41:b4:20:70:de:2f:e6:b5:34:ca:68:5b:f4:86:0b:0a:4a:18:
         77:60:71:cf:13:2d:92:96:6d:b1:79:63:e2:04:71:54:62:41:
         6a:10:a7:1b:93:15:af:05:48:77:68:ea:1c:11:e4:ef:ff:99:
         cd:23:52:a6:6f:27:74:78:61:07:ff:25:c1:08:a1:5f:f5:80:
         f3:8c:e9:94:ad:7e:33:0e:8a:0c:11:78:75:b0:9e:88:03:71:
         b1:ce:03:d6:fd:3b:4b:60:38:83:bf:43:e2:63:c6:a4:f4:08:
         7b:01:fa:3c:21:26:4d:e4:15:d8:f9:bc:20:5b:26:18:b1:a4:
         0f:2d:cc:80:e0:3c:9b:25:9f:45:08:d4:cb:4d:11:a3:12:d4:
         54:04:21:08:b1:5f:3a:c9:26:9b:ac:1f:a2:d8:10:b4:bc:e1:
         88:3d:19:a5:a5:db:a8:a2:53:d7:74:87:62:dc:9a:0e:c5:53:
         b6:37:b3:17:70:7f:8b:a2:ff:58:9e:e4:86:53:ad:3a:73:e8:
         25:94:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:20 2026 by rpki-client