Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa
File:                     3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (raw, json)
Hash identifier:          Bk2FFepc1a84p43gdWUgbEu+IiGvQM1k81yoYeK1npM=
Subject key identifier:   A2:FC:20:61:EC:F2:60:14:E8:60:90:A1:14:B1:85:41:81:3E:4F:79
Certificate issuer:       /CN=FEC4D1378AEC5E610311B761CBE2874CA92D0538
Certificate serial:       61961765518945511EC00A63241E438236A7EF5D
Authority key identifier: FE:C4:D1:37:8A:EC:5E:61:03:11:B7:61:CB:E2:87:4C:A9:2D:05:38
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa
Signing time:             Sun 03 May 2026 02:30:24 +0000
ROA not before:           Sun 03 May 2026 02:25:24 +0000
ROA not after:            Sun 02 May 2027 02:30:24 +0000
asID:                     138096
IP address blocks:        210.79.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl
                          rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:96:17:65:51:89:45:51:1e:c0:0a:63:24:1e:43:82:36:a7:ef:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEC4D1378AEC5E610311B761CBE2874CA92D0538
        Validity
            Not Before: May  3 02:25:24 2026 GMT
            Not After : May  2 02:30:24 2027 GMT
        Subject: CN=A2FC2061ECF26014E86090A114B18541813E4F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:47:ba:f1:41:9d:61:3a:16:9d:4f:98:e1:
                    ab:8e:38:5f:21:62:44:63:e6:3e:fb:2f:2c:91:b6:
                    8f:65:bf:1e:0c:79:c9:11:90:61:b1:e0:20:eb:b4:
                    a7:3b:44:08:c8:46:59:ea:8e:f0:43:4d:1a:e5:b0:
                    3d:bf:2c:a4:79:c8:bd:14:9f:e6:3c:ec:91:98:c4:
                    66:33:01:c6:7c:50:9a:20:df:82:b7:26:ed:fe:d8:
                    0b:c5:8d:e7:28:60:a8:b3:49:43:59:b3:4d:48:14:
                    c4:f7:41:51:cb:8e:1b:38:0d:8c:a9:2f:03:09:c9:
                    69:a7:55:40:48:e4:be:14:2b:9e:14:82:6f:d4:cf:
                    f7:37:03:27:8d:d6:d2:4d:fa:79:6e:00:68:38:45:
                    78:1d:f3:68:4c:37:62:c8:c6:6c:2c:39:8a:73:14:
                    7e:c0:5e:45:c1:b8:b4:fa:71:a8:ba:d2:e5:d1:77:
                    60:da:19:dc:6c:e1:01:79:e1:b1:66:ab:23:9e:5a:
                    d5:e1:20:d7:d6:b0:d6:5c:6c:6a:3f:48:31:89:e0:
                    60:81:51:e3:85:cd:a1:35:37:9f:aa:ab:6c:ec:76:
                    59:5a:45:bf:20:2f:43:87:db:e7:1d:da:bc:02:61:
                    81:64:ed:0c:4b:d1:e0:96:58:74:8c:66:0e:98:c2:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FC:20:61:EC:F2:60:14:E8:60:90:A1:14:B1:85:41:81:3E:4F:79
            X509v3 Authority Key Identifier:
                keyid:FE:C4:D1:37:8A:EC:5E:61:03:11:B7:61:CB:E2:87:4C:A9:2D:05:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:4d:5e:b0:f1:be:73:40:59:93:c0:7b:21:71:c3:73:ae:69:
         30:5a:f2:d7:d8:a9:76:fc:9f:d1:67:59:50:12:e3:96:1b:f9:
         1f:b5:ac:fa:89:e7:74:f5:67:3a:bb:57:ad:b6:93:9b:63:12:
         f7:02:c1:a7:b8:78:72:60:5f:93:cc:16:14:d5:e4:24:b8:07:
         4a:f2:9d:38:fc:4a:5d:34:c7:ff:26:5b:c1:ee:ae:20:46:2c:
         be:0f:fd:12:8d:b3:99:9e:3a:2e:c4:69:6f:a4:f0:1b:b8:b8:
         6f:f9:3b:ef:ea:bc:29:ee:6e:dc:64:1b:e4:36:1d:77:8c:99:
         7b:01:59:a0:23:d4:42:96:28:59:24:91:60:50:d1:0a:51:12:
         82:89:ed:b3:a7:64:5c:4c:44:04:45:a2:9b:f4:9a:59:a6:dd:
         b7:3b:91:eb:c6:be:c6:6d:d8:5b:b9:7f:dd:06:13:f8:84:59:
         57:98:60:a4:93:3e:7f:aa:d2:08:82:89:50:05:be:55:4e:35:
         52:e8:66:c9:31:1c:b8:00:75:ad:df:3f:36:84:79:99:92:87:
         b6:ac:54:ae:1a:70:99:51:7b:c9:32:7a:b2:11:85:46:21:ab:
         92:a4:ec:43:25:54:72:ae:88:6a:81:fe:d5:99:c8:2b:bc:74:
         9a:98:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:36 2026 by rpki-client