Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa
File:                     3132312e3130302e302e302f32312d3234203d3e203338313538.roa (raw, json)
Hash identifier:          Qwji8J+xT8rbGfCGnHVbD+4pMVAV52/CoMPr7ORCLJM=
Subject key identifier:   B9:EF:A3:1E:A0:69:85:6B:CD:00:CC:CC:E9:B3:64:4D:9E:73:34:FE
Certificate issuer:       /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Certificate serial:       45132B147C7C7A2C1B5A703E25FD0DB7320A7422
Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa
Signing time:             Sun 03 May 2026 02:30:37 +0000
ROA not before:           Sun 03 May 2026 02:25:37 +0000
ROA not after:            Sun 02 May 2027 02:30:37 +0000
asID:                     38158
IP address blocks:        121.100.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
                          rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:13:2b:14:7c:7c:7a:2c:1b:5a:70:3e:25:fd:0d:b7:32:0a:74:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
        Validity
            Not Before: May  3 02:25:37 2026 GMT
            Not After : May  2 02:30:37 2027 GMT
        Subject: CN=B9EFA31EA069856BCD00CCCCE9B3644D9E7334FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:e9:f4:f1:fa:73:0a:12:e1:5e:44:53:db:
                    24:88:e2:da:20:9f:c5:81:95:95:83:36:7a:15:60:
                    77:f9:03:fc:b7:26:ac:06:d2:64:0d:9e:55:02:d8:
                    86:f3:e0:6a:07:f2:a0:ca:f9:5a:40:f6:22:5a:16:
                    d8:04:ce:3f:24:18:16:a3:3c:5d:54:5a:fd:d0:f7:
                    95:01:6f:80:4b:a6:d5:b4:23:79:7c:43:78:eb:b4:
                    69:b6:f3:19:fe:12:56:f1:2f:68:7c:72:5b:9f:3b:
                    8b:cb:ca:71:f8:1b:81:03:36:ff:e5:73:92:c9:4e:
                    7b:f5:6b:d3:c7:c6:ed:fd:60:aa:8e:0e:19:5b:8a:
                    f4:0b:bd:57:d4:db:c6:44:19:92:a3:c1:6e:42:87:
                    c0:77:b2:03:4f:e6:dd:05:f3:41:68:10:88:3f:1e:
                    d7:16:76:b3:19:bb:4e:9c:cc:c5:e7:d7:e2:b2:6f:
                    2d:29:2b:dd:a8:b3:4d:d7:ab:83:63:62:8b:ae:f7:
                    7e:00:94:e5:c4:c5:90:ca:51:f5:76:38:3b:85:a5:
                    a8:0c:14:6c:bd:99:f9:77:17:ce:f5:5a:e6:65:da:
                    a9:6e:8b:e8:f6:07:61:6b:ef:10:61:e4:fd:ea:df:
                    c9:32:13:dc:e2:a9:cb:82:09:7b:6c:a7:6e:20:6f:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EF:A3:1E:A0:69:85:6B:CD:00:CC:CC:E9:B3:64:4D:9E:73:34:FE
            X509v3 Authority Key Identifier:
                keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.100.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:55:ac:82:5c:8f:ec:44:ad:f1:62:87:8e:30:6b:a2:72:18:
         f5:a4:c9:e7:23:60:82:6b:4c:b2:d8:84:20:77:fa:83:8a:f6:
         7c:81:72:0b:63:25:43:3e:bc:88:9b:6e:5d:2d:d5:30:1b:1b:
         66:46:15:44:1c:ed:3f:fa:6c:d5:70:33:f4:29:3d:06:be:87:
         5a:6b:f8:cf:5a:85:ca:f4:a6:33:59:de:6d:51:bc:06:5c:f2:
         4e:97:6e:05:8a:63:44:53:86:25:03:ff:91:f1:65:09:31:a5:
         62:69:32:7e:c3:f1:b2:17:dc:78:1f:ec:40:b4:64:ce:93:9c:
         58:4a:44:a7:84:fd:b5:37:23:f8:93:f5:88:3f:a5:6e:59:79:
         f0:db:6d:2b:5c:2f:15:cf:4b:a2:49:f4:fd:2e:19:b9:7b:2c:
         6e:e1:58:aa:3a:88:58:fd:e7:96:ac:7a:1b:4e:d4:e4:d7:79:
         37:4b:d0:a5:ee:1e:ba:69:3b:8e:ba:bb:a7:f2:67:02:63:03:
         12:74:b4:46:90:03:b9:36:e5:74:3d:a9:2e:94:f8:78:90:2f:
         67:d8:46:36:a1:58:87:fa:5f:0b:7d:9f:07:d9:33:ae:63:fd:
         9a:a5:2e:5a:70:f8:46:08:fd:bf:87:e5:25:6c:8b:1a:74:22:
         85:9c:03:dd
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIURRMrFHx8eiwbWnA+Jf0NtzIKdCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZFNkY1MjNENDJGMjFENzRFNEI3MjBBRUM0NTJENjEy
MDVFNUI2QTAeFw0yNjA1MDMwMjI1MzdaFw0yNzA1MDIwMjMwMzdaMDMxMTAvBgNV
BAMTKEI5RUZBMzFFQTA2OTg1NkJDRDAwQ0NDQ0U5QjM2NDREOUU3MzM0RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6+n08fpzChLhXkRT2ySI4tog
n8WBlZWDNnoVYHf5A/y3JqwG0mQNnlUC2Ibz4GoH8qDK+VpA9iJaFtgEzj8kGBaj
PF1UWv3Q95UBb4BLptW0I3l8Q3jrtGm28xn+ElbxL2h8clufO4vLynH4G4EDNv/l
c5LJTnv1a9PHxu39YKqODhlbivQLvVfU28ZEGZKjwW5Ch8B3sgNP5t0F80FoEIg/
HtcWdrMZu06czMXn1+Kyby0pK92os03Xq4NjYouu934AlOXExZDKUfV2ODuFpagM
FGy9mfl3F871WuZl2qlui+j2B2Fr7xBh5P3q38kyE9ziqcuCCXtsp24gb9nzAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUue+jHqBphWvNAMzM6bNkTZ5zNP4wHwYDVR0j
BBgwFoAU5ub1I9QvIddOS3IK7EUtYSBeW2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDc4ZmQ0YWYtZmU2Ny00NWM4LTgwYjctMDZmYzExOGRmOGUyLzAvRTZFNkY1MjNE
NDJGMjFENzRFNEI3MjBBRUM0NTJENjEyMDVFNUI2QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNkU2RjUyM0Q0MkYyMUQ3NEU0QjcyMEFFQzQ1MkQ2MTIwNUU1
QjZBLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04
MGI3LTA2ZmMxMThkZjhlMi8wLzMxMzIzMTJlMzEzMDMwMmUzMDJlMzAyZjMyMzEy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN5ZAAwDQYJKoZIhvcN
AQELBQADggEBAH5VrIJcj+xErfFih44wa6JyGPWkyecjYIJrTLLYhCB3+oOK9nyB
cgtjJUM+vIibbl0t1TAbG2ZGFUQc7T/6bNVwM/QpPQa+h1pr+M9ahcr0pjNZ3m1R
vAZc8k6XbgWKY0RThiUD/5HxZQkxpWJpMn7D8bIX3Hgf7EC0ZM6TnFhKRKeE/bU3
I/iT9Yg/pW5ZefDbbStcLxXPS6JJ9P0uGbl7LG7hWKo6iFj955asehtO1OTXeTdL
0KXuHrppO466u6fyZwJjAxJ0tEaQA7k25XQ9qS6U+HiQL2fYRjahWIf6Xwt9nwfZ
M65j/ZqlLlpw+EYI/b+H5SVsixp0IoWcA90=
-----END CERTIFICATE-----
Generated at Wed May 13 01:45:06 2026 by rpki-client