Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
File:                     3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa (raw, json)
Hash identifier:          11WIVRJKlIe1G6ph/l2ojd2a/Iec8TvbdWCKImaRqpY=
Subject key identifier:   B6:9E:FF:7A:0E:A5:30:05:40:8B:8E:32:C2:E5:A0:69:C5:3B:29:E9
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       75ECC3AE327E3B3F22A4249B6A0764A4D2249BC6
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:34:05 +0000
ROA not before:           Sun 03 May 2026 02:29:05 +0000
ROA not after:            Sun 02 May 2027 02:34:05 +0000
asID:                     4800
IP address blocks:        123.231.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ec:c3:ae:32:7e:3b:3f:22:a4:24:9b:6a:07:64:a4:d2:24:9b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:05 2026 GMT
            Not After : May  2 02:34:05 2027 GMT
        Subject: CN=B69EFF7A0EA53005408B8E32C2E5A069C53B29E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:1c:fc:fa:fe:ca:f1:3f:4c:55:4f:2b:81:
                    f0:15:aa:ff:7e:d9:b8:8b:f9:18:4c:76:32:7c:83:
                    c6:3d:49:80:23:9e:cc:16:0c:26:48:76:c2:64:b3:
                    9b:e2:7e:42:1a:04:2d:bf:f1:54:f3:87:af:b5:5e:
                    11:6c:5c:ce:a7:c9:db:30:2f:7e:31:a3:68:d8:91:
                    bf:0c:a9:2d:19:3a:2c:79:ad:aa:31:b9:b7:02:7b:
                    c8:a1:9c:ee:34:42:03:6d:9b:8a:c6:eb:58:96:a1:
                    6a:54:eb:09:bf:75:2e:55:f8:21:f6:94:40:a9:be:
                    67:f9:e8:c8:b4:f4:42:ed:c9:90:ef:f5:fb:66:88:
                    bd:91:85:da:ba:21:0f:8b:f6:09:e9:d2:2f:4b:eb:
                    cc:f2:07:44:23:b3:85:c8:7c:be:cc:da:8c:50:6c:
                    6a:65:4a:53:43:a6:2d:5c:91:35:de:f8:f2:00:a5:
                    6b:7c:a6:c6:40:38:02:59:dd:38:5c:b1:b4:66:85:
                    28:ce:28:c8:7c:25:94:3f:d0:27:b8:6c:9a:8d:53:
                    bd:45:c5:bb:cd:fe:26:12:ab:ed:bd:d1:88:c7:76:
                    8c:21:ce:05:37:20:62:5e:a4:89:bd:90:a9:0f:19:
                    30:49:34:2b:fd:d0:05:81:96:d9:c5:d8:ac:cd:cd:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9E:FF:7A:0E:A5:30:05:40:8B:8E:32:C2:E5:A0:69:C5:3B:29:E9
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.231.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a7:4f:e6:4e:76:8e:e6:42:78:4d:e3:cd:ac:01:ad:b1:bf:48:
         e1:55:49:b7:62:3e:7c:42:05:3f:5a:bf:b5:da:8f:8f:aa:e5:
         b5:e5:41:6b:7e:e7:62:4e:19:06:bb:29:59:b0:50:74:31:4d:
         a2:97:76:e1:9d:74:ca:d8:d3:98:24:ed:be:2e:a7:3b:16:00:
         d9:db:f0:3c:26:85:ff:b9:91:77:a9:29:5e:b9:53:2b:6a:1e:
         31:e8:2c:55:6d:72:f0:25:3c:9b:e3:a0:0f:7f:1b:4a:28:c2:
         4a:d1:c6:9d:51:d0:a9:3e:55:a0:ff:28:17:08:00:e0:a4:01:
         76:14:ad:95:8b:42:dc:8a:fa:00:53:94:01:88:db:c0:58:2d:
         58:52:8f:48:bd:63:3d:af:03:25:97:f8:cd:9f:35:9e:2e:c7:
         11:ae:17:19:9d:a1:b4:c3:07:a3:b6:53:68:c5:a5:16:eb:c4:
         da:14:75:09:06:16:84:58:ce:87:1f:b9:f8:85:f7:5a:d4:5f:
         37:6b:c3:63:71:f1:61:6f:f5:7c:5f:cb:ee:ec:bb:59:3e:b4:
         95:1a:de:ed:90:7b:1e:2a:f0:51:c3:a9:02:ac:ed:8c:26:ef:
         27:00:ba:b0:6b:7f:28:75:cb:9e:eb:e7:61:1a:00:71:75:ac:
         11:64:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:13 2026 by rpki-client