Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa
File:                     3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa (raw, json)
Hash identifier:          QSUXaKgtOpsCAJhn4I0b/ra4wfYKk11U0gz7p01iOHg=
Subject key identifier:   9B:FD:84:50:96:31:C0:74:C8:73:23:A0:E2:61:04:8E:5C:95:ED:04
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       13A415DE21C147951D14492C07A562E5E821E3DF
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa
Signing time:             Sun 03 May 2026 02:34:10 +0000
ROA not before:           Sun 03 May 2026 02:29:10 +0000
ROA not after:            Sun 02 May 2027 02:34:10 +0000
asID:                     133841
IP address blocks:        123.231.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a4:15:de:21:c1:47:95:1d:14:49:2c:07:a5:62:e5:e8:21:e3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:10 2026 GMT
            Not After : May  2 02:34:10 2027 GMT
        Subject: CN=9BFD84509631C074C87323A0E261048E5C95ED04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:c7:88:54:8a:01:69:f8:44:5a:9a:d3:bc:
                    3c:e3:c8:f1:ff:64:c0:01:ea:14:e9:e9:b0:7e:56:
                    f0:7a:fc:e7:18:53:bc:73:d1:be:cf:56:9e:ee:de:
                    bc:d2:6a:41:54:12:12:74:f2:a5:fa:0b:e3:cb:b0:
                    bb:0a:9f:14:af:e9:8e:62:f1:02:47:e6:6e:73:af:
                    31:af:fa:a7:08:88:14:0b:2a:d3:be:b2:e4:df:28:
                    ec:14:29:9f:e7:73:be:99:19:6d:ab:99:52:3b:69:
                    0f:d4:d7:c9:3b:72:5d:b1:32:2d:fa:8f:42:21:bc:
                    42:2c:c1:96:03:bb:84:9f:85:b9:dd:75:1c:2b:51:
                    af:c8:ff:36:c8:50:ce:88:c7:b4:d9:7c:47:31:51:
                    6f:49:85:06:15:31:52:41:9d:3a:97:ab:97:1e:8d:
                    a7:c7:1b:0c:ca:46:09:a9:e7:32:e6:cd:7c:20:45:
                    2f:9b:e7:6f:87:45:dc:47:4c:0b:ab:ee:3b:94:e6:
                    79:3c:6a:a2:3d:a0:ba:4b:57:1e:71:77:d9:db:67:
                    3f:ff:f5:8b:a7:d2:62:88:00:04:a0:6f:e0:f7:9a:
                    98:5c:d2:ff:b6:a9:ad:2c:42:17:cb:af:7d:81:9f:
                    86:f1:8c:f6:ff:ac:03:b0:f7:05:03:67:d9:9c:36:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FD:84:50:96:31:C0:74:C8:73:23:A0:E2:61:04:8E:5C:95:ED:04
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.231.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:e9:83:a1:91:26:23:a9:ac:24:b2:fc:fa:7d:a9:45:22:1b:
         6c:f8:d2:c9:19:96:1b:b5:3c:db:d8:9e:c0:bc:37:ae:94:92:
         f4:97:ee:07:90:79:d9:cc:92:b2:9c:61:22:a3:ab:45:20:49:
         c9:a2:5e:4f:ba:40:6c:58:27:8b:c8:98:3f:85:37:2e:b5:74:
         8c:37:3a:b0:7d:2b:92:5c:61:d1:ea:3e:b6:a8:dc:5e:95:d5:
         9e:16:be:f5:31:d3:36:fc:e7:b8:a0:0e:fa:14:bd:29:c0:a4:
         51:ec:14:b2:a1:38:8d:2d:6f:b3:9e:27:8f:cc:87:cb:43:4b:
         53:ad:ec:3d:9c:c6:f5:07:78:33:8e:a2:80:4c:de:4e:4b:55:
         eb:95:90:94:1b:10:8c:a8:c0:d3:fe:87:10:10:b0:8e:95:ae:
         74:27:a1:95:39:57:83:ec:f2:4a:e7:c0:0a:ff:63:79:64:12:
         fc:59:10:f2:0d:fe:96:1d:79:17:ab:61:a9:7d:4e:1d:11:c6:
         32:77:85:9f:63:25:e0:6e:e1:82:a8:b9:b5:31:f9:5d:ba:bf:
         f1:0f:ef:95:4a:9e:54:0d:c5:6b:75:13:97:4f:70:be:0f:73:
         a1:a7:ea:78:e0:ea:41:96:74:84:54:1d:05:32:c0:2a:ec:32:
         e3:0e:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:25 2026 by rpki-client