Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130312e302f32342d3234203d3e203536323431.roa
File:                     3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (raw, json)
Hash identifier:          P7oRDyeMFp3GGVH+xItLcQl5cfAi5+V0YTxFNRF2C0E=
Subject key identifier:   5F:26:38:E8:EC:8C:96:FC:6E:48:11:4C:0A:97:C9:6E:79:82:78:BC
Certificate issuer:       /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial:       6B565F25D156D8D6917CD70B5709A316F16085D2
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130312e302f32342d3234203d3e203536323431.roa
Signing time:             Sun 03 May 2026 02:46:00 +0000
ROA not before:           Sun 03 May 2026 02:41:00 +0000
ROA not after:            Sun 02 May 2027 02:46:00 +0000
asID:                     56241
IP address blocks:        203.99.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:56:5f:25:d1:56:d8:d6:91:7c:d7:0b:57:09:a3:16:f1:60:85:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
        Validity
            Not Before: May  3 02:41:00 2026 GMT
            Not After : May  2 02:46:00 2027 GMT
        Subject: CN=5F2638E8EC8C96FC6E48114C0A97C96E798278BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:2b:c9:be:6a:8b:4e:76:a3:a5:d8:98:1b:
                    9b:98:4e:a9:f6:85:27:25:84:5f:84:77:a2:03:e2:
                    e4:e0:ab:d5:52:7f:9f:af:d0:d8:db:9e:22:1d:b7:
                    5c:1c:5b:f3:c4:03:03:de:15:87:5b:9e:0b:86:4e:
                    81:7a:ce:1b:40:d1:14:27:7b:03:2e:52:2d:00:a4:
                    16:28:b0:86:65:9b:13:11:18:86:72:1d:a3:0a:51:
                    1b:c4:ec:7d:bb:c5:6c:ca:c7:25:97:0a:b0:3c:3d:
                    e4:af:c3:27:ad:1d:9e:a7:fd:10:b5:ad:fc:c4:b9:
                    c1:56:94:ca:d5:5a:29:6b:5d:82:d9:fb:49:4c:ca:
                    73:1d:65:e2:0f:b5:34:62:a9:ed:2f:21:48:52:c6:
                    0c:08:72:f5:96:90:04:85:a3:1b:94:38:c0:9c:a7:
                    f4:4b:24:98:26:e3:19:6a:06:8d:df:d2:b5:d1:37:
                    a2:29:b0:ae:25:2c:fd:84:4f:d9:39:f2:1f:76:ed:
                    2f:ee:0a:35:6b:94:49:cb:82:43:d8:56:75:4f:75:
                    cc:ab:41:7c:86:78:16:f2:af:03:9e:fb:f5:07:1e:
                    47:38:16:c0:a1:33:90:ad:22:d0:24:ca:7d:cb:5b:
                    f8:bf:a6:b1:96:96:18:07:6e:d0:ab:b9:85:ea:2a:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:26:38:E8:EC:8C:96:FC:6E:48:11:4C:0A:97:C9:6E:79:82:78:BC
            X509v3 Authority Key Identifier:
                keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130312e302f32342d3234203d3e203536323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:20:6d:26:50:92:d8:3e:bb:b4:72:cc:0a:57:e7:10:19:21:
         5b:ee:54:4b:5c:e8:5e:a3:59:3b:d0:30:b4:cb:22:27:97:d7:
         05:df:61:68:ac:4a:b1:b3:69:1e:bb:69:58:3e:e1:5c:39:49:
         e4:3f:28:40:b4:d4:03:b3:63:6c:45:af:79:7b:b2:d7:f4:b7:
         1c:e3:42:17:e2:d8:ad:2c:8d:66:a3:fb:b6:a9:a2:f7:bf:9f:
         f8:14:2a:3a:2a:4e:90:26:6c:f1:0f:79:5d:da:d8:7e:dd:4b:
         3a:d5:3c:5c:0d:26:f6:71:75:f7:4a:74:74:6f:92:9c:28:78:
         93:62:9f:d4:4c:c4:b9:f5:31:fd:72:f5:86:9b:14:fb:7d:26:
         ff:83:ff:24:a4:54:55:2f:cb:64:21:59:44:79:5e:22:ef:9b:
         67:4f:7d:39:26:b7:4a:f8:94:7f:10:35:5a:4e:d5:a7:4f:82:
         73:ae:52:b1:2c:62:4d:57:09:3b:45:64:51:d4:4f:1d:62:11:
         f4:36:51:c0:c3:dd:0f:4a:f3:e2:65:c1:67:85:4d:40:26:4e:
         b1:72:19:88:4a:a5:e8:c6:c5:bc:4f:f1:06:5f:c7:68:65:2a:
         a3:95:1c:e7:1e:b5:95:df:e5:c4:07:61:9e:0b:2b:35:88:70:
         29:d5:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:33 2026 by rpki-client