Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130322e302f32342d3234203d3e203130313337.roa
File:                     3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (raw, json)
Hash identifier:          MAg0dVjN/VisS1hFmLJD+dd3x6Va1gOOR658nswBpQU=
Subject key identifier:   63:8A:80:6B:AD:10:F5:C9:76:C9:FC:22:D5:F2:D6:C3:FD:E1:18:38
Certificate issuer:       /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial:       4B987A11EA47960BFC490F75BFDDA280F04F5BD2
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130322e302f32342d3234203d3e203130313337.roa
Signing time:             Sun 03 May 2026 02:46:03 +0000
ROA not before:           Sun 03 May 2026 02:41:03 +0000
ROA not after:            Sun 02 May 2027 02:46:03 +0000
asID:                     10137
IP address blocks:        203.99.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:98:7a:11:ea:47:96:0b:fc:49:0f:75:bf:dd:a2:80:f0:4f:5b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
        Validity
            Not Before: May  3 02:41:03 2026 GMT
            Not After : May  2 02:46:03 2027 GMT
        Subject: CN=638A806BAD10F5C976C9FC22D5F2D6C3FDE11838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:0b:5f:f4:58:b8:d8:a0:f3:83:59:be:21:
                    8a:ca:68:0a:f8:9e:e5:63:96:3e:4f:d7:a1:f9:b5:
                    fe:4e:ff:7f:6c:93:ef:f3:7f:6c:fc:85:4d:9c:8c:
                    63:09:f3:9c:67:f7:b2:16:c5:ed:08:4c:24:0d:76:
                    e7:15:54:55:c3:97:f2:cc:9d:92:78:8d:df:77:82:
                    2d:a7:66:5a:02:f2:cf:9f:43:62:99:2d:35:39:8b:
                    37:26:18:8e:71:7d:e9:48:6a:8e:85:72:a6:39:74:
                    9c:3f:6c:37:e0:40:93:f7:f2:a7:2c:9d:c7:52:28:
                    ee:1a:ae:eb:03:0d:e7:bb:6f:93:43:73:5c:95:68:
                    8e:b7:14:c6:38:fc:3f:33:26:e5:9b:9e:df:86:02:
                    bc:46:ba:15:fe:a0:7d:d8:e0:75:c4:d6:4d:64:12:
                    ba:95:08:bd:4a:7b:69:fb:97:d2:da:f7:41:84:7e:
                    4e:15:00:08:7d:f7:74:7a:45:f0:62:26:58:0d:83:
                    6a:b7:16:b3:3e:bb:84:fa:f7:46:bd:6b:0a:a5:6e:
                    3d:4e:28:02:35:26:e3:b8:64:dc:83:86:4c:fd:16:
                    ef:0a:77:9d:89:f7:5a:16:32:83:46:29:de:fb:95:
                    a1:c0:e8:71:89:1d:78:8d:b0:ff:76:d0:0c:53:15:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8A:80:6B:AD:10:F5:C9:76:C9:FC:22:D5:F2:D6:C3:FD:E1:18:38
            X509v3 Authority Key Identifier:
                keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130322e302f32342d3234203d3e203130313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:49:8f:6c:d1:fd:44:8c:9b:bf:49:e0:a8:e8:93:d8:95:
         e0:74:8c:18:3e:38:db:2a:0f:c5:ee:d6:0f:eb:b6:67:b7:4c:
         06:6a:fd:2d:b3:4d:88:ed:1b:04:1b:6b:1b:34:b3:69:53:5e:
         3b:64:c7:e9:21:40:5d:2f:07:a3:4a:47:c5:82:a7:c5:e9:48:
         6b:4d:16:cd:70:f2:17:86:c1:51:b6:92:d1:f2:a6:d6:04:ec:
         a7:22:bf:f1:90:b5:0c:84:52:25:14:39:09:aa:a4:77:00:1e:
         20:48:2d:c4:16:04:9a:a9:91:5d:28:32:76:c0:b7:d6:03:09:
         c2:77:bc:5c:22:80:c6:75:a1:41:69:d2:cb:c2:92:d1:fe:3d:
         76:84:7b:5c:51:20:2e:ae:ce:ac:2d:cf:68:fc:9c:6f:d5:b2:
         a7:20:6d:92:cc:91:9f:8f:b7:59:a5:b1:87:ad:a1:97:9e:41:
         9b:fb:b0:37:47:d5:d0:cf:2b:5b:07:40:7b:a5:6b:9f:41:0f:
         3a:e3:7b:07:5d:57:f6:b2:ec:44:db:3c:14:07:20:f5:d9:8c:
         02:c1:1b:ff:81:b2:24:80:78:98:0a:b6:fa:4a:40:e2:42:9c:
         52:ef:92:47:77:28:2a:49:cf:06:98:40:de:b6:84:13:21:f4:
         ad:2a:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:48 2026 by rpki-client