Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa
File:                     3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (raw, json)
Hash identifier:          by6bVuVjvD6SHS/RSc1MKPNjclAKxLlvShxlE0Ivay8=
Subject key identifier:   5D:9D:5A:B1:54:DF:B5:E2:F2:4A:78:92:C1:E6:B3:C8:A8:9F:79:E2
Certificate issuer:       /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial:       4054B6674A56B6217DC614171E0634ED59FF99CF
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa
Signing time:             Sun 03 May 2026 02:46:05 +0000
ROA not before:           Sun 03 May 2026 02:41:05 +0000
ROA not after:            Sun 02 May 2027 02:46:05 +0000
asID:                     10137
IP address blocks:        203.99.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:54:b6:67:4a:56:b6:21:7d:c6:14:17:1e:06:34:ed:59:ff:99:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
        Validity
            Not Before: May  3 02:41:05 2026 GMT
            Not After : May  2 02:46:05 2027 GMT
        Subject: CN=5D9D5AB154DFB5E2F24A7892C1E6B3C8A89F79E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:69:63:52:68:7d:b4:d2:cc:ce:7a:7f:02:
                    aa:84:98:06:60:38:6d:4e:91:a9:47:57:af:76:2a:
                    e6:2a:77:d6:28:18:27:11:5e:84:dd:a5:66:b3:cb:
                    e7:b2:9d:c2:82:4c:b8:a7:40:b4:6f:2b:91:01:c5:
                    63:04:ff:28:53:bb:d6:58:d5:6b:36:3f:1a:c3:eb:
                    f0:ac:db:73:e1:72:cc:59:dd:ab:45:f3:13:9f:99:
                    63:2c:12:c1:38:0c:59:90:c8:b4:99:03:0e:1d:dd:
                    0b:44:8f:50:04:4b:2b:4d:a2:6c:75:77:8e:9f:cd:
                    4e:e2:75:c9:66:b9:ad:3b:57:c5:ad:aa:dc:9d:93:
                    07:2e:64:8f:00:af:c1:db:a4:1f:2a:42:31:06:9d:
                    e4:d4:27:c6:e3:3f:d5:54:8f:de:e4:66:b7:8b:33:
                    fe:02:e8:78:a0:b6:42:d9:da:39:bd:77:b3:59:24:
                    ec:d5:e8:ed:7d:98:70:51:8d:d8:97:4a:9c:72:6a:
                    2c:98:04:8a:e9:fe:82:b2:58:a3:9e:5f:4c:22:0f:
                    c2:67:4b:fa:2e:8a:ac:cb:f2:fd:f6:c6:c7:90:06:
                    80:d5:63:50:eb:15:03:5b:a2:bb:8c:f2:ff:b9:32:
                    b0:56:b4:ad:ae:fe:00:b9:de:d4:da:05:29:7b:7d:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9D:5A:B1:54:DF:B5:E2:F2:4A:78:92:C1:E6:B3:C8:A8:9F:79:E2
            X509v3 Authority Key Identifier:
                keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:e8:b8:da:c2:19:24:77:62:bb:a3:64:b6:93:e9:d1:6d:47:
         20:2e:72:e5:b5:db:3e:a1:24:4f:78:4c:e1:db:57:6a:21:cb:
         f5:9b:c5:99:ae:2b:57:f5:59:09:85:73:1a:1e:b1:27:0a:4b:
         fd:34:16:59:ff:94:49:0c:6f:4a:92:77:5f:07:54:13:fc:a5:
         dd:90:50:fc:e2:1f:00:22:fc:70:8f:ae:7d:d3:a6:b9:30:c5:
         0d:2a:20:e1:02:77:c0:5d:37:7f:44:a7:8f:c7:64:5e:ee:aa:
         3c:1b:20:2d:0b:25:e7:bd:e7:d6:47:c8:ab:00:21:03:a2:22:
         b3:b7:ba:50:08:4d:0c:d2:37:6a:5a:9d:22:8a:b5:1f:f4:67:
         c8:fe:ad:69:4f:98:ef:ec:b5:9f:6f:be:43:1e:5c:b5:a4:8c:
         bb:a7:c3:ca:ac:e7:24:36:f1:2b:95:66:60:39:f4:34:4c:b2:
         54:09:0b:c4:57:60:de:0c:6f:d9:24:58:99:32:40:8f:d5:2d:
         16:b5:f6:93:a6:9f:b9:d7:5a:2e:d1:a3:59:f7:45:65:b0:ab:
         53:d1:88:7d:73:88:fe:f8:8c:bb:31:d0:d3:82:19:bc:f2:64:
         54:26:7a:18:a2:9b:72:2e:da:ef:58:32:08:2c:49:57:2f:39:
         84:c0:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:09 2026 by rpki-client