Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3132332e302f32342d3234203d3e203130313337.roa
File:                     3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (raw, json)
Hash identifier:          U/FMi72YlD8fNIhbb89qQOjcqCNZEMwjeIPmXn3ZWgc=
Subject key identifier:   1A:4B:F9:C0:BE:F6:32:F1:0D:35:57:49:55:EA:DB:2B:7D:FF:0E:B3
Certificate issuer:       /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial:       45951CBC2D838F45FE2424D56074BFBF706AB4A2
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3132332e302f32342d3234203d3e203130313337.roa
Signing time:             Sun 03 May 2026 02:46:04 +0000
ROA not before:           Sun 03 May 2026 02:41:04 +0000
ROA not after:            Sun 02 May 2027 02:46:04 +0000
asID:                     10137
IP address blocks:        203.99.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:95:1c:bc:2d:83:8f:45:fe:24:24:d5:60:74:bf:bf:70:6a:b4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
        Validity
            Not Before: May  3 02:41:04 2026 GMT
            Not After : May  2 02:46:04 2027 GMT
        Subject: CN=1A4BF9C0BEF632F10D35574955EADB2B7DFF0EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:09:87:bc:b1:6e:83:d1:c7:fb:b3:b9:80:
                    95:41:47:3d:f6:57:e6:40:a1:d9:f2:87:83:17:c2:
                    1b:0a:82:7b:a3:57:ae:c7:25:c1:b5:58:31:9b:10:
                    45:8a:71:3a:a5:f5:47:7f:6a:12:6b:30:30:d0:ff:
                    8f:37:11:1d:d9:a2:71:71:02:6f:5a:dd:fd:15:5c:
                    a5:48:59:1a:98:ef:23:ca:e3:e2:7b:1d:fa:39:41:
                    82:62:a8:d5:ea:fe:44:bd:ab:96:1b:1a:ad:7f:fb:
                    97:d1:0a:54:1f:5f:fd:b3:3e:bf:10:a4:81:27:0b:
                    75:6c:8b:5c:ec:27:cb:c7:fb:23:fb:ce:de:e0:1f:
                    c3:70:e3:b1:f4:1b:c6:06:31:bc:79:db:f7:c0:29:
                    02:af:aa:c8:7e:70:91:d1:d5:84:cc:f3:e3:cc:2e:
                    51:36:38:ca:3a:65:49:55:42:88:e3:0a:a2:56:70:
                    18:1c:9e:91:8e:c3:74:de:e1:03:0e:de:10:09:26:
                    fb:fb:ff:98:ef:e1:e7:f6:74:17:31:9e:29:85:06:
                    18:f8:61:da:37:ef:ff:be:3f:d2:ce:0f:e6:78:1c:
                    18:a7:0a:2b:6e:3a:ef:49:12:c6:b6:18:bd:d5:b8:
                    ae:f9:25:85:b1:33:d3:03:8d:42:02:75:96:84:c4:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4B:F9:C0:BE:F6:32:F1:0D:35:57:49:55:EA:DB:2B:7D:FF:0E:B3
            X509v3 Authority Key Identifier:
                keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3132332e302f32342d3234203d3e203130313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:70:18:a6:50:a5:d1:f2:14:9e:46:8c:1e:27:90:98:5d:cc:
         ba:83:4e:db:dc:1e:65:12:46:44:23:cd:96:5f:46:ea:eb:5e:
         38:f7:b9:46:56:20:d4:49:ab:90:fa:26:53:78:ef:3c:e7:28:
         37:df:3e:9b:43:7b:c0:75:84:75:66:b7:37:5a:0f:4f:3c:93:
         da:32:b2:fd:6d:55:45:9a:62:f5:7f:2d:25:0a:11:7f:a3:df:
         bf:de:ae:c6:64:fd:4a:8b:21:18:15:c2:f3:4a:ef:ef:c0:00:
         6b:0c:1f:23:d6:f3:ee:f6:2b:e9:a5:ca:f0:8f:7a:a7:70:dc:
         1b:6f:36:7d:ad:d1:59:c5:c2:ff:8b:df:35:0f:7a:4c:12:cc:
         2d:01:9e:b2:fa:3a:2c:54:ea:b7:31:bb:8c:30:c1:4a:11:50:
         a6:66:44:69:ce:0a:29:b3:8d:d4:cd:5b:bb:2f:20:7f:fc:14:
         e9:e4:3d:2d:04:f4:fe:67:d1:d1:f1:e7:53:17:e3:b1:64:3a:
         45:93:4f:4a:ae:da:b2:78:cf:2d:be:44:eb:86:15:c4:5b:bc:
         7f:ea:ba:fa:a1:2d:2f:6b:d8:d1:9a:e6:3b:78:63:ac:14:98:
         9e:fe:3a:89:ca:18:47:17:e6:ad:32:9e:72:8d:1c:f0:85:f6:
         b9:54:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:03 2026 by rpki-client