Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3234203d3e203137393130.roa
File:                     3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (raw, json)
Hash identifier:          +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=
Subject key identifier:   76:32:68:50:0B:6B:65:2D:E7:27:62:EA:2F:C8:B6:4D:27:CE:F9:5A
Certificate issuer:       /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial:       1C627564C73268152E38EDA64812811C71532DEC
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3234203d3e203137393130.roa
Signing time:             Sun 03 May 2026 02:48:18 +0000
ROA not before:           Sun 03 May 2026 02:43:18 +0000
ROA not after:            Sun 02 May 2027 02:48:18 +0000
asID:                     17910
IP address blocks:        202.127.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
                          rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:62:75:64:c7:32:68:15:2e:38:ed:a6:48:12:81:1c:71:53:2d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
        Validity
            Not Before: May  3 02:43:18 2026 GMT
            Not After : May  2 02:48:18 2027 GMT
        Subject: CN=763268500B6B652DE72762EA2FC8B64D27CEF95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:48:35:eb:fd:80:67:18:ab:de:f5:b9:b1:70:
                    c8:2b:35:6a:cb:4c:d8:02:dc:85:f2:f7:29:cd:a2:
                    d2:c0:32:22:9c:0d:c1:de:72:dd:07:eb:93:bc:ae:
                    fc:14:bd:20:dc:eb:9c:dc:d9:da:7e:07:b2:91:cb:
                    0f:a6:5d:04:c1:e3:bc:1e:ce:04:bf:e1:3e:4e:a9:
                    4e:80:27:27:c0:f4:48:0f:67:ae:05:3a:0f:4d:ed:
                    f9:29:f8:c1:71:cf:39:94:f1:93:fc:f7:99:ac:ee:
                    f8:43:1a:54:9b:dc:54:cc:78:b5:dd:1a:f8:7b:03:
                    7a:53:f3:3f:70:7a:c4:ea:29:c3:ce:0c:80:62:cf:
                    3a:0e:c8:43:90:03:d0:db:93:13:74:35:4a:9c:bd:
                    17:25:b3:ce:70:48:30:e3:b4:1f:0c:06:07:d1:fb:
                    36:c0:c3:5e:c3:ac:59:40:22:46:7d:47:b1:a2:2a:
                    c5:b9:b9:e2:06:33:a3:44:c7:79:e1:60:5d:26:c7:
                    0e:ba:ba:05:49:c5:a1:28:ef:0a:13:db:66:11:c2:
                    d6:01:b1:d0:a0:8f:2e:fb:ae:1a:fa:ed:e3:1b:f2:
                    99:b2:a1:32:8b:19:6b:af:27:c8:12:20:5f:1c:c0:
                    7b:21:5f:0e:12:3b:30:9d:bb:61:c2:48:02:75:03:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:32:68:50:0B:6B:65:2D:E7:27:62:EA:2F:C8:B6:4D:27:CE:F9:5A
            X509v3 Authority Key Identifier:
                keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3234203d3e203137393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:95:e9:38:d7:55:ba:6e:71:fd:ad:bf:1a:57:70:dc:fa:6b:
         13:8c:60:68:cb:07:bf:c2:5f:14:51:88:5e:28:ac:e9:3f:ed:
         d5:01:62:36:eb:24:42:5b:15:79:b6:e6:65:ba:17:58:d8:c9:
         4d:82:71:7b:4e:51:ff:f1:4e:8e:d9:24:38:eb:d7:c8:ba:c6:
         f5:2b:fa:0a:dd:62:16:9b:04:d1:e6:60:e8:e0:72:dd:f1:1d:
         e6:98:89:dc:e0:f7:01:c0:5a:22:b4:c7:ea:6e:dd:c4:a6:f5:
         27:49:6f:99:a5:33:34:f8:c2:72:7f:19:fe:f2:fc:ad:e5:1b:
         71:26:68:68:57:77:26:2a:4c:89:27:f2:05:15:08:98:20:c0:
         e4:f6:bf:f0:51:8d:9a:57:6d:bf:b1:30:ed:49:40:37:c5:6a:
         98:0c:0b:fe:b7:88:22:b8:72:46:04:36:f0:e0:b0:50:9e:d0:
         32:d3:bf:c3:c9:98:dd:93:9d:4d:d3:a2:8e:5c:d1:8b:5b:e9:
         1a:c2:51:67:fb:c1:26:66:f9:a1:7c:81:01:8c:4a:68:d8:fe:
         1e:3b:3f:a9:c3:78:e1:86:30:d5:5f:d9:0b:1d:c2:97:6c:a9:
         7e:13:4d:53:30:3f:26:85:9c:70:a8:c8:9a:79:2f:73:70:37:
         b1:76:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:51 2026 by rpki-client