Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa
File:                     3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (raw, json)
Hash identifier:          YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=
Subject key identifier:   98:D0:AE:E4:88:57:95:B9:3F:43:31:1B:82:8A:82:11:B8:C1:2F:21
Certificate issuer:       /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial:       7F86F2252EDFB065335DDFEBC79B0690D7AFA3C8
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa
Signing time:             Sun 03 May 2026 02:53:13 +0000
ROA not before:           Sun 03 May 2026 02:48:13 +0000
ROA not after:            Sun 02 May 2027 02:53:13 +0000
asID:                     140405
IP address blocks:        210.247.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
                          rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:86:f2:25:2e:df:b0:65:33:5d:df:eb:c7:9b:06:90:d7:af:a3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
        Validity
            Not Before: May  3 02:48:13 2026 GMT
            Not After : May  2 02:53:13 2027 GMT
        Subject: CN=98D0AEE4885795B93F43311B828A8211B8C12F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:86:65:de:cc:e8:93:67:fb:77:a9:e8:4d:
                    03:64:c8:60:e5:d0:a2:5d:35:fa:60:1b:56:ab:45:
                    b7:4f:75:80:d4:05:ca:1d:c5:24:99:de:2c:b4:76:
                    af:e6:0b:e2:50:dc:24:13:ec:a7:df:5e:e8:0e:de:
                    51:57:41:76:d7:c2:99:0a:ec:3b:d8:70:d8:30:98:
                    f5:2f:e7:05:05:fa:aa:21:5a:bc:4b:db:61:c5:13:
                    6b:13:3d:17:75:0e:1a:5e:70:7f:a0:3b:41:c2:69:
                    f0:39:bf:99:b3:75:3c:83:90:c2:98:3d:b6:2f:26:
                    32:ba:68:52:8f:32:1f:e7:40:be:46:22:45:a7:2d:
                    27:4d:72:b0:87:b1:00:89:3e:bc:9c:8b:11:44:d9:
                    49:ab:68:fa:3a:b7:59:3a:48:4e:7c:49:bc:28:93:
                    9f:1b:09:59:05:97:91:3f:12:65:2f:26:6d:74:7d:
                    4b:d9:51:06:5b:f7:aa:93:29:40:1b:d5:a1:4e:a7:
                    38:15:f1:40:9b:f0:cb:b5:c5:f0:96:8a:2d:24:ec:
                    a8:ee:bc:73:d5:8f:61:54:83:72:cc:77:28:2d:e5:
                    1e:37:4b:e7:ce:a5:b5:24:cb:f0:94:50:50:a2:f8:
                    bd:de:5d:d9:75:89:e1:e2:84:09:41:66:23:d6:4d:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D0:AE:E4:88:57:95:B9:3F:43:31:1B:82:8A:82:11:B8:C1:2F:21
            X509v3 Authority Key Identifier:
                keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.247.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:18:56:12:5f:5e:bd:03:10:fa:4c:37:db:03:c7:39:89:
         c4:a2:50:3e:89:da:db:7f:9c:9f:74:b9:95:e0:7d:f3:a6:b2:
         92:c4:66:9c:09:38:4c:68:5e:a5:55:96:63:78:b4:5f:67:72:
         0c:7b:7c:79:28:f9:1e:d0:62:75:10:35:fc:87:fe:d6:e8:23:
         56:62:28:13:53:ff:a4:dd:4d:9b:3a:41:8e:1f:2f:82:90:d9:
         3b:e4:77:12:09:48:34:e2:ac:b2:f2:d7:7b:3e:5e:47:44:40:
         bd:f4:5a:ec:82:40:ad:90:07:2d:14:12:f3:af:5b:62:03:10:
         98:d8:be:d6:e4:2c:6a:dd:f0:39:6c:cc:56:0c:b4:cb:92:4f:
         62:a5:89:b4:50:dc:51:69:65:98:b6:6e:ec:a9:22:8e:ea:8e:
         ab:e8:af:e3:f2:39:e0:1e:50:02:cd:00:05:a1:e1:5f:cf:17:
         a8:fb:3d:72:c4:6d:a2:9b:76:9e:4a:a2:8d:7e:51:02:93:4a:
         c9:82:9d:12:ed:02:63:da:84:a2:01:64:02:d2:4d:49:3b:81:
         b6:f0:f4:14:cb:36:2f:fc:fb:55:75:dc:c6:f5:25:e1:a3:cf:
         e0:ad:d2:1f:7a:ee:8c:5b:bc:6e:3a:e2:99:6c:ec:f6:ad:db:
         fb:5d:14:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:25 2026 by rpki-client