Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa
File:                     3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier:          UidjzsQTxCtanEIC/TiRELvUoDCR4DA5krGkEEiRu+Y=
Subject key identifier:   4E:9A:6B:2A:0D:EF:52:BD:6D:1F:96:D3:61:4E:75:A7:27:2A:B5:D0
Certificate issuer:       /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial:       651C8091103A0CF788ADA693F630442BB32439B1
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa
Signing time:             Sun 03 May 2026 02:53:10 +0000
ROA not before:           Sun 03 May 2026 02:48:10 +0000
ROA not after:            Sun 02 May 2027 02:53:10 +0000
asID:                     131745
IP address blocks:        210.247.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
                          rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1c:80:91:10:3a:0c:f7:88:ad:a6:93:f6:30:44:2b:b3:24:39:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
        Validity
            Not Before: May  3 02:48:10 2026 GMT
            Not After : May  2 02:53:10 2027 GMT
        Subject: CN=4E9A6B2A0DEF52BD6D1F96D3614E75A7272AB5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:80:b4:50:68:a7:71:22:75:a1:23:21:af:94:
                    e6:03:fd:fc:1c:44:79:39:c7:55:8a:d3:9c:cb:8f:
                    80:51:75:4a:69:00:b1:07:46:ad:2f:f3:71:bc:f6:
                    36:74:5a:52:c2:7e:1f:6d:03:34:ee:a6:6f:c3:1f:
                    df:55:e3:7c:1a:55:9d:57:7f:5f:73:03:ec:ef:3b:
                    42:73:05:dc:cd:8a:58:83:2f:e6:29:ce:93:ac:76:
                    a8:e2:8b:56:6e:4c:c8:85:14:f4:b2:8e:40:ea:0e:
                    03:e3:07:20:e1:39:86:50:22:04:6c:1b:74:c9:5f:
                    e6:ab:b3:a2:8c:27:29:ce:26:9f:ac:f0:4c:10:f9:
                    96:fe:db:27:d2:69:51:9b:a0:a9:d9:15:b9:bb:4a:
                    d4:f8:f8:ea:b7:19:f5:a5:b1:1c:3a:f2:91:12:25:
                    85:db:8f:2c:53:02:42:2f:8c:fd:60:62:95:21:9f:
                    9e:1a:65:5a:0e:6c:11:83:93:23:51:fe:e5:55:7a:
                    3a:54:23:e4:76:c2:c5:73:44:27:c4:f7:8f:9d:c4:
                    19:48:7a:b4:6a:b3:94:7a:b8:64:f6:f0:f1:fb:3c:
                    aa:17:b3:b0:27:ed:3a:2d:bf:26:5e:e7:21:a8:07:
                    4c:f4:e2:03:3c:e7:ff:fe:9b:a9:d1:2a:76:e9:48:
                    2a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9A:6B:2A:0D:EF:52:BD:6D:1F:96:D3:61:4E:75:A7:27:2A:B5:D0
            X509v3 Authority Key Identifier:
                keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.247.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:2e:e6:06:0c:f0:3c:56:48:42:ad:9f:89:3c:5b:61:23:6f:
         4c:cf:1b:b4:6e:71:6a:c2:04:c8:11:6e:4b:c0:39:e8:d5:99:
         f8:3a:87:5e:a8:7e:69:a7:81:a3:bd:ca:fd:85:b3:10:f0:c3:
         36:75:4b:c3:65:a0:dd:f9:fb:32:01:fe:c3:d9:f8:b6:34:40:
         b9:c9:78:14:c7:d6:45:89:74:40:30:0b:dd:8c:93:b0:7c:5b:
         01:e7:97:53:af:e7:d6:ca:d4:30:26:08:5a:66:c2:1b:3a:f1:
         8f:8f:fe:76:bf:ee:83:3d:45:61:0c:af:40:c8:2e:35:b0:e4:
         b0:16:d1:c0:a7:ae:a8:6b:bd:b6:f2:58:be:6b:ee:ea:92:e2:
         01:29:49:7e:d7:60:01:85:7e:5c:e9:49:f3:c4:e5:13:f3:87:
         de:8e:7a:12:52:33:af:ab:4a:00:f4:36:aa:88:3f:92:7a:a0:
         2a:66:07:0a:68:fc:66:ef:12:1e:95:b6:28:44:e0:e7:44:32:
         57:1c:60:84:78:a4:ba:b1:4f:55:35:80:12:4d:dd:9a:29:0e:
         54:28:93:11:87:27:6f:36:63:75:23:2b:3e:cd:f6:3a:76:ba:
         82:31:87:db:a4:bc:56:b4:c3:6e:02:2c:bb:7d:49:91:4e:22:
         7b:e0:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:25 2026 by rpki-client