Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa
File:                     3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          SBuezJoeFSmiJFbpK3vYJJG/KYxSwTomdhAqA9qmqSc=
Subject key identifier:   7B:AA:6F:AC:5C:04:36:DA:0E:7A:9E:6E:C5:E9:B3:81:C0:8E:93:4B
Certificate issuer:       /CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42
Certificate serial:       0C8544639F2D521CAB1C7EB468B971DB308D0F7B
Authority key identifier: 63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa
Signing time:             Sun 03 May 2026 03:00:34 +0000
ROA not before:           Sun 03 May 2026 02:55:34 +0000
ROA not after:            Sun 02 May 2027 03:00:34 +0000
asID:                     136052
IP address blocks:        210.79.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl
                          rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:85:44:63:9f:2d:52:1c:ab:1c:7e:b4:68:b9:71:db:30:8d:0f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42
        Validity
            Not Before: May  3 02:55:34 2026 GMT
            Not After : May  2 03:00:34 2027 GMT
        Subject: CN=7BAA6FAC5C0436DA0E7A9E6EC5E9B381C08E934B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:eb:40:1d:ec:ee:82:1b:69:d4:ca:66:a9:
                    6e:ee:4f:5a:c5:28:b3:33:d4:e1:71:f9:62:a4:e6:
                    50:31:e5:56:ab:f8:46:ae:8f:35:85:f6:79:75:94:
                    e1:f1:00:4d:9b:7d:69:66:ea:a4:33:03:ae:ee:14:
                    89:6a:47:ee:5d:b5:31:dd:ff:36:f4:b8:df:91:35:
                    d5:ab:62:8b:4c:c8:1f:f7:46:91:a2:7e:69:a1:1c:
                    07:17:99:b8:15:29:21:af:f5:d7:3d:e4:8f:d8:3c:
                    ef:08:b4:4f:52:53:cf:7a:60:22:16:a6:1c:7a:89:
                    c8:51:db:66:c8:02:c4:4a:b9:a3:f2:52:81:c9:b6:
                    c9:28:bb:91:2c:c2:4a:0c:21:35:2a:0a:42:a5:87:
                    03:90:b0:86:53:83:bb:f1:5c:69:1a:50:dd:7d:4e:
                    f0:99:cc:f6:59:26:cd:15:8e:12:52:b8:65:16:99:
                    f5:fc:96:47:2a:3f:5a:1b:13:4a:fe:da:3a:42:6f:
                    3e:38:51:f3:bd:ac:4f:a4:07:c0:1b:bf:74:7c:12:
                    a5:34:88:de:28:72:72:44:67:a3:77:15:b8:ad:cf:
                    bb:4a:08:d7:37:b9:f2:3c:9b:21:47:49:13:41:fb:
                    2a:fb:b3:58:1c:95:25:b9:91:bc:4f:7d:52:5a:49:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AA:6F:AC:5C:04:36:DA:0E:7A:9E:6E:C5:E9:B3:81:C0:8E:93:4B
            X509v3 Authority Key Identifier:
                keyid:63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:af:23:a5:b8:cb:76:f8:49:b7:62:2f:37:40:fb:3b:46:c0:
         6b:7f:b5:0f:42:51:42:96:2f:bd:1e:66:ae:d3:82:23:5f:df:
         b9:40:c0:e4:32:02:e6:91:38:de:d6:c9:70:f6:eb:df:55:0e:
         4f:2b:50:6b:f9:dc:62:aa:1c:1f:18:f6:df:a2:4d:2c:d9:94:
         58:72:2e:5a:48:7d:cc:7e:72:a7:23:df:bf:6d:0b:9c:7d:b0:
         51:2a:8b:d5:17:7d:82:94:e6:ad:75:91:e2:4f:02:61:27:83:
         46:71:2f:8a:3f:f5:69:5c:92:c8:98:9e:1f:01:1d:90:77:ee:
         7a:58:82:f6:73:5f:70:ca:43:b3:45:77:1a:c7:8d:a0:cb:bf:
         88:f5:7e:60:19:89:29:ab:6d:2e:96:f8:52:9e:91:5e:24:99:
         35:05:a2:fc:c6:f2:74:b3:00:2f:10:5c:43:6c:64:ce:16:b1:
         e1:ba:5b:c7:c1:47:c1:7f:51:41:e1:20:bc:53:fa:ae:4d:9c:
         12:8a:a6:ab:2e:74:33:96:13:8a:2b:95:04:a9:88:a5:4f:08:
         0a:a8:a7:e7:24:ec:f0:f0:f4:c9:88:44:3d:f9:70:ba:54:c1:
         37:12:e3:30:42:9d:15:9e:5e:9a:6f:c7:0a:c7:43:52:b7:bc:
         bb:4a:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:30 2026 by rpki-client