Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3132312e35322e3133362e302f32312d3231203d3e203535363939.roa
File:                     3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (raw, json)
Hash identifier:          bJ7AouFb4tIwAc54hXOpuyqA13UTgSDRT2nPRsM2jh0=
Subject key identifier:   03:15:79:BB:86:24:AC:1E:D3:20:92:B1:8B:3A:81:07:7A:15:F4:A7
Certificate issuer:       /CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Certificate serial:       080CD25BFF07A7F356CDC184F1F31A159000D22F
Authority key identifier: C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3132312e35322e3133362e302f32312d3231203d3e203535363939.roa
Signing time:             Sun 03 May 2026 03:01:18 +0000
ROA not before:           Sun 03 May 2026 02:56:18 +0000
ROA not after:            Sun 02 May 2027 03:01:18 +0000
asID:                     55699
IP address blocks:        121.52.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
                          rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0c:d2:5b:ff:07:a7:f3:56:cd:c1:84:f1:f3:1a:15:90:00:d2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
        Validity
            Not Before: May  3 02:56:18 2026 GMT
            Not After : May  2 03:01:18 2027 GMT
        Subject: CN=031579BB8624AC1ED32092B18B3A81077A15F4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:13:d1:1d:72:ee:66:3d:1b:52:e3:41:b9:
                    da:b6:eb:27:30:45:56:1a:5e:16:83:2c:be:06:9f:
                    76:f4:23:a9:6c:28:52:c6:44:5a:d4:97:e4:ea:2f:
                    65:e5:a9:c0:fc:ec:b5:94:75:59:4f:2b:d7:4e:2d:
                    a8:f7:29:dc:f0:14:70:e5:22:66:83:32:76:ad:98:
                    f0:25:7f:f3:21:c7:43:78:50:3f:65:1b:34:ae:c4:
                    20:58:5a:2a:9c:f0:dc:c1:02:90:2e:6f:9f:82:04:
                    2e:ae:db:12:71:f1:75:5c:d7:bc:e8:d1:03:69:73:
                    4d:2a:26:3a:e0:94:9d:13:97:b4:59:9d:ae:f2:a8:
                    10:2e:96:32:f2:2f:64:df:e2:42:6b:82:df:63:40:
                    04:a4:c3:53:93:3d:70:b6:f6:05:73:77:ee:58:37:
                    e4:7c:ec:a2:fa:a1:62:f6:d3:39:8b:de:27:58:23:
                    64:88:ca:32:dc:6f:9e:f6:0b:e1:b1:71:fc:b3:c9:
                    b2:e1:11:ce:1a:11:e0:00:43:f0:6f:63:7f:a9:b3:
                    3a:c4:44:ad:96:72:d1:9f:c2:53:09:fd:61:e9:4f:
                    ab:83:d7:f5:be:15:24:dd:49:7a:0a:fe:5b:90:f2:
                    61:d7:be:2c:86:bb:c5:a8:32:44:48:ac:73:dc:92:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:15:79:BB:86:24:AC:1E:D3:20:92:B1:8B:3A:81:07:7A:15:F4:A7
            X509v3 Authority Key Identifier:
                keyid:C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3132312e35322e3133362e302f32312d3231203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.52.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:d8:58:cf:eb:53:f8:ee:d1:0c:8b:46:02:28:db:14:a8:
         a3:94:9d:81:9e:56:b1:16:dd:bd:ff:6b:9c:3a:54:0e:21:d9:
         e1:ee:64:66:21:b0:6b:75:30:af:10:ad:24:ca:e6:3e:c1:46:
         0c:cd:25:01:b1:74:7f:8b:01:de:81:17:d3:f1:7b:10:45:ae:
         65:e8:c4:4a:12:ed:cc:06:bd:39:89:a1:eb:d0:b1:3f:4a:1f:
         36:c5:76:36:a0:4c:be:9d:50:12:1b:fb:40:2d:fd:fa:ec:9b:
         7a:0d:5b:fb:b9:42:f4:88:23:79:d7:f6:e2:3a:a4:22:b0:11:
         53:2f:19:e0:c4:84:9c:34:60:32:43:65:34:ed:a4:5f:d2:fc:
         de:58:3b:39:e4:af:99:d6:2c:c9:fe:ce:cd:96:ae:b1:6a:60:
         cf:ab:2c:0c:81:d1:7f:94:36:7b:bd:e9:0b:d2:1e:e1:17:b2:
         c9:f8:21:f3:65:4d:b8:91:53:96:97:74:6c:55:f2:2f:f8:7a:
         f4:b8:9a:1e:f1:5a:24:6c:3c:28:f1:c1:ca:cf:17:94:e5:39:
         3e:20:63:06:c7:9d:78:eb:1f:64:73:a2:87:1b:55:1c:3f:db:
         6b:f7:c3:3b:18:55:47:fd:25:86:7f:2b:96:82:c5:70:90:40:
         0a:20:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:00 2026 by rpki-client