Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230322e3135312e31322e302f32322d3232203d3e203535363939.roa
File:                     3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          SQDl0NMVHHhQkpG6yxh3VjuT52aZ+ScdAS6b47rIF4Y=
Subject key identifier:   FD:C8:63:A7:F9:5D:D2:37:20:02:FB:DB:C9:17:EF:07:1C:E1:AC:65
Certificate issuer:       /CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Certificate serial:       40DA54154423DC81E3862B0046F80E4A08127290
Authority key identifier: C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230322e3135312e31322e302f32322d3232203d3e203535363939.roa
Signing time:             Sun 03 May 2026 03:01:17 +0000
ROA not before:           Sun 03 May 2026 02:56:17 +0000
ROA not after:            Sun 02 May 2027 03:01:17 +0000
asID:                     55699
IP address blocks:        202.151.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
                          rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:da:54:15:44:23:dc:81:e3:86:2b:00:46:f8:0e:4a:08:12:72:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
        Validity
            Not Before: May  3 02:56:17 2026 GMT
            Not After : May  2 03:01:17 2027 GMT
        Subject: CN=FDC863A7F95DD2372002FBDBC917EF071CE1AC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1f:d4:2f:a4:31:83:e5:93:ec:30:16:10:36:
                    05:ac:a0:78:46:68:a2:e9:d9:0c:da:65:06:7c:c5:
                    f2:c5:fa:74:ad:d6:49:2c:f4:3b:30:6c:12:a2:e3:
                    bc:ba:82:ba:eb:1b:a3:96:07:73:9d:3b:40:b5:00:
                    56:4b:aa:42:a0:c9:07:c2:8b:a2:7b:5d:76:2c:b3:
                    7e:9e:97:27:36:cd:ff:ba:c0:43:cf:4d:83:17:35:
                    c4:1f:7b:ed:ff:4d:53:1c:54:40:c8:9f:e7:d2:eb:
                    6f:6b:8a:e1:42:4f:39:a0:5e:e1:bb:97:41:da:b8:
                    2b:61:fc:36:35:6e:94:2d:e5:d5:ad:af:24:9d:85:
                    d8:4a:d2:c0:69:c1:c6:7b:1c:2a:35:0f:0d:0a:59:
                    51:8b:dd:c8:4a:27:86:97:e1:60:c3:3e:ca:b4:dd:
                    e4:97:2e:33:ae:5f:da:1d:1a:eb:9a:4b:dd:2e:7f:
                    26:96:42:af:db:fd:d5:e3:e8:79:2f:9f:b0:f9:51:
                    69:4b:93:3a:1e:c9:30:11:32:8e:32:bb:0d:03:ab:
                    04:99:dc:27:00:1b:e0:d9:7d:2e:5b:b7:38:3d:c6:
                    08:82:c3:ec:65:e5:10:9c:6f:ff:3a:02:e2:93:58:
                    97:47:6d:7b:93:df:42:10:b9:6f:15:67:d2:84:69:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C8:63:A7:F9:5D:D2:37:20:02:FB:DB:C9:17:EF:07:1C:E1:AC:65
            X509v3 Authority Key Identifier:
                keyid:C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230322e3135312e31322e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.151.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:e0:58:07:3b:8f:24:1e:e6:64:91:eb:73:73:62:5f:9e:ef:
         09:cb:0b:0b:2d:b2:0e:ff:13:c6:69:69:5a:45:55:b8:5a:03:
         d6:f7:f9:ee:0a:30:37:c3:59:90:79:98:c6:6d:52:af:b7:b8:
         f1:23:48:5d:79:cd:f3:74:5f:43:e3:23:cf:c7:de:f3:3d:8e:
         4b:d8:10:75:bb:d9:e3:12:17:92:4a:2e:7c:24:2c:bf:5b:0a:
         94:d8:da:14:92:f3:84:69:1d:8a:9d:f6:b8:00:1b:af:ac:6a:
         6a:5a:88:a9:83:96:e5:3b:80:f5:48:df:8d:2b:1f:b9:38:56:
         98:35:cf:0f:42:a3:5c:8d:11:43:51:1b:be:65:d6:ec:d2:5e:
         3d:6a:2c:db:93:17:a0:76:8e:f1:9c:67:e0:df:5f:e9:a9:8b:
         a9:1b:e0:6f:57:a4:83:66:5c:59:89:3f:7f:c6:73:76:16:67:
         2f:4b:58:b4:4b:a5:06:2d:23:6d:ea:3c:c4:4e:4c:15:0c:36:
         15:56:86:6e:08:e9:29:2e:33:e1:86:2e:09:a0:af:13:a8:1b:
         5c:42:93:20:e0:08:df:19:9d:6e:6f:ca:56:72:f2:0b:83:80:
         21:20:46:2f:b7:fe:4d:01:7f:53:b3:0a:8e:34:29:50:a6:8d:
         fc:24:fd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:11 2026 by rpki-client