Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230332e3231302e38342e302f32322d3232203d3e203535363939.roa
File:                     3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          cpOS+owQUlhThnbX4ZpGNAdhNpHzy2pOiSrU5Q5UTVY=
Subject key identifier:   B2:C5:4E:E8:24:9E:32:0F:F8:8C:8A:58:45:3C:08:60:EB:F5:44:D1
Certificate issuer:       /CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Certificate serial:       6CB51AD29AB7CE113389B9F80F7E2BD6BBD7B750
Authority key identifier: C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230332e3231302e38342e302f32322d3232203d3e203535363939.roa
Signing time:             Sun 03 May 2026 03:01:19 +0000
ROA not before:           Sun 03 May 2026 02:56:19 +0000
ROA not after:            Sun 02 May 2027 03:01:19 +0000
asID:                     55699
IP address blocks:        203.210.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
                          rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b5:1a:d2:9a:b7:ce:11:33:89:b9:f8:0f:7e:2b:d6:bb:d7:b7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
        Validity
            Not Before: May  3 02:56:19 2026 GMT
            Not After : May  2 03:01:19 2027 GMT
        Subject: CN=B2C54EE8249E320FF88C8A58453C0860EBF544D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:d8:53:02:fd:c8:52:f3:99:bf:cb:b7:d5:
                    44:0f:85:84:ad:36:45:6d:e4:54:3a:92:30:8f:d0:
                    81:52:5c:fa:6c:54:03:44:c7:2c:fb:68:12:4a:ca:
                    a4:0b:55:93:69:1c:4c:f2:a7:e9:b1:70:b8:3d:92:
                    a6:fe:ff:1a:b3:30:4d:40:4d:8d:7c:c0:56:5f:be:
                    91:61:b1:25:37:37:ee:ee:78:1c:e9:ff:64:12:0d:
                    ff:9a:d2:78:97:80:f7:ed:39:e8:74:d4:b5:94:c3:
                    e2:b1:e7:5e:c7:1a:44:4e:a7:38:96:1b:31:fe:8e:
                    d2:1a:f5:44:37:e4:cf:78:5f:10:0c:b9:b9:b0:09:
                    91:62:d3:64:a9:46:c9:3f:eb:2c:ed:67:55:d4:0c:
                    e2:53:69:b9:ba:9f:54:4a:b9:21:28:f2:24:04:d0:
                    a9:17:b0:58:02:de:95:2a:77:ae:13:c0:93:2b:41:
                    20:5a:10:eb:10:69:16:c0:30:83:05:1c:40:0a:31:
                    bf:77:87:23:22:81:2a:7d:59:9a:68:15:13:e5:a6:
                    1a:f5:58:3c:ff:70:59:49:72:8d:cb:50:a1:37:22:
                    df:86:57:ea:45:5d:6f:d6:9c:7e:61:21:4e:de:cd:
                    03:2f:1d:ca:ba:15:58:69:a0:48:11:53:03:75:3c:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C5:4E:E8:24:9E:32:0F:F8:8C:8A:58:45:3C:08:60:EB:F5:44:D1
            X509v3 Authority Key Identifier:
                keyid:C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230332e3231302e38342e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.210.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:09:93:2b:e4:ea:53:ee:bd:c9:8b:71:ab:63:ce:48:00:74:
         18:ea:6b:c4:53:36:12:8d:07:17:b0:f1:80:57:8c:96:3c:4d:
         fc:10:b5:f4:27:19:c2:92:d6:05:db:dd:cd:0e:28:fc:ac:9d:
         2a:ba:25:2b:71:cd:c6:5b:d9:a0:0a:16:05:30:4a:21:4a:24:
         59:c4:40:b1:0a:20:b5:2d:e8:e2:aa:df:a0:28:49:05:c4:6a:
         9c:0a:7d:a4:bc:28:9a:3a:c2:5b:7d:5b:2f:57:46:ce:45:c5:
         40:eb:da:9e:44:96:16:b2:3d:43:69:ee:23:80:d5:dd:e9:6e:
         80:ba:c5:77:7b:b7:a9:2d:2b:45:b0:2a:a8:3d:be:ab:d8:9c:
         50:38:3c:a4:02:21:25:7d:e6:73:1b:9f:ac:1c:c5:98:99:25:
         bb:a7:37:54:e0:da:fb:92:34:4f:b1:ac:22:9b:d0:0d:a6:b4:
         1e:52:f7:be:97:49:47:07:2b:bc:00:31:1a:79:c6:fe:e1:ca:
         71:c3:e2:9f:d4:ec:19:76:34:54:76:c3:cf:46:cd:85:ec:07:
         8e:73:bc:30:db:d9:b0:7c:6d:33:23:93:2d:f1:8b:5a:04:4f:
         e0:85:e3:6e:87:01:4f:81:ff:5c:94:8d:6a:4b:eb:61:61:d8:
         35:cd:bd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:34 2026 by rpki-client