Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa
File:                     3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (raw, json)
Hash identifier:          eZo0g6KBgifWLzMIaTnanKwKmJFPlu9aLpVibvZp0UY=
Subject key identifier:   74:E3:F4:B1:30:C3:89:33:D8:26:F1:FC:76:37:BB:20:60:AD:2F:67
Certificate issuer:       /CN=51F28FDA0EA4620C617F32218CB294E10169884C
Certificate serial:       259148BB4253D5C3569A516B098DF901CC030931
Authority key identifier: 51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa
Signing time:             Sun 03 May 2026 03:07:01 +0000
ROA not before:           Sun 03 May 2026 03:02:01 +0000
ROA not after:            Sun 02 May 2027 03:07:01 +0000
asID:                     133799
IP address blocks:        123.108.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl
                          rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:91:48:bb:42:53:d5:c3:56:9a:51:6b:09:8d:f9:01:cc:03:09:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F28FDA0EA4620C617F32218CB294E10169884C
        Validity
            Not Before: May  3 03:02:01 2026 GMT
            Not After : May  2 03:07:01 2027 GMT
        Subject: CN=74E3F4B130C38933D826F1FC7637BB2060AD2F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:7a:dc:a6:10:20:2c:15:c1:e0:1b:b6:73:
                    45:1e:d5:84:eb:31:b7:68:84:76:ef:48:d5:6b:b8:
                    d2:a6:43:90:a1:bf:9b:61:9b:88:41:09:ca:2b:60:
                    1f:c8:e8:c7:a6:c0:a9:87:eb:4f:9d:72:07:fb:be:
                    54:9b:54:c9:ca:27:bf:d9:34:5e:3e:e8:03:3c:46:
                    20:86:1d:cf:d4:b8:de:f8:3d:5f:e0:3b:43:02:c1:
                    97:fe:63:2f:f3:01:4e:a8:e7:ca:6e:cf:5c:7d:ae:
                    89:37:a4:ad:d7:8d:de:a9:5f:76:d4:b9:1d:d4:34:
                    b8:29:67:f5:d8:09:fb:39:8c:f3:7e:81:e4:50:2c:
                    7a:f4:6e:2b:f3:13:d9:b1:a1:ff:0e:ae:9e:e1:ae:
                    18:be:ae:b5:26:b8:4c:a3:5e:65:c7:3e:25:33:97:
                    9f:b5:fc:dc:9f:ec:36:65:e2:de:f2:9e:fe:a6:6f:
                    6c:11:39:9f:68:d2:9f:53:cf:1a:d3:04:33:c0:2a:
                    8e:9b:60:7e:2c:72:6e:a5:b7:b0:c4:e7:d4:62:7e:
                    c6:a9:62:5a:25:b1:75:72:28:64:72:8e:f4:02:7d:
                    47:4f:5c:c4:d0:af:3a:68:ea:c5:c9:0f:ec:c2:b8:
                    42:59:56:95:9f:6b:f8:63:40:bd:fb:80:29:f5:75:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E3:F4:B1:30:C3:89:33:D8:26:F1:FC:76:37:BB:20:60:AD:2F:67
            X509v3 Authority Key Identifier:
                keyid:51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.108.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:38:32:1e:d4:07:76:95:10:ed:ba:ef:b7:a0:19:a5:09:
         23:b3:d3:31:65:f2:b0:fd:90:e9:79:38:cc:04:94:d1:62:bb:
         77:ae:3c:66:76:ad:5c:33:9a:22:73:14:4c:d5:28:32:ee:0b:
         ff:c6:34:dc:8d:ea:97:b6:d7:bd:a8:95:1d:71:95:84:99:25:
         26:91:97:87:0b:66:68:5b:3f:a9:a2:02:90:30:54:71:e3:42:
         c7:48:06:f3:91:58:b4:a8:40:69:fb:f0:7a:3e:d4:03:ff:ce:
         6e:78:df:72:af:3e:2c:04:13:af:12:24:e1:84:71:e8:9d:a3:
         7c:4c:59:e0:17:02:6f:4e:63:ad:1a:03:17:c1:31:cb:d1:aa:
         8d:50:3e:4a:be:19:ed:14:42:a1:ed:ee:58:0a:0b:da:5b:9a:
         ce:9a:17:3d:c4:5f:66:e5:47:7f:14:7c:73:3b:9d:13:4a:da:
         83:3a:30:dc:05:f7:2f:ce:b9:8f:72:bc:dd:df:d0:75:bb:7c:
         c0:b6:f9:c4:c2:62:75:4b:3b:ec:df:84:a7:8f:01:4e:87:e5:
         da:c4:e5:87:0c:62:ab:db:30:93:4e:11:46:75:ed:9e:ff:ec:
         a0:7d:48:45:e5:96:77:a8:e7:d8:85:e5:c1:b3:03:68:da:09:
         89:7e:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:23:49 2026 by rpki-client