Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa
File:                     3132302e38392e38392e302f32342d3234203d3e203435323839.roa (raw, json)
Hash identifier:          OKpuxVQGY6BsX3athPfFW58QS54IISfKzcjxg/HXJIw=
Subject key identifier:   B3:45:38:C2:49:55:7F:89:84:5C:54:CE:96:98:79:D2:66:C9:CD:5E
Certificate issuer:       /CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
Certificate serial:       0F3B8F07F271A8EF791443A637EB1857E040597E
Authority key identifier: 6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa
Signing time:             Sun 03 May 2026 03:07:18 +0000
ROA not before:           Sun 03 May 2026 03:02:18 +0000
ROA not after:            Sun 02 May 2027 03:07:18 +0000
asID:                     45289
IP address blocks:        120.89.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl
                          rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3b:8f:07:f2:71:a8:ef:79:14:43:a6:37:eb:18:57:e0:40:59:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
        Validity
            Not Before: May  3 03:02:18 2026 GMT
            Not After : May  2 03:07:18 2027 GMT
        Subject: CN=B34538C249557F89845C54CE969879D266C9CD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:e4:d2:56:ba:d4:73:1b:1f:bc:51:2b:6e:
                    da:41:73:c4:c4:1f:18:0a:d9:81:32:2b:02:7b:11:
                    bd:a5:4d:ec:80:d2:61:59:77:2f:2c:4b:72:20:f3:
                    3e:df:99:0f:01:32:f2:b3:57:db:f1:42:42:73:97:
                    bb:a7:03:34:04:8b:2a:0b:26:22:5a:46:89:75:78:
                    c3:68:49:21:9d:e4:28:d7:db:04:32:29:34:74:2f:
                    18:68:9e:5f:30:3a:8a:fd:64:d1:f2:2f:6a:30:b0:
                    00:30:e1:77:81:3a:2c:f1:d7:f7:55:77:47:aa:98:
                    fa:8f:66:14:6b:e7:15:99:aa:28:8a:4f:0b:50:58:
                    06:f6:20:c8:14:17:11:83:6a:1a:ca:4f:a5:80:58:
                    65:38:ed:37:cc:53:e9:c1:71:40:d1:f1:d9:a0:9c:
                    e2:06:83:83:56:16:2c:5f:cc:e2:24:4c:0e:a8:9a:
                    13:e4:bc:c4:31:da:9f:3f:ba:da:15:1a:39:8b:fe:
                    bb:36:6e:a5:fe:83:38:07:6a:63:e8:5d:74:4e:56:
                    0f:22:23:86:5d:e1:94:20:90:bf:36:59:a3:08:76:
                    ef:25:33:d9:09:3d:80:3f:e6:52:6c:ca:4c:68:79:
                    5b:20:a0:be:e3:2d:40:b1:3e:4f:22:74:45:ea:02:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:45:38:C2:49:55:7F:89:84:5C:54:CE:96:98:79:D2:66:C9:CD:5E
            X509v3 Authority Key Identifier:
                keyid:6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.89.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:4a:f8:9d:73:3f:d3:1f:4d:c3:00:f8:0a:e7:45:9f:8e:fa:
         fd:89:99:37:aa:6e:0a:62:29:2e:55:76:c3:25:88:70:3e:45:
         4e:93:7c:72:02:5d:7b:e1:aa:5d:c4:8a:f9:91:ab:d6:c5:9f:
         82:69:ee:5d:ff:50:62:d5:57:e1:5c:ca:61:81:a1:57:4d:a1:
         0f:9b:a9:f3:c4:b2:86:59:2c:02:c5:c4:9b:91:1d:a3:e5:41:
         12:fb:84:73:13:5c:ad:96:2a:d0:fd:e6:3f:7c:0e:a8:83:b1:
         b2:db:60:4c:f6:f9:42:aa:a1:2c:6c:31:57:54:90:09:6d:31:
         53:c6:39:4c:91:3f:19:35:ba:0c:26:a4:cf:d4:88:42:8c:14:
         70:00:9e:e3:1d:6b:39:16:2d:68:46:c3:64:f4:bb:14:79:20:
         82:cb:4b:f4:20:86:83:d2:a1:57:b5:b4:d2:43:cc:0b:66:4f:
         12:fa:b3:b3:2c:7a:96:c1:53:82:f3:93:eb:84:e8:48:3e:49:
         40:3c:ec:23:dc:87:94:08:ca:88:49:73:e0:9d:ad:fd:b6:7d:
         3f:d8:8f:82:0d:61:f8:09:76:36:90:57:a4:d3:f3:ce:9c:69:
         9f:bd:98:0c:1a:e8:fb:59:27:72:81:08:87:ff:8d:57:25:32:
         59:0a:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:35 2026 by rpki-client