Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa
File:                     3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (raw, json)
Hash identifier:          yeyDp2n0wd57cuHVR90zOnbkcRU0QZljusHdKuOsPt4=
Subject key identifier:   2F:00:C4:70:64:A8:71:A4:25:9D:19:27:78:5E:46:4A:F4:D0:64:A8
Certificate issuer:       /CN=1661480FF274E46E5E74274531EDCB741CA1C734
Certificate serial:       4087A94027CE5D4AA6D0FECC809834922C2494DA
Authority key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa
Signing time:             Sun 03 May 2026 02:16:24 +0000
ROA not before:           Sun 03 May 2026 02:11:24 +0000
ROA not after:            Sun 02 May 2027 02:16:24 +0000
asID:                     138128
IP address blocks:        223.130.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
                          rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 16:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:87:a9:40:27:ce:5d:4a:a6:d0:fe:cc:80:98:34:92:2c:24:94:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1661480FF274E46E5E74274531EDCB741CA1C734
        Validity
            Not Before: May  3 02:11:24 2026 GMT
            Not After : May  2 02:16:24 2027 GMT
        Subject: CN=2F00C47064A871A4259D1927785E464AF4D064A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:41:c5:ab:98:d8:ed:27:87:1e:0b:e1:7b:
                    10:5c:f5:0b:b2:aa:a2:e1:9b:f7:a3:cf:3f:ed:16:
                    7d:9a:3f:52:b4:66:db:21:f1:fc:42:33:08:b5:15:
                    e5:c2:24:e8:50:52:5d:57:92:93:49:5a:97:3d:d4:
                    9e:d3:e6:cd:a3:e5:e1:07:9e:a1:03:c2:62:bc:9e:
                    8e:a8:93:a0:d4:a3:b7:18:44:60:8a:21:72:94:35:
                    68:a3:a9:14:2a:94:ee:d2:73:4a:78:91:af:15:5d:
                    7b:7c:63:fc:da:6a:54:99:c2:31:b7:48:53:2f:c1:
                    c8:88:b1:9b:37:06:d5:a2:0a:11:69:a0:5d:e8:b3:
                    0b:6d:7c:be:0d:26:b5:de:34:18:ef:fb:11:b7:c5:
                    fb:03:6b:30:26:39:8f:77:7c:df:b5:fa:d2:3e:a4:
                    74:91:a9:02:05:bf:3b:e9:a9:a0:de:6e:f6:23:9d:
                    95:b6:6b:16:0e:8c:38:7b:f3:e7:ef:b3:e1:4c:cb:
                    1a:23:c2:db:13:ac:12:b0:63:f3:6a:66:06:e7:a8:
                    1e:74:54:14:21:d0:3d:89:65:50:b5:12:b3:eb:eb:
                    0e:45:24:36:40:0e:51:1c:43:e0:65:5b:22:fd:73:
                    f2:5a:3e:e9:10:bb:50:1f:4c:84:31:b8:df:18:9d:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:00:C4:70:64:A8:71:A4:25:9D:19:27:78:5E:46:4A:F4:D0:64:A8
            X509v3 Authority Key Identifier:
                keyid:16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.130.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:41:9e:aa:32:4d:dd:83:7e:a9:24:66:63:74:6f:95:8f:ae:
         c0:48:cd:09:a3:50:56:aa:4e:1a:99:6a:e3:28:3c:99:48:79:
         e1:c1:d8:af:d0:16:03:c9:8c:97:8f:f0:84:fb:fe:a9:37:9e:
         ac:e3:fd:eb:16:e5:e4:0e:c8:1e:11:74:4e:22:65:28:d4:26:
         c1:47:39:97:05:49:af:29:30:0f:b0:7a:29:44:35:ef:1d:ba:
         38:fc:41:e7:18:a3:7d:ac:16:2a:22:3b:a0:71:e5:19:25:2d:
         ff:34:55:4d:29:15:38:11:39:3a:20:94:b9:69:51:16:dc:8b:
         6a:df:c1:88:36:1c:4f:ba:9a:9d:a0:49:9d:a9:84:e2:06:a8:
         4f:c0:a1:52:c3:0d:f4:71:6b:62:74:3e:65:37:a4:ce:b0:9c:
         fe:a4:6c:1b:c5:f6:2e:72:36:bb:02:aa:dc:6b:0a:07:f4:2b:
         e3:3d:91:ee:a2:09:da:3c:6a:61:85:3f:44:15:40:8c:3a:9a:
         2b:be:04:98:7f:78:50:85:55:90:ae:e0:d9:6f:a7:f0:5b:e3:
         d7:48:be:92:1b:d8:d0:2c:9e:aa:b2:e5:1e:32:1b:44:b9:57:
         1a:53:4d:cd:26:b8:93:4a:dc:ed:52:9e:94:44:79:0f:76:d4:
         40:84:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:30:00 2026 by rpki-client