Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa
File:                     3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (raw, json)
Hash identifier:          UaISP/uY7XkkGaHXlOEwAwG75CPuMEMHw61HTW14NUQ=
Subject key identifier:   F9:7B:EA:8C:E4:47:61:01:8D:41:92:AA:89:33:6D:F3:5B:B7:BA:B2
Certificate issuer:       /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5
Certificate serial:       6E0FF3549B3CFDE44CC002E219A70D09A0A8E010
Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa
Signing time:             Sun 03 May 2026 02:25:58 +0000
ROA not before:           Sun 03 May 2026 02:20:58 +0000
ROA not after:            Sun 02 May 2027 02:25:58 +0000
asID:                     262929
IP address blocks:        122.128.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl
                          rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 03:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0f:f3:54:9b:3c:fd:e4:4c:c0:02:e2:19:a7:0d:09:a0:a8:e0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5
        Validity
            Not Before: May  3 02:20:58 2026 GMT
            Not After : May  2 02:25:58 2027 GMT
        Subject: CN=F97BEA8CE44761018D4192AA89336DF35BB7BAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:16:6c:22:a9:bd:7c:ea:42:1c:fd:97:a4:
                    24:05:8b:60:c5:db:f2:4d:29:2c:47:b0:95:ad:24:
                    df:b4:be:ba:40:ad:59:4a:7e:7b:b6:9d:4d:d5:43:
                    76:25:a7:92:98:c7:3d:e1:59:15:05:67:85:08:1d:
                    5d:0e:51:32:f4:3a:87:aa:cb:d2:d8:e6:7a:7c:e6:
                    88:68:3a:5b:59:aa:5c:c3:08:c1:46:23:ee:69:9a:
                    28:be:4c:f3:10:5d:c3:f3:5e:50:13:1d:44:d2:4d:
                    11:76:9a:87:1b:f4:e4:c6:b7:34:58:80:9a:eb:d0:
                    fd:d3:e6:91:c9:ef:11:dd:46:62:1b:cb:5f:3b:44:
                    f6:c9:43:43:5f:d0:e5:10:9a:a3:ff:67:08:82:90:
                    ed:98:73:78:5c:a5:a0:a7:42:ec:64:80:9e:a8:f1:
                    47:b4:10:fd:e0:d7:4e:df:84:9a:9c:43:37:20:0e:
                    f9:2b:c5:fa:7e:2a:fc:70:10:68:29:42:03:70:47:
                    42:c0:07:ad:c2:be:a7:c6:11:dd:20:9f:96:66:92:
                    eb:0a:76:cb:5b:2d:05:72:f8:64:76:8f:69:3a:84:
                    44:1c:fe:60:e0:45:e5:23:72:e9:4c:a5:47:91:63:
                    1b:95:5d:fc:c4:61:b6:06:05:84:0b:15:ef:bd:bd:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7B:EA:8C:E4:47:61:01:8D:41:92:AA:89:33:6D:F3:5B:B7:BA:B2
            X509v3 Authority Key Identifier:
                keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:cd:29:ca:76:86:77:9b:45:7e:1b:0f:2d:3c:50:02:0f:53:
         e1:82:33:07:05:a7:d2:2e:81:d6:50:ca:a7:3b:b2:0c:da:94:
         bf:a7:e6:16:48:e2:ab:a4:eb:a7:bd:86:87:79:ca:5a:63:c9:
         ed:04:ac:6a:70:9d:68:8d:f8:f9:fa:03:0a:73:ef:50:e1:19:
         11:ca:cc:9a:a3:51:9c:39:dd:78:9f:a0:ae:47:da:e8:1a:ae:
         a0:ab:3f:3c:37:fe:bc:1c:c0:4a:4e:15:96:83:7c:f8:a5:4b:
         28:62:8d:df:7b:d2:b7:da:62:51:6b:b3:5e:6d:19:33:a1:f3:
         34:71:28:0e:b6:c0:95:10:47:9f:bf:4d:7f:6c:85:fb:47:e0:
         3b:61:54:5e:02:5f:4f:51:3d:5b:2f:69:83:30:84:00:92:ab:
         b6:7d:ab:80:ee:af:41:08:30:00:09:c1:84:43:54:25:fc:24:
         cc:ed:d2:76:ba:f6:64:9a:84:c3:c9:b7:c9:53:90:26:cd:60:
         22:4c:6b:53:8c:6a:7b:d4:2a:db:0b:c4:0d:9b:03:8a:a3:71:
         e7:1b:05:06:0d:2b:b3:75:28:1f:ce:59:73:fc:34:b3:02:a3:
         c5:ac:a3:7b:06:5a:34:0b:b7:13:c1:f1:86:a1:d2:8e:53:c7:
         2a:a4:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 20:01:50 2026 by rpki-client