Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/3230322e3138332e302e302f31392d3139203d3e203338313630.roa
File:                     3230322e3138332e302e302f31392d3139203d3e203338313630.roa (raw, json)
Hash identifier:          ZbhTpnhvlC+ot1vXIGnAO0O9YCHrvhbkpZrUJwD0KO4=
Subject key identifier:   68:3F:38:DF:CC:08:C3:B6:FE:F3:96:20:F5:27:7B:FA:3E:15:15:B9
Certificate issuer:       /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
Certificate serial:       35EFA32897588AAC3F8BEC4F6F018D9BD654A269
Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/3230322e3138332e302e302f31392d3139203d3e203338313630.roa
Signing time:             Thu 19 Mar 2026 05:02:44 +0000
ROA not before:           Thu 19 Mar 2026 04:57:44 +0000
ROA not after:            Thu 18 Mar 2027 05:02:44 +0000
asID:                     38160
IP address blocks:        202.183.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl
                          rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 10:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ef:a3:28:97:58:8a:ac:3f:8b:ec:4f:6f:01:8d:9b:d6:54:a2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
        Validity
            Not Before: Mar 19 04:57:44 2026 GMT
            Not After : Mar 18 05:02:44 2027 GMT
        Subject: CN=683F38DFCC08C3B6FEF39620F5277BFA3E1515B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b2:4e:4d:4d:21:38:c0:e3:fe:1e:b7:48:0d:
                    5d:89:05:a0:73:d7:7b:f1:f3:b9:1b:16:24:ee:c1:
                    00:fa:1c:98:8d:1b:b0:ff:e4:c9:60:81:df:3e:5c:
                    ad:ff:9a:d4:62:13:cc:95:26:a3:c1:52:2a:bf:e4:
                    30:e3:84:f8:59:a6:cc:6b:aa:00:ab:5f:d9:f4:09:
                    e2:73:89:33:21:f7:6b:56:0e:9d:ec:ef:44:12:a0:
                    71:01:84:82:9b:e7:c2:bc:a9:43:57:db:fa:52:ad:
                    14:8a:cc:be:7f:93:68:3b:62:a5:9f:33:8d:76:84:
                    74:d1:78:19:36:bb:76:2e:5c:5f:d4:e8:7e:57:3b:
                    71:01:7e:6f:5f:93:ca:58:34:76:ba:05:40:aa:00:
                    84:e7:c2:3f:a7:bb:2c:36:13:bd:38:39:ff:e8:81:
                    ea:04:f8:a9:fc:c9:75:55:8b:51:c1:47:56:05:1c:
                    28:d4:cd:b6:79:cf:8a:b9:22:52:34:e1:2f:0b:f5:
                    cb:4f:17:c9:8a:57:51:7f:0c:03:51:59:df:cf:1a:
                    16:39:ae:ab:35:69:ca:82:13:a1:9f:dd:68:fd:0a:
                    5c:c6:1f:61:aa:50:e1:e3:bb:b0:d3:8d:19:65:07:
                    b4:24:c4:6d:b3:f6:98:b1:3d:59:ca:4d:34:8c:6a:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:38:DF:CC:08:C3:B6:FE:F3:96:20:F5:27:7B:FA:3E:15:15:B9
            X509v3 Authority Key Identifier:
                keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/3230322e3138332e302e302f31392d3139203d3e203338313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:8d:77:6f:91:d4:f2:81:3a:3d:b8:46:bd:e6:c4:46:c9:a6:
         81:73:f2:a8:91:49:30:22:d6:fb:bd:57:cb:50:dd:be:93:b0:
         b1:8b:f4:72:6b:4a:b8:23:39:43:22:e9:35:49:45:53:c9:be:
         7b:68:af:ad:c3:f1:4d:29:bb:fd:88:68:89:8c:31:48:6e:a2:
         51:09:3d:5a:87:a1:3f:7d:ba:1d:b9:2d:ae:e8:d7:33:43:0c:
         17:75:1f:3c:df:ce:2e:bb:66:2e:91:a1:59:50:89:bb:f8:af:
         28:12:8a:15:c2:11:01:21:01:62:51:c0:e2:2b:1f:5f:97:f6:
         b7:cc:43:b3:3c:db:ce:cb:b5:a7:e3:63:33:a9:42:9c:72:fc:
         c0:9c:9b:c7:97:f4:bc:ac:f5:4a:36:84:7f:a9:24:32:4c:57:
         f3:fa:30:57:ae:40:02:8b:b9:f0:7b:27:62:2a:0b:6c:38:d4:
         46:c7:e8:c7:85:bf:62:e7:68:dd:11:d3:cf:c7:66:e7:aa:b4:
         a9:a7:8f:eb:b0:30:eb:b6:b1:20:78:5f:45:e1:30:d8:00:cd:
         d3:2d:80:fb:88:d5:69:5e:da:25:4a:3d:ac:67:87:1d:d6:46:
         df:09:62:83:8a:21:62:39:96:ac:a0:1f:2e:7b:65:e7:5c:ba:
         d0:66:21:39
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUNe+jKJdYiqw/i+xPbwGNm9ZUomkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5
RUZFOTZBMzAeFw0yNjAzMTkwNDU3NDRaFw0yNzAzMTgwNTAyNDRaMDMxMTAvBgNV
BAMTKDY4M0YzOERGQ0MwOEMzQjZGRUYzOTYyMEY1Mjc3QkZBM0UxNTE1QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsk5NTSE4wOP+HrdIDV2JBaBz
13vx87kbFiTuwQD6HJiNG7D/5Mlggd8+XK3/mtRiE8yVJqPBUiq/5DDjhPhZpsxr
qgCrX9n0CeJziTMh92tWDp3s70QSoHEBhIKb58K8qUNX2/pSrRSKzL5/k2g7YqWf
M412hHTReBk2u3YuXF/U6H5XO3EBfm9fk8pYNHa6BUCqAITnwj+nuyw2E704Of/o
geoE+Kn8yXVVi1HBR1YFHCjUzbZ5z4q5IlI04S8L9ctPF8mKV1F/DANRWd/PGhY5
rqs1acqCE6Gf3Wj9ClzGH2GqUOHju7DTjRllB7QkxG2z9pixPVnKTTSMao9lAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUaD8438wIw7b+85Yg9Sd7+j4VFbkwHwYDVR0j
BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD
N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF
OTZBMy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1MGQxYWExLTRjN2YtNDQ4Yi1i
MmJiLTAyYzU3MTUxZjIxMC8wLzMyMzAzMjJlMzEzODMzMmUzMDJlMzAyZjMxMzky
ZDMxMzkyMDNkM2UyMDMzMzgzMTM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXKtwAwDQYJKoZIhvcN
AQELBQADggEBABuNd2+R1PKBOj24Rr3mxEbJpoFz8qiRSTAi1vu9V8tQ3b6TsLGL
9HJrSrgjOUMi6TVJRVPJvntor63D8U0pu/2IaImMMUhuolEJPVqHoT99uh25La7o
1zNDDBd1Hzzfzi67Zi6RoVlQibv4rygSihXCEQEhAWJRwOIrH1+X9rfMQ7M8287L
tafjYzOpQpxy/MCcm8eX9Lys9Uo2hH+pJDJMV/P6MFeuQAKLufB7J2IqC2w41EbH
6MeFv2LnaN0R08/HZueqtKmnj+uwMOu2sSB4X0XhMNgAzdMtgPuI1Wle2iVKPaxn
hx3WRt8JYoOKIWI5lqygHy57ZedcutBmITk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:53 2026 by rpki-client