Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e39362e302f32322d3234203d3e2039393035.roa
File:                     3230322e37372e39362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          1YXygVxQY0t/2kn4srg3R9kyb/T4reer8BjhwSRthDI=
Subject key identifier:   C9:0E:B7:14:0F:69:8C:AE:C6:9C:1C:0F:3B:3B:8A:27:49:45:64:C1
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       3A3F8C027210943F03B37485BA51B598AB002801
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e39362e302f32322d3234203d3e2039393035.roa
Signing time:             Wed 18 Mar 2026 00:00:02 +0000
ROA not before:           Tue 17 Mar 2026 23:55:02 +0000
ROA not after:            Wed 17 Mar 2027 00:00:02 +0000
asID:                     9905
IP address blocks:        202.77.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 09:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3f:8c:02:72:10:94:3f:03:b3:74:85:ba:51:b5:98:ab:00:28:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: Mar 17 23:55:02 2026 GMT
            Not After : Mar 17 00:00:02 2027 GMT
        Subject: CN=C90EB7140F698CAEC69C1C0F3B3B8A27494564C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:2e:8b:92:cd:2e:e8:ca:af:49:7d:4b:6e:
                    fc:02:b0:24:fd:4b:94:3b:82:2a:28:c3:66:be:00:
                    79:03:e1:48:51:d0:bb:71:06:99:86:ff:33:f5:f0:
                    34:7b:8e:65:da:a4:f6:29:00:7c:f7:35:a5:51:f1:
                    2e:9a:b1:2d:87:fb:dd:2f:6c:39:32:4a:0f:06:8b:
                    08:86:88:79:d2:37:10:e4:5b:0e:be:65:c7:18:2a:
                    6e:58:d2:38:1d:c1:35:a6:78:64:97:51:e0:08:de:
                    aa:27:99:67:68:0a:4e:43:21:33:da:80:7e:f2:fb:
                    8f:98:69:a2:9f:c9:78:53:c5:ae:ee:a9:58:52:a2:
                    47:1e:81:2e:50:aa:0b:7f:93:21:10:84:99:19:7c:
                    b2:d0:51:49:a6:21:6a:59:13:91:5e:f8:94:fb:5c:
                    cb:cb:57:49:80:a8:e9:8a:3c:91:31:f6:05:8b:17:
                    67:b2:60:82:3d:d4:fc:13:bc:ec:3e:44:d1:21:d1:
                    c1:c1:99:5a:6a:60:ff:24:f4:d9:71:62:3a:11:ff:
                    fc:33:52:f4:c4:81:a9:12:07:11:90:b9:3d:f5:0d:
                    16:9b:9a:30:3e:af:1b:66:78:a4:1e:10:ef:dd:c2:
                    76:31:f6:3c:e3:d3:ea:a4:f1:a0:10:ed:26:01:30:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0E:B7:14:0F:69:8C:AE:C6:9C:1C:0F:3B:3B:8A:27:49:45:64:C1
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e39362e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:3e:5b:3b:ae:2b:94:0b:18:1b:2b:19:ec:65:71:2d:62:
         da:38:ae:eb:aa:ef:20:ac:99:a0:42:34:b4:06:19:25:f7:91:
         b9:dd:90:99:d8:2c:39:1c:cb:c6:74:df:30:3a:d4:db:9c:6d:
         79:3c:19:19:33:35:30:55:94:c2:8c:4c:37:03:9b:a3:f4:9a:
         a7:ba:a5:0e:97:0e:d3:f3:b3:08:20:ee:21:d1:ea:6d:2c:7f:
         96:d6:cf:8c:af:98:98:bd:93:77:4b:0e:be:30:f5:89:28:d3:
         4c:3f:90:8b:79:ba:f4:e0:a2:c9:5b:8d:30:23:50:10:72:ad:
         4a:c7:09:63:ba:a9:df:91:14:55:0d:d4:3f:23:41:9e:6e:7a:
         d6:88:a7:c3:33:21:ca:67:31:b6:97:3b:d4:0c:5d:6d:3c:62:
         01:27:d7:89:c5:85:8b:0d:6e:30:74:8b:4c:38:85:34:f1:43:
         45:b8:14:fd:3d:9d:4a:e6:64:8e:80:6c:af:2d:f6:eb:e5:2d:
         38:af:e4:6c:58:42:6b:0a:af:37:b0:8c:31:57:a6:df:92:54:
         d8:a0:c4:45:89:e4:0b:81:ac:58:37:8b:12:4a:62:96:80:58:
         c4:2e:54:1f:5b:37:7e:4e:2e:51:1f:54:bf:1f:e8:d6:b6:a6:
         57:26:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:39 2026 by rpki-client