Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa
File:                     3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (raw, json)
Hash identifier:          MV2xIGxIBgdx5AyOkaAkD+fjhmUbspGn/aDtyM22cf4=
Subject key identifier:   B2:A9:64:0B:02:27:9B:6B:BC:0B:2D:74:69:13:87:1E:DF:D1:B2:17
Certificate issuer:       /CN=C73043EA966F0F810C22E736459E7122F2FD0AE0
Certificate serial:       3C16E15AB8003AF6053DA472515B110BC43E0F43
Authority key identifier: C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa
Signing time:             Sun 03 May 2026 02:10:31 +0000
ROA not before:           Sun 03 May 2026 02:05:31 +0000
ROA not after:            Sun 02 May 2027 02:10:31 +0000
asID:                     45697
IP address blocks:        203.114.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl
                          rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:16:e1:5a:b8:00:3a:f6:05:3d:a4:72:51:5b:11:0b:c4:3e:0f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73043EA966F0F810C22E736459E7122F2FD0AE0
        Validity
            Not Before: May  3 02:05:31 2026 GMT
            Not After : May  2 02:10:31 2027 GMT
        Subject: CN=B2A9640B02279B6BBC0B2D746913871EDFD1B217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:fb:48:f0:12:eb:ed:ba:e7:01:96:f2:e7:
                    03:80:5d:61:02:2c:bd:e9:6c:8a:3b:0a:3d:7b:ca:
                    d9:74:01:2d:83:8b:58:80:ab:88:e8:31:7b:15:dd:
                    70:38:dc:94:02:18:79:90:f8:c8:b1:50:ae:c9:04:
                    d6:ae:ca:5b:ea:0a:cf:f3:91:9f:bd:19:d3:70:23:
                    85:2a:65:63:3f:c6:ae:37:3d:be:09:af:d4:e2:e4:
                    b8:a2:2c:04:a1:89:9d:a4:71:2c:67:8e:d4:f5:ab:
                    64:57:e7:29:bb:b4:b6:3c:26:dd:96:03:fb:26:18:
                    46:35:c6:69:2a:65:5c:ce:7c:7a:7a:14:32:36:6b:
                    ce:fc:b7:f8:dd:7a:ba:86:59:77:5a:39:b5:1c:80:
                    16:ba:71:e9:7d:09:a7:96:b6:b7:ff:5b:fb:05:66:
                    e3:85:07:dd:23:d5:2d:78:a5:ec:02:00:57:54:70:
                    ca:f3:a6:93:c6:94:a7:f0:82:a5:a7:33:b8:f9:0d:
                    79:ea:43:ec:21:c0:28:1c:04:0e:b6:e8:70:00:6d:
                    09:d1:54:0a:a8:fa:e5:05:07:4e:0c:85:59:20:6e:
                    2e:b2:24:26:c7:68:73:51:65:25:2a:c2:67:0d:bf:
                    eb:d8:eb:0f:22:70:52:a3:54:59:83:ba:e4:05:0b:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A9:64:0B:02:27:9B:6B:BC:0B:2D:74:69:13:87:1E:DF:D1:B2:17
            X509v3 Authority Key Identifier:
                keyid:C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:f4:f8:6b:8c:fc:0e:e2:4b:79:ff:eb:5e:97:45:55:32:d9:
         e7:1f:f5:e8:06:24:8a:84:4b:b5:fc:da:5d:d7:e0:70:f0:4f:
         59:ad:d5:57:c2:0d:8a:1b:30:06:5e:51:a4:11:ac:02:36:6c:
         a1:e3:c0:c5:38:d8:7f:f7:9e:c5:59:98:05:c6:e8:1e:15:68:
         1f:6d:b9:03:81:a3:18:8d:18:8b:a4:50:ec:39:e8:7e:b8:25:
         a4:80:b3:66:3a:8c:b0:b0:6d:90:af:17:9a:43:3f:66:e0:db:
         94:dd:fc:8d:fb:c4:02:fd:9d:7a:18:ad:57:18:58:cb:9f:1a:
         ed:49:8f:83:71:51:b7:44:1b:eb:08:b2:ca:67:b8:86:24:9a:
         7d:04:bd:ac:24:3a:b3:d3:60:cc:f9:6f:18:29:c5:e0:01:ed:
         0e:93:57:43:fd:44:8f:83:60:82:dc:99:e0:1e:1d:92:b4:a8:
         db:73:ef:49:b0:e8:e2:d1:52:66:82:fd:63:2f:6e:35:6f:f7:
         32:64:46:39:47:c0:29:32:ac:c2:dc:81:8e:e7:87:17:f2:da:
         82:9a:e5:2b:78:d9:2d:30:39:c0:50:71:65:01:4d:b2:c9:0a:
         76:4e:27:71:e1:b6:1f:56:33:bf:38:dc:77:1c:bc:46:59:ee:
         b5:c9:52:e7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPBbhWrgAOvYFPaRyUVsRC8Q+D0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzczMDQzRUE5NjZGMEY4MTBDMjJFNzM2NDU5RTcxMjJG
MkZEMEFFMDAeFw0yNjA1MDMwMjA1MzFaFw0yNzA1MDIwMjEwMzFaMDMxMTAvBgNV
BAMTKEIyQTk2NDBCMDIyNzlCNkJCQzBCMkQ3NDY5MTM4NzFFREZEMUIyMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39vtI8BLr7brnAZby5wOAXWEC
LL3pbIo7Cj17ytl0AS2Di1iAq4joMXsV3XA43JQCGHmQ+MixUK7JBNauylvqCs/z
kZ+9GdNwI4UqZWM/xq43Pb4Jr9Ti5LiiLAShiZ2kcSxnjtT1q2RX5ym7tLY8Jt2W
A/smGEY1xmkqZVzOfHp6FDI2a878t/jderqGWXdaObUcgBa6cel9CaeWtrf/W/sF
ZuOFB90j1S14pewCAFdUcMrzppPGlKfwgqWnM7j5DXnqQ+whwCgcBA626HAAbQnR
VAqo+uUFB04MhVkgbi6yJCbHaHNRZSUqwmcNv+vY6w8icFKjVFmDuuQFC3NPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUsqlkCwInm2u8Cy10aROHHt/RshcwHwYDVR0j
BBgwFoAUxzBD6pZvD4EMIuc2RZ5xIvL9CuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDM1MDA3NjctOTIyNy00M2VjLWE1MjUtMmU5N2Q1YTAzZjA5LzAvQzczMDQzRUE5
NjZGMEY4MTBDMjJFNzM2NDU5RTcxMjJGMkZEMEFFMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNzMwNDNFQTk2NkYwRjgxMEMyMkU3MzY0NTlFNzEyMkYyRkQw
QUUwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzAzNTAwNzY3LTkyMjctNDNlYy1h
NTI1LTJlOTdkNWEwM2YwOS8wLzMyMzAzMzJlMzEzMTM0MmUzMjMyMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNDM1MzYzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy3LgMA0GCSqG
SIb3DQEBCwUAA4IBAQAI9PhrjPwO4kt5/+tel0VVMtnnH/XoBiSKhEu1/Npd1+Bw
8E9ZrdVXwg2KGzAGXlGkEawCNmyh48DFONh/957FWZgFxugeFWgfbbkDgaMYjRiL
pFDsOeh+uCWkgLNmOoywsG2QrxeaQz9m4NuU3fyN+8QC/Z16GK1XGFjLnxrtSY+D
cVG3RBvrCLLKZ7iGJJp9BL2sJDqz02DM+W8YKcXgAe0Ok1dD/USPg2CC3JngHh2S
tKjbc+9JsOji0VJmgv1jL241b/cyZEY5R8ApMqzC3IGO54cX8tqCmuUreNktMDnA
UHFlAU2yyQp2Tidx4bYfVjO/ONx3HLxGWe61yVLn
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:22 2026 by rpki-client