Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa
File:                     3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier:          C5EXjolwl07zRhpLr0tmhZ7KpZpGgWZO494eyJEQSqk=
Subject key identifier:   B3:79:7C:CD:FB:F3:43:1A:AB:6A:1B:65:6D:71:3A:4F:B2:86:DC:C6
Certificate issuer:       /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Certificate serial:       46493D7C347E5E028A29E5D7D7BAB9FF3F605335
Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa
Signing time:             Sun 03 May 2026 02:13:10 +0000
ROA not before:           Sun 03 May 2026 02:08:10 +0000
ROA not after:            Sun 02 May 2027 02:13:10 +0000
asID:                     140469
IP address blocks:        202.57.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
                          rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:49:3d:7c:34:7e:5e:02:8a:29:e5:d7:d7:ba:b9:ff:3f:60:53:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
        Validity
            Not Before: May  3 02:08:10 2026 GMT
            Not After : May  2 02:13:10 2027 GMT
        Subject: CN=B3797CCDFBF3431AAB6A1B656D713A4FB286DCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:4c:e5:3b:b6:2e:7a:ba:67:fe:7b:c1:70:
                    f0:a2:3a:aa:9c:90:22:4d:06:24:ca:67:4a:22:e8:
                    3f:40:bf:e4:4e:f0:6e:db:81:90:b8:06:cc:13:3a:
                    b6:71:a1:2e:5d:12:ea:38:4f:9f:58:fc:26:39:73:
                    07:52:d5:ee:b6:9e:90:6e:18:25:1b:0b:3a:45:99:
                    5d:9e:2a:92:e6:89:15:06:14:a7:44:17:b1:c2:a8:
                    85:96:17:ca:36:c0:d6:4b:c3:82:c5:fd:fb:e9:b2:
                    b3:54:c2:0c:bb:7c:32:64:39:ff:48:ab:c3:33:33:
                    48:15:da:3b:5b:dd:5b:09:3b:7a:0e:c5:c1:0e:13:
                    08:ea:4a:0b:90:fc:15:c7:79:e1:24:a7:1b:41:33:
                    9d:78:f9:d1:f0:65:60:e3:bd:20:d8:b8:4a:11:27:
                    a9:c6:00:59:08:9c:88:f1:1c:11:7d:e4:74:a0:8f:
                    6f:14:73:08:25:b1:dd:ab:89:3c:d5:fe:fb:7f:7d:
                    fa:30:7f:ae:58:74:20:d3:c4:a6:79:ca:a6:8a:ab:
                    d7:26:b2:22:2c:09:c7:b9:05:1d:26:a2:3b:18:d2:
                    99:11:66:a8:71:04:f5:a5:5f:4b:7b:28:e3:0b:07:
                    e4:80:a5:51:5e:8c:65:5b:9f:70:3e:b9:37:58:ac:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:79:7C:CD:FB:F3:43:1A:AB:6A:1B:65:6D:71:3A:4F:B2:86:DC:C6
            X509v3 Authority Key Identifier:
                keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:c9:e0:33:56:f8:ee:28:87:df:82:ee:9a:aa:37:08:73:
         34:f8:75:eb:01:74:fd:c4:ef:a3:48:17:03:0d:82:87:f7:5a:
         bb:c8:de:b5:2e:cf:78:d6:72:89:36:9e:5e:a7:c8:24:6d:ad:
         1e:f6:31:1f:32:4f:07:85:42:f3:20:23:55:4c:ff:28:69:fb:
         ee:ad:d4:ea:87:00:de:94:c3:ad:d7:fe:36:9a:e8:33:f5:ca:
         4f:5a:fd:19:30:ec:09:7b:d2:92:2c:43:ea:17:e2:8d:06:14:
         46:56:e1:2d:85:71:68:c2:69:d9:2c:45:a3:e2:5f:91:f7:d4:
         9d:83:b8:82:88:19:d5:39:06:f1:6b:40:2c:c7:3c:37:7a:31:
         06:7a:14:6b:91:a5:c0:a7:17:82:74:c7:75:51:52:41:ee:93:
         14:36:7c:83:70:a3:45:61:4e:c4:17:b5:76:1f:f3:00:bd:70:
         86:38:bf:5f:cb:2f:58:05:cd:01:c5:50:57:3f:f6:dc:8e:2e:
         09:4d:f2:99:1f:c8:66:0a:0c:39:bc:72:32:cd:ed:76:e2:e5:
         63:5c:b7:1a:73:67:a1:ee:0e:dc:09:30:d2:29:66:24:96:3e:
         02:a3:f2:c0:e0:3f:f1:ed:14:08:19:65:bc:83:5b:ff:56:87:
         2d:7a:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:39 2026 by rpki-client