Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/3230322e3138332e302e302f31392d3139203d3e203338313630.roa
File:                     3230322e3138332e302e302f31392d3139203d3e203338313630.roa (raw, json)
Hash identifier:          /EYgr4bEX5yF2cD2wxIp6ztYlU72xJsVBSPBoR3u9Fw=
Subject key identifier:   11:FF:C9:E0:79:EF:61:FB:5D:30:03:F6:5A:50:37:D2:71:5C:FF:84
Certificate issuer:       /CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5
Certificate serial:       286FC353D3D49E59D03D21EE9E93CA825D60F46D
Authority key identifier: FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/3230322e3138332e302e302f31392d3139203d3e203338313630.roa
Signing time:             Sun 03 May 2026 02:14:53 +0000
ROA not before:           Sun 03 May 2026 02:09:53 +0000
ROA not after:            Sun 02 May 2027 02:14:53 +0000
asID:                     38160
IP address blocks:        202.183.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl
                          rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6f:c3:53:d3:d4:9e:59:d0:3d:21:ee:9e:93:ca:82:5d:60:f4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5
        Validity
            Not Before: May  3 02:09:53 2026 GMT
            Not After : May  2 02:14:53 2027 GMT
        Subject: CN=11FFC9E079EF61FB5D3003F65A5037D2715CFF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:94:6d:93:98:4a:53:06:48:56:c0:ea:f3:
                    f1:02:34:93:ec:56:71:1b:22:37:f4:b0:a2:6f:79:
                    6e:ce:69:c1:58:46:02:e2:b4:80:03:88:fc:2b:47:
                    73:03:9d:6e:b2:c4:02:aa:54:5c:7a:d1:ec:27:08:
                    44:cf:69:e9:23:8c:64:8c:5a:22:9f:0d:6f:b0:9b:
                    7f:0c:b6:8a:fc:dd:91:7b:c6:9a:a1:1d:47:ca:71:
                    82:7b:c5:1d:50:c2:9b:bc:24:d8:64:ec:03:03:67:
                    19:6b:00:cb:03:0d:21:51:41:8d:e2:c4:89:c0:94:
                    90:85:96:da:ff:e0:61:78:ca:e2:39:03:0f:f7:9d:
                    f1:cd:47:17:61:c7:13:4f:cf:f8:2e:cf:f4:4a:f5:
                    09:0b:b9:37:ec:9f:ed:ce:45:30:e1:e6:5c:ad:84:
                    58:e1:7f:0e:f4:36:99:3e:d3:58:3b:88:dc:89:4d:
                    0e:4c:77:3f:86:8f:ed:3e:6a:24:f4:83:93:bf:0a:
                    a1:3a:e3:74:93:58:4b:75:cd:a1:f4:8f:8a:a3:80:
                    10:db:81:a6:22:9d:8b:1f:bb:d8:f7:ea:29:3f:9d:
                    1c:57:66:9a:02:57:01:e6:2c:3e:a0:11:7d:a5:d9:
                    06:54:3f:fc:98:c0:69:90:13:62:0f:17:ca:fc:63:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FF:C9:E0:79:EF:61:FB:5D:30:03:F6:5A:50:37:D2:71:5C:FF:84
            X509v3 Authority Key Identifier:
                keyid:FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/3230322e3138332e302e302f31392d3139203d3e203338313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:75:65:ee:99:17:4f:72:69:f8:3f:82:c4:0a:91:f2:b5:06:
         ec:06:ce:3b:9d:c2:11:9a:fa:27:d6:f9:8a:fe:4b:2c:1f:06:
         c8:6a:fd:59:ea:f0:46:37:64:85:53:d2:92:5c:a8:90:14:e4:
         fa:f9:2b:47:a8:77:61:dd:df:58:4e:a7:33:57:18:a8:d2:36:
         a2:91:39:57:64:ce:be:18:fa:dd:67:44:2a:3d:ee:dc:28:a0:
         92:e2:a2:2f:07:e5:61:ad:d9:60:4d:ec:a1:c9:d7:1a:bc:a6:
         2a:44:ee:8f:61:1a:82:2f:20:5e:99:66:57:47:9c:a3:76:c7:
         49:80:72:11:04:26:cd:69:89:c4:b9:88:cc:8d:2d:95:c5:ef:
         b8:32:a5:3f:47:88:ce:ca:85:9a:8e:12:12:bd:d3:1d:72:8a:
         56:be:d3:4f:76:a2:1d:ed:77:49:3b:c9:95:fd:61:7a:5c:5b:
         d7:aa:4e:46:64:c9:55:43:c4:23:61:f0:54:14:b6:75:7c:78:
         19:59:c0:5b:23:e5:9a:24:75:9e:80:27:2f:23:8e:ec:3c:75:
         64:b8:6c:e7:6c:15:7a:d4:d8:68:40:5a:a9:b5:50:aa:e1:e4:
         e6:52:96:c6:b0:ad:8b:37:8f:49:4f:7a:9a:be:c6:b6:39:30:
         e4:dd:e6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:05 2026 by rpki-client