Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230322e39332e3232342e302f32312d3234203d3e203338373538.roa
File:                     3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (raw, json)
Hash identifier:          uVgnnU99/HNYyepOYAKO/nZDDx5ugki74GZP91MH9r4=
Subject key identifier:   C5:2B:4A:C5:58:44:73:F0:37:4D:CA:D5:35:CC:12:A8:C7:6C:6A:FA
Certificate issuer:       /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial:       38134C879651FBED9F967AABB142A852AC03148D
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230322e39332e3232342e302f32312d3234203d3e203338373538.roa
Signing time:             Sun 03 May 2026 02:17:03 +0000
ROA not before:           Sun 03 May 2026 02:12:03 +0000
ROA not after:            Sun 02 May 2027 02:17:03 +0000
asID:                     38758
IP address blocks:        202.93.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:13:4c:87:96:51:fb:ed:9f:96:7a:ab:b1:42:a8:52:ac:03:14:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
        Validity
            Not Before: May  3 02:12:03 2026 GMT
            Not After : May  2 02:17:03 2027 GMT
        Subject: CN=C52B4AC5584473F0374DCAD535CC12A8C76C6AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:1c:53:c0:b1:03:56:be:b6:22:28:b4:61:
                    57:4a:44:c6:bc:4b:b6:9b:b5:dd:1c:a6:32:47:0a:
                    d5:13:35:a3:fe:fd:e1:75:ed:37:d2:c4:79:14:35:
                    4a:19:eb:22:b3:53:df:2a:6e:5b:d5:2e:ec:3c:93:
                    f6:42:87:50:3d:42:e3:de:e3:0d:30:ee:65:d0:40:
                    e8:8c:74:3f:9e:af:38:72:f1:70:70:cc:49:61:2c:
                    2a:7a:b3:cc:a0:c6:57:a2:49:b7:0c:a2:32:4f:02:
                    80:aa:27:87:50:91:48:92:c4:d5:fc:a7:ab:b3:d6:
                    aa:ef:b8:5d:c6:eb:57:03:48:54:26:4f:7c:46:28:
                    2b:a2:dd:a5:29:6c:5b:85:1f:e0:24:08:10:84:14:
                    c1:e9:be:29:2a:26:06:53:31:70:33:9a:94:01:1f:
                    eb:c1:0e:a9:58:9b:dc:73:1c:2f:ce:71:7a:67:e9:
                    eb:aa:cd:64:73:73:6a:91:b1:8a:8e:55:fc:12:f8:
                    0c:ee:4a:ff:59:66:b5:7b:2d:84:39:95:c1:16:a6:
                    50:5c:85:bb:f4:12:91:2d:99:05:ce:0f:22:a2:70:
                    fc:38:d6:83:2e:58:01:92:b4:3a:ca:a3:c0:7c:1a:
                    39:c3:a6:cf:71:a8:33:36:35:c8:ff:ca:52:3d:2f:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:4A:C5:58:44:73:F0:37:4D:CA:D5:35:CC:12:A8:C7:6C:6A:FA
            X509v3 Authority Key Identifier:
                keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230322e39332e3232342e302f32312d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:ea:a7:94:91:64:ca:09:83:84:ef:47:35:42:f5:75:e3:93:
         3c:b4:a2:ca:a5:dd:e4:54:98:f6:c6:ea:32:f1:15:c2:6d:12:
         18:84:1f:37:8f:e4:a9:58:e1:2e:87:0f:99:86:02:d6:7d:c8:
         01:ce:6a:f2:23:1a:76:89:18:d1:eb:84:a3:e1:e3:c4:91:8c:
         11:e2:8e:de:37:d6:a7:92:5c:2a:8f:b9:94:46:95:91:32:65:
         a5:22:70:e6:0e:af:2a:36:dd:f2:ad:92:fb:50:a2:2f:4e:51:
         24:e6:06:a6:8f:0d:2b:90:19:45:e0:bd:d5:c7:73:26:5f:96:
         e8:98:60:ab:03:ce:7f:2c:37:dd:14:24:b2:cf:3e:87:1f:f7:
         0d:dc:d6:44:f1:94:9b:d3:2d:83:c6:43:ab:05:d6:6f:11:93:
         37:99:dc:53:25:ad:d8:b0:d6:30:06:25:59:55:8e:59:c5:f1:
         8e:ab:90:58:24:d8:9b:f1:17:c7:3f:b2:b0:3c:f9:23:e7:3d:
         9c:07:42:5e:ca:46:a6:19:b4:48:3d:ee:96:22:dd:7c:54:be:
         a5:90:d7:4a:6a:5e:e3:b0:65:d3:76:cf:07:51:f4:11:5c:10:
         09:88:6f:22:4a:db:c3:59:79:de:e7:21:fb:5f:6c:33:e3:39:
         dd:8f:6a:dc
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUOBNMh5ZR++2flnqrsUKoUqwDFI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5
MjFDQjBFNzAeFw0yNjA1MDMwMjEyMDNaFw0yNzA1MDIwMjE3MDNaMDMxMTAvBgNV
BAMTKEM1MkI0QUM1NTg0NDczRjAzNzREQ0FENTM1Q0MxMkE4Qzc2QzZBRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK4BxTwLEDVr62Iii0YVdKRMa8
S7abtd0cpjJHCtUTNaP+/eF17TfSxHkUNUoZ6yKzU98qblvVLuw8k/ZCh1A9QuPe
4w0w7mXQQOiMdD+erzhy8XBwzElhLCp6s8ygxleiSbcMojJPAoCqJ4dQkUiSxNX8
p6uz1qrvuF3G61cDSFQmT3xGKCui3aUpbFuFH+AkCBCEFMHpvikqJgZTMXAzmpQB
H+vBDqlYm9xzHC/OcXpn6euqzWRzc2qRsYqOVfwS+AzuSv9ZZrV7LYQ5lcEWplBc
hbv0EpEtmQXODyKicPw41oMuWAGStDrKo8B8GjnDps9xqDM2Ncj/ylI9L8lPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxStKxVhEc/A3TcrVNcwSqMdsavowHwYDVR0j
BBgwFoAUuKGnhQ/kYGZFzbmTYT8DJpIcsOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWI0ZTE5NWUtMTJkZS00YzNjLTkzZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUw
RkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5MjFDQjBFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COEExQTc4NTBGRTQ2MDY2NDVDREI5OTM2MTNGMDMyNjkyMUNC
MEU3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05
M2U1LTUyMmVlNTQwMThkNi8wLzMyMzAzMjJlMzkzMzJlMzIzMjM0MmUzMDJmMzIz
MTJkMzIzNDIwM2QzZTIwMzMzODM3MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8pd4DANBgkqhkiG
9w0BAQsFAAOCAQEAIeqnlJFkygmDhO9HNUL1deOTPLSiyqXd5FSY9sbqMvEVwm0S
GIQfN4/kqVjhLocPmYYC1n3IAc5q8iMadokY0euEo+HjxJGMEeKO3jfWp5JcKo+5
lEaVkTJlpSJw5g6vKjbd8q2S+1CiL05RJOYGpo8NK5AZReC91cdzJl+W6JhgqwPO
fyw33RQkss8+hx/3DdzWRPGUm9Mtg8ZDqwXWbxGTN5ncUyWt2LDWMAYlWVWOWcXx
jquQWCTYm/EXxz+ysDz5I+c9nAdCXspGphm0SD3uliLdfFS+pZDXSmpe47Bl03bP
B1H0EVwQCYhvIkrbw1l53uch+19sM+M53Y9q3A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:11:36 2026 by rpki-client