Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3230382e302f32332d3234203d3e203138333933.roa
File:                     3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (raw, json)
Hash identifier:          EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=
Subject key identifier:   BA:06:8F:5F:2F:16:2F:BC:0A:1D:92:EE:6E:D9:E2:CE:0A:9D:FD:F3
Certificate issuer:       /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial:       5167C2E56CAD1B921A0734B6CCDD02C68904E5E3
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3230382e302f32332d3234203d3e203138333933.roa
Signing time:             Sun 03 May 2026 02:18:05 +0000
ROA not before:           Sun 03 May 2026 02:13:05 +0000
ROA not after:            Sun 02 May 2027 02:18:05 +0000
asID:                     18393
IP address blocks:        203.77.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
                          rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:67:c2:e5:6c:ad:1b:92:1a:07:34:b6:cc:dd:02:c6:89:04:e5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
        Validity
            Not Before: May  3 02:13:05 2026 GMT
            Not After : May  2 02:18:05 2027 GMT
        Subject: CN=BA068F5F2F162FBC0A1D92EE6ED9E2CE0A9DFDF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:33:14:4a:0a:92:8c:29:a2:c0:6e:09:1d:
                    5a:79:91:2c:4d:c8:6b:25:87:a9:d4:e2:f2:47:50:
                    76:a5:a6:31:70:4c:c0:a4:bc:d3:b9:8b:c1:92:61:
                    96:a6:95:32:49:80:fe:6a:91:12:49:12:34:dd:1b:
                    0f:f9:e3:ad:34:58:26:fd:9c:51:c0:c8:03:60:e2:
                    3f:80:26:91:2c:d3:89:77:68:36:b0:4e:a0:10:5d:
                    b5:d4:55:3b:2e:c1:96:5b:d6:cb:43:57:b0:18:e1:
                    4a:77:2a:98:2d:95:8e:55:fc:05:22:0b:cd:c4:f5:
                    ba:e9:5d:e7:9a:8b:fb:ee:3c:4e:4c:e1:1a:71:30:
                    4f:98:12:ce:7b:cb:f5:0a:57:6d:f8:ae:4f:f7:5b:
                    88:23:2f:af:01:a2:63:a9:a3:e3:7e:5b:2d:8a:21:
                    61:6d:fd:c4:0d:b5:61:c2:e3:3e:70:48:8a:8f:a8:
                    3a:61:fc:81:19:2e:f9:45:52:aa:e5:f3:42:d2:df:
                    34:91:e1:c8:e5:8d:2d:95:95:c6:ec:f8:3a:3e:16:
                    6d:41:a8:7e:30:8a:b0:5d:bc:b1:0e:a6:d1:0f:2b:
                    85:26:af:fc:62:2e:26:a6:10:00:3c:b0:27:c6:3a:
                    e3:f0:d2:c6:27:aa:9c:6b:63:8e:60:2b:47:60:35:
                    04:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:06:8F:5F:2F:16:2F:BC:0A:1D:92:EE:6E:D9:E2:CE:0A:9D:FD:F3
            X509v3 Authority Key Identifier:
                keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3230382e302f32332d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:4d:34:02:c3:12:cf:34:b3:1d:17:cb:04:d6:0a:2f:20:f3:
         95:f9:4e:07:ee:46:85:65:89:88:0c:ec:83:aa:cc:b0:b8:69:
         56:42:ce:29:bc:bf:48:51:8d:32:02:ea:1b:a0:77:a1:51:08:
         fe:ba:b0:f8:0e:02:5c:12:3d:69:01:25:d1:d5:93:32:96:01:
         82:02:4c:57:18:34:cd:ac:8c:4a:74:46:4a:ec:93:09:61:ec:
         e9:8f:1c:0f:c6:c1:1e:9c:92:7b:7a:a1:a2:8b:6d:49:07:34:
         7a:c8:e1:26:62:44:4c:b2:08:f0:cc:b2:26:3d:83:87:da:b3:
         50:eb:fc:de:41:b5:d0:c2:af:13:92:92:16:66:70:12:e6:69:
         2e:72:66:ed:c9:17:d3:44:00:fe:24:ab:79:e0:82:c2:e7:fd:
         5e:31:5f:d8:de:fe:f7:27:71:fd:14:b7:c2:a3:86:11:f5:bc:
         b4:04:2b:db:9b:be:2f:98:60:d1:57:b5:a2:fd:a5:7b:89:b2:
         b2:ab:cb:00:fb:c3:2d:1f:c2:6f:9a:04:9d:33:76:b7:c9:b3:
         92:8e:8d:9a:c9:f7:51:cd:be:f1:ca:b3:a1:a1:ff:93:b1:59:
         f0:cb:72:fe:38:aa:e5:10:c7:0c:5e:0d:16:01:22:eb:91:3b:
         b5:14:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:56 2026 by rpki-client