Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231302e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=
Subject key identifier:   3D:F7:B9:16:51:F8:40:19:4C:E3:97:46:62:D1:46:DD:3A:A2:C2:E0
Certificate issuer:       /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial:       45C004C5AB7785B9A0769165B946CF886AEBA9AD
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231302e302f32342d3234203d3e203138333933.roa
Signing time:             Sun 03 May 2026 02:18:02 +0000
ROA not before:           Sun 03 May 2026 02:13:02 +0000
ROA not after:            Sun 02 May 2027 02:18:02 +0000
asID:                     18393
IP address blocks:        203.77.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
                          rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c0:04:c5:ab:77:85:b9:a0:76:91:65:b9:46:cf:88:6a:eb:a9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
        Validity
            Not Before: May  3 02:13:02 2026 GMT
            Not After : May  2 02:18:02 2027 GMT
        Subject: CN=3DF7B91651F840194CE3974662D146DD3AA2C2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:d7:16:4f:aa:16:7c:61:e0:8e:84:a2:7f:
                    31:48:1d:d1:82:84:19:79:04:fa:7f:94:9e:0a:ba:
                    9a:a2:9a:c9:21:d1:ac:b9:41:5b:3b:f7:a0:5c:19:
                    ec:4b:2b:2b:25:5b:fc:c7:da:b2:a4:93:c4:34:46:
                    6a:be:85:8d:de:9e:c4:ed:43:58:75:55:7e:fb:24:
                    65:d5:73:b5:2a:b9:12:41:20:17:17:d8:57:b1:62:
                    34:2d:7f:a2:99:f9:4d:67:b4:33:99:e9:ad:95:84:
                    62:ec:b2:be:9d:0c:00:3f:fc:bd:d9:20:4d:2b:8a:
                    d5:8e:26:0a:7f:2b:66:b6:f3:2f:e3:83:5a:bb:26:
                    ca:4f:47:68:31:af:59:7e:95:18:1a:b4:8c:f8:df:
                    ff:b4:2a:cb:66:c2:29:fb:77:c1:ed:ab:2f:ed:ea:
                    42:91:d0:ab:a1:f6:20:a7:d5:42:9d:ae:8c:5a:ef:
                    64:31:6b:0e:ca:91:8a:c7:b3:6f:be:87:e2:fb:53:
                    bf:c1:21:bf:d4:c8:15:7a:b2:9f:db:14:73:28:57:
                    b8:3a:ab:c8:5e:5a:78:d2:3b:62:b5:76:7f:9c:a9:
                    28:e4:83:2c:dd:25:83:0a:03:e7:18:f0:06:f9:76:
                    c0:19:f9:ba:ff:10:aa:b2:6c:e4:9f:7d:66:b9:c4:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F7:B9:16:51:F8:40:19:4C:E3:97:46:62:D1:46:DD:3A:A2:C2:E0
            X509v3 Authority Key Identifier:
                keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231302e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:be:71:14:be:5d:3e:03:a8:50:cc:4e:d1:fb:4a:93:96:ac:
         a8:44:31:fe:9b:19:a1:3a:1d:86:0e:86:44:79:ca:5a:59:4b:
         a5:18:cf:f2:e9:32:5e:29:b2:6c:cb:42:99:72:f8:3f:6d:87:
         1b:da:08:a8:d7:35:73:e0:c6:9c:34:6e:de:06:42:8e:df:fb:
         44:9f:a4:bc:3e:15:ca:f3:66:b1:3a:fd:b3:f1:8b:03:c8:65:
         c7:e0:df:e0:79:13:10:b5:5a:b6:11:3d:9a:61:c9:38:2e:18:
         83:d9:3d:42:45:f5:03:de:62:be:c4:f5:73:48:5c:eb:b3:e4:
         fb:eb:36:0a:6a:81:10:df:76:80:43:fb:3c:65:b4:92:a8:70:
         46:64:58:c7:a9:0a:9b:9e:ee:3f:b5:3a:a7:92:2c:37:87:f4:
         7d:95:a0:23:53:ce:b4:d8:90:a3:16:6e:2a:74:75:6b:ef:55:
         b1:04:47:a8:54:47:be:2d:90:72:01:96:53:ff:12:9d:31:b5:
         97:25:50:59:30:1a:30:ab:5c:f9:d2:06:be:18:1d:51:04:e5:
         52:23:20:ea:25:28:a5:68:c2:c0:dc:bb:57:45:16:d1:74:b6:
         3b:78:ce:d6:30:8d:8b:33:a9:a2:fb:e0:b0:c7:67:3f:b1:33:
         cf:af:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:42 2026 by rpki-client