Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231312e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=
Subject key identifier:   DF:3E:02:55:F7:99:52:B2:54:45:89:00:C9:FE:E1:C8:0B:D2:9D:5B
Certificate issuer:       /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial:       22FC1003DEA8B3035690EA760142A54FCCFFDE20
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231312e302f32342d3234203d3e203138333933.roa
Signing time:             Sun 03 May 2026 02:18:05 +0000
ROA not before:           Sun 03 May 2026 02:13:05 +0000
ROA not after:            Sun 02 May 2027 02:18:05 +0000
asID:                     18393
IP address blocks:        203.77.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
                          rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fc:10:03:de:a8:b3:03:56:90:ea:76:01:42:a5:4f:cc:ff:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
        Validity
            Not Before: May  3 02:13:05 2026 GMT
            Not After : May  2 02:18:05 2027 GMT
        Subject: CN=DF3E0255F79952B254458900C9FEE1C80BD29D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:26:6c:82:b3:06:c7:78:cd:43:d1:05:88:
                    a8:07:fb:61:00:82:5b:04:01:af:cc:21:63:27:ec:
                    a5:40:72:4f:b7:6a:16:5c:17:4e:4d:23:7f:99:44:
                    02:54:ed:08:8c:f1:6c:e3:fd:61:7e:49:c3:fd:31:
                    62:77:f0:8a:0f:33:3c:93:3c:58:6e:ac:80:cc:2e:
                    03:16:21:63:e7:df:d5:76:f7:4b:98:07:cd:93:ff:
                    76:4c:53:63:b5:85:84:3c:85:af:03:13:c8:43:8a:
                    2f:88:9e:df:3c:51:1c:be:07:d3:9b:57:6e:4e:8e:
                    18:b3:11:08:3d:de:e0:b8:a7:8b:7e:0e:ec:ed:49:
                    9d:a4:4a:13:f7:de:c7:1c:fd:ed:c8:0f:2f:50:f4:
                    08:66:9b:57:8c:ea:4f:53:11:34:d8:dd:96:e6:16:
                    fb:d2:17:ac:e6:0b:34:08:1a:a1:e5:42:6a:8e:62:
                    fe:33:eb:15:07:34:af:63:42:63:fa:03:7c:64:e7:
                    50:70:98:58:46:0b:c1:a6:d2:bf:1e:bb:84:c2:f3:
                    bb:ab:d2:3a:0e:6c:29:60:85:46:49:4c:15:1d:d4:
                    8f:f3:8f:d7:f2:89:45:60:5c:ba:b0:33:7e:b3:ed:
                    fd:d8:55:da:4a:4c:05:56:a8:03:f8:61:57:26:60:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3E:02:55:F7:99:52:B2:54:45:89:00:C9:FE:E1:C8:0B:D2:9D:5B
            X509v3 Authority Key Identifier:
                keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231312e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ee:34:0c:ea:9b:70:10:02:cd:3e:fa:91:8f:e9:43:22:97:
         02:02:93:df:67:33:b3:b2:97:fd:59:4e:0a:6f:01:c6:cf:b0:
         a5:7c:31:e3:e3:58:be:65:dc:2e:fc:0f:4a:23:86:4d:ed:72:
         80:06:33:d8:53:5f:73:c4:3e:9f:77:63:d1:dd:3b:cf:7f:6c:
         14:07:01:06:fc:23:b7:46:f8:ec:4b:45:9d:b2:c5:97:26:04:
         56:d3:5a:be:44:da:72:73:57:43:a1:7b:8c:12:45:9a:80:d2:
         ef:c1:4f:0e:72:5b:09:1d:11:e1:a2:92:6e:fb:d6:b9:17:28:
         dd:6b:da:ec:3f:98:b5:f2:f7:a4:c0:b2:26:02:7e:bb:ec:53:
         a7:5e:6f:16:ab:4f:2e:1f:9e:bf:56:6d:fd:52:77:37:74:e8:
         23:42:f9:56:f6:7c:d5:a9:04:81:0e:5a:d8:34:ba:27:9e:e8:
         63:7f:88:bd:b0:ef:ab:b9:f5:e3:a0:55:13:d2:55:a0:af:f3:
         97:26:65:d6:f6:fa:77:07:93:6b:37:d1:53:a7:b2:0f:c3:b6:
         54:26:4c:bf:72:88:46:7d:e2:09:48:69:05:27:67:73:e7:6a:
         a9:a9:23:3a:67:7c:d0:75:f3:ed:c3:84:9c:c1:57:8c:1e:81:
         13:e5:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:05 2026 by rpki-client