Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231332e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=
Subject key identifier:   C1:83:FF:5C:58:C5:2A:A7:4C:42:E2:91:93:06:E0:A9:02:56:45:5D
Certificate issuer:       /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial:       3029BDA4BFBD0ED29CE610481D19AADEAEFE4361
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231332e302f32342d3234203d3e203138333933.roa
Signing time:             Sun 03 May 2026 02:18:03 +0000
ROA not before:           Sun 03 May 2026 02:13:03 +0000
ROA not after:            Sun 02 May 2027 02:18:03 +0000
asID:                     18393
IP address blocks:        203.77.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
                          rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:29:bd:a4:bf:bd:0e:d2:9c:e6:10:48:1d:19:aa:de:ae:fe:43:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
        Validity
            Not Before: May  3 02:13:03 2026 GMT
            Not After : May  2 02:18:03 2027 GMT
        Subject: CN=C183FF5C58C52AA74C42E2919306E0A90256455D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9d:96:a6:00:8d:bb:ac:82:ca:bf:a8:89:ad:
                    95:e0:8d:f9:1c:c3:33:9e:d9:2e:cd:16:3b:63:da:
                    b8:d7:71:78:c3:24:cd:37:0b:b9:ce:54:fa:e4:48:
                    20:3d:03:da:60:b8:91:c1:1b:52:fe:a6:ca:81:53:
                    7a:3e:d8:86:d4:ca:56:3d:e6:8a:57:61:39:21:16:
                    3b:65:de:fd:e7:3e:5e:9e:56:1f:c6:c8:35:7c:e8:
                    4c:5a:25:62:eb:b5:bb:e1:7b:79:b9:bd:56:85:d6:
                    39:12:93:f6:50:e5:0f:41:77:7d:b5:54:c1:16:b7:
                    e8:d9:e4:10:60:ba:32:3a:09:19:93:89:6f:ad:df:
                    7d:65:ba:25:ff:6b:72:a6:45:0c:5e:46:85:b3:6a:
                    2c:aa:ef:5c:83:6f:2e:84:f0:e7:7e:79:f1:31:a0:
                    8e:37:c8:19:5d:82:25:c4:9a:b9:c6:7c:02:96:73:
                    28:52:88:36:9c:9e:61:0e:d1:be:e7:ba:9b:8a:f3:
                    91:24:f3:03:c6:09:8a:78:77:25:ce:45:45:22:50:
                    b5:da:7f:f1:b8:d5:7e:96:71:2c:d3:03:a4:bd:30:
                    f0:b3:cf:b7:35:6f:3c:e9:a0:8d:6a:54:e7:f0:af:
                    e8:49:8f:0b:19:fd:be:41:32:e9:d8:d2:8a:ff:21:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:83:FF:5C:58:C5:2A:A7:4C:42:E2:91:93:06:E0:A9:02:56:45:5D
            X509v3 Authority Key Identifier:
                keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231332e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:87:a6:cc:a8:5c:e3:39:ad:70:2e:d2:f2:93:e7:aa:ff:29:
         0b:0e:ea:e7:14:36:92:ce:41:9d:e8:c0:0c:b0:2e:6d:73:6a:
         ab:2d:21:fa:39:c9:68:b2:d1:8c:57:35:4a:46:ed:83:27:87:
         4a:5d:32:61:0e:70:c1:ec:7f:05:42:c4:0e:70:31:30:20:b2:
         f0:90:ff:7c:01:aa:39:34:13:51:2b:e1:8e:e7:b9:41:41:e2:
         f9:15:bf:99:db:bf:38:70:25:9f:64:4f:eb:dd:f8:6f:e3:b4:
         1c:b4:10:36:96:1e:74:f4:7a:66:d6:22:e0:51:aa:6d:77:5d:
         92:7f:ff:4e:24:4f:54:ca:08:f6:da:17:4c:96:2d:c2:53:34:
         75:b7:75:43:36:86:12:0a:d3:33:e1:a3:3b:9d:44:be:50:13:
         ec:49:b0:fc:4e:5e:89:5b:c1:c6:98:29:d4:98:eb:ce:c2:36:
         92:62:4a:33:f1:c1:0a:c3:a4:b9:6d:b5:11:45:52:52:aa:61:
         d5:aa:07:42:92:2c:ac:00:fc:fa:49:23:ab:bd:11:40:3c:d3:
         ed:01:86:92:37:13:66:57:cf:37:98:95:c9:2c:bc:bc:39:d5:
         d6:db:01:08:b3:63:25:45:ca:6a:44:4c:dd:91:de:06:5a:cf:
         fe:53:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:05 2026 by rpki-client