Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231352e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=
Subject key identifier:   96:AB:5D:B9:3D:97:E6:15:D7:01:81:F8:8B:3C:07:98:DD:1D:65:F6
Certificate issuer:       /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial:       5AA30FD128D87E327692AB9B66600B87F10CE7EF
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231352e302f32342d3234203d3e203138333933.roa
Signing time:             Sun 03 May 2026 02:18:07 +0000
ROA not before:           Sun 03 May 2026 02:13:07 +0000
ROA not after:            Sun 02 May 2027 02:18:07 +0000
asID:                     18393
IP address blocks:        203.77.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
                          rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a3:0f:d1:28:d8:7e:32:76:92:ab:9b:66:60:0b:87:f1:0c:e7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
        Validity
            Not Before: May  3 02:13:07 2026 GMT
            Not After : May  2 02:18:07 2027 GMT
        Subject: CN=96AB5DB93D97E615D70181F88B3C0798DD1D65F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:98:46:d3:27:46:c9:36:99:3f:3b:62:a6:
                    40:5f:57:95:1a:85:df:82:1f:b0:b0:25:ee:46:4c:
                    7d:7c:3a:09:80:d2:e0:c1:a3:b9:0a:0f:2c:e3:ed:
                    86:13:a6:29:ab:af:64:7e:14:ee:05:c3:92:04:dc:
                    36:b6:32:97:a6:34:dc:93:4e:aa:53:59:92:a2:0a:
                    91:43:64:09:a1:96:d9:9d:65:4d:f3:0f:b5:27:76:
                    fc:72:b8:cb:3d:6f:88:06:86:5f:e3:a5:1a:19:9b:
                    6e:a1:ab:8b:d2:e8:83:c9:98:7c:da:22:66:a5:8f:
                    18:5f:f8:b9:d2:29:9c:cc:33:4f:3a:d0:85:f6:7f:
                    95:f4:49:4a:8d:dc:5b:37:e5:c7:4e:07:99:32:d2:
                    20:4d:2b:90:41:ba:c4:56:3a:49:66:38:2f:74:f0:
                    e5:c5:7f:31:76:98:e0:7c:93:65:da:f3:65:1d:83:
                    35:bc:0b:71:10:c6:5d:4e:1e:79:4d:f7:48:8d:cf:
                    71:91:44:0b:48:53:9e:f4:ab:85:47:20:a2:3b:99:
                    9c:3a:9c:62:af:c8:c7:b5:24:a5:02:ec:62:7f:50:
                    b5:74:ae:fd:9b:eb:02:f3:d8:5e:00:2c:cc:80:bb:
                    4f:4c:e2:24:97:73:77:4d:89:0c:6c:24:39:c1:c3:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AB:5D:B9:3D:97:E6:15:D7:01:81:F8:8B:3C:07:98:DD:1D:65:F6
            X509v3 Authority Key Identifier:
                keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231352e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:aa:89:e2:1f:80:be:a8:f6:fd:e4:24:e9:2d:64:50:45:d6:
         33:ad:96:79:84:b6:3d:19:2f:8f:1d:0f:5b:63:49:ef:db:af:
         9d:be:e4:9d:5e:e0:53:2b:de:f6:b2:c9:1c:c1:cb:25:e3:ae:
         7b:ca:a5:a6:1c:8d:9c:43:9f:5e:84:a9:1b:fa:a6:0c:b6:f1:
         9c:3a:63:3b:0b:f9:bd:c2:ad:55:0c:5f:ed:0f:61:5c:91:9a:
         03:2c:f2:6b:a5:a9:78:7e:89:45:50:d0:6c:dc:1a:8a:79:fa:
         1c:b5:12:e7:f9:d6:33:9a:c0:7c:c8:3b:c8:6e:8e:34:e6:28:
         7d:62:7e:90:57:44:4c:9f:71:00:c6:d8:bc:d3:ad:44:eb:c1:
         3e:8e:52:01:4d:a1:72:22:15:12:23:6d:38:c9:6b:16:23:19:
         92:1f:42:11:45:fa:d2:f2:cd:eb:9d:0a:60:d0:9b:82:ee:5c:
         ec:ac:1c:cf:83:e4:fa:df:82:d5:b6:f8:03:e6:34:44:3d:0c:
         82:26:63:10:57:55:de:2e:ce:d2:69:99:87:bb:33:16:0a:27:
         a2:73:fd:8c:d6:94:e2:92:96:68:95:70:fd:f8:47:e3:f0:4e:
         7f:89:57:34:e8:95:46:01:01:b1:18:f4:f4:f7:36:36:a2:cb:
         f4:fe:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:41 2026 by rpki-client