Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231362e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=
Subject key identifier:   E5:27:26:E1:EA:E9:95:1F:1C:26:14:F5:8D:83:61:36:7F:9E:9C:7D
Certificate issuer:       /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial:       6BDD0FBC237589BEAC52CF311A9A634D2D32EAB9
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231362e302f32342d3234203d3e203138333933.roa
Signing time:             Sun 03 May 2026 02:18:05 +0000
ROA not before:           Sun 03 May 2026 02:13:05 +0000
ROA not after:            Sun 02 May 2027 02:18:05 +0000
asID:                     18393
IP address blocks:        203.77.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
                          rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:dd:0f:bc:23:75:89:be:ac:52:cf:31:1a:9a:63:4d:2d:32:ea:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
        Validity
            Not Before: May  3 02:13:05 2026 GMT
            Not After : May  2 02:18:05 2027 GMT
        Subject: CN=E52726E1EAE9951F1C2614F58D8361367F9E9C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:88:fa:04:64:06:86:c3:cc:8b:2e:79:9a:
                    cb:05:eb:bf:c0:33:e2:1b:29:f3:a1:0b:a6:e5:bc:
                    5d:da:6b:9c:bf:2f:99:33:b9:9c:4b:8b:67:75:27:
                    e2:e1:44:d7:60:2b:74:46:97:be:b2:46:83:4c:20:
                    34:cd:b2:11:03:0a:1f:53:87:5e:ae:4a:a8:02:57:
                    c2:2c:32:0e:45:fd:a2:cd:75:af:79:5f:b2:b9:02:
                    db:34:88:3b:eb:f9:e0:32:51:73:cf:5a:44:61:dd:
                    fd:2c:73:2e:e9:cd:36:6c:99:b5:73:7d:17:c0:08:
                    5e:46:3f:3f:de:c3:d6:0b:cb:f1:71:d5:ab:cb:cc:
                    6e:9c:2f:aa:4b:da:65:f9:b1:1c:a2:c5:06:11:3a:
                    b6:58:cd:72:da:b8:5c:b9:9f:98:5d:8f:c9:47:0b:
                    c7:b5:6f:14:15:82:79:fa:2d:6b:11:dd:eb:22:a8:
                    ca:b2:71:4a:f5:2e:ab:67:74:20:1b:84:ff:77:2e:
                    ba:db:f3:a6:4f:db:04:41:a1:68:12:2a:2c:4b:f4:
                    d4:12:59:1f:66:fe:1a:79:c9:64:26:3c:e2:1a:50:
                    bd:62:5f:66:0f:aa:d5:21:8c:ab:b1:25:93:44:2b:
                    7f:6e:23:27:97:dc:00:4d:3e:04:cb:c3:30:4b:16:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:27:26:E1:EA:E9:95:1F:1C:26:14:F5:8D:83:61:36:7F:9E:9C:7D
            X509v3 Authority Key Identifier:
                keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231362e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:90:d1:92:34:79:25:46:92:4a:c3:53:e1:92:3d:7d:9c:f5:
         38:d2:16:a5:76:a4:15:de:de:5e:94:09:05:5b:a0:ae:3a:d6:
         fb:0a:a2:bc:c1:96:56:c3:65:19:9e:f7:0c:2a:5a:da:35:87:
         fc:01:64:b3:15:5b:18:52:4a:7a:f6:ab:28:7a:7e:62:96:4e:
         d7:0f:f0:b4:f2:25:eb:f7:5f:6d:47:85:6d:48:68:f2:95:eb:
         b2:c0:5c:ad:f3:b1:c9:ad:e8:a3:83:ec:69:ba:ef:2a:21:22:
         59:43:82:d1:f5:d6:d0:fb:6e:f6:64:ec:84:6c:2c:f1:5d:ef:
         e1:b5:ba:3f:f4:b3:8b:74:c4:bb:6f:09:18:1a:9b:df:ed:6d:
         ce:ee:40:6c:48:85:47:51:ea:5e:b1:96:fa:5c:1b:a9:d3:7d:
         70:e9:58:8b:d0:b7:a1:59:d3:b3:62:d9:70:72:78:f9:d1:ad:
         91:73:b8:db:ba:da:ed:19:95:90:e4:b9:76:20:29:10:e0:e1:
         4e:44:6f:53:22:d3:82:e8:c2:c2:c7:b7:54:f6:3a:4e:50:e6:
         70:5d:01:25:d0:ec:dc:f6:a7:c3:10:38:77:b8:cd:ba:37:ae:
         78:97:54:13:fb:65:6d:27:6a:35:30:c6:2f:c5:ef:5f:46:18:
         86:04:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:55 2026 by rpki-client