Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231372e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=
Subject key identifier:   E6:A6:D0:EB:58:59:B7:83:02:65:F1:D3:A1:9C:BC:0B:95:10:06:B4
Certificate issuer:       /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial:       391CD2D4043546717EB7AAB832049D8DA1642EB8
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231372e302f32342d3234203d3e203138333933.roa
Signing time:             Sun 03 May 2026 02:18:09 +0000
ROA not before:           Sun 03 May 2026 02:13:09 +0000
ROA not after:            Sun 02 May 2027 02:18:09 +0000
asID:                     18393
IP address blocks:        203.77.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
                          rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1c:d2:d4:04:35:46:71:7e:b7:aa:b8:32:04:9d:8d:a1:64:2e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
        Validity
            Not Before: May  3 02:13:09 2026 GMT
            Not After : May  2 02:18:09 2027 GMT
        Subject: CN=E6A6D0EB5859B7830265F1D3A19CBC0B951006B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:8e:f1:c7:1c:82:4f:86:b3:23:8c:02:75:
                    d2:4d:3f:57:cb:d2:f2:2f:bd:12:f2:60:22:eb:6a:
                    36:0e:bd:ff:f6:ea:74:98:71:21:b6:17:de:e0:eb:
                    77:f7:9c:e5:82:5f:b8:02:f0:27:06:2b:86:48:ba:
                    41:e9:e7:3d:99:91:f2:a1:ec:0c:1c:60:e0:2e:5e:
                    38:c2:66:20:64:be:36:49:70:87:e7:c7:f7:03:5e:
                    5c:36:7d:df:3f:68:0d:81:ef:85:73:4c:cc:c5:11:
                    75:1d:8e:2b:80:b0:c7:68:f8:5d:1f:fd:ae:10:a1:
                    85:6d:cd:aa:18:0e:aa:27:a2:94:4d:22:59:d0:f4:
                    67:4d:f9:62:82:94:dd:a2:8b:b6:63:05:71:a5:f4:
                    2f:d1:09:45:75:27:e4:65:9b:da:fb:d4:92:a3:74:
                    e2:5d:32:85:b7:31:20:fd:2d:0d:99:0e:7d:61:a9:
                    01:7c:cd:f9:bb:5c:15:18:19:29:fa:b5:b0:71:bb:
                    95:7d:90:58:0f:78:a2:56:f7:95:d0:57:05:3c:91:
                    dc:03:b9:cd:b7:b6:53:ee:23:fb:e5:98:06:9a:c5:
                    c9:c5:a3:58:db:78:74:da:a1:28:7f:e5:09:fb:ac:
                    19:27:44:d0:6d:a7:8e:1d:83:7c:f5:26:45:3d:21:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A6:D0:EB:58:59:B7:83:02:65:F1:D3:A1:9C:BC:0B:95:10:06:B4
            X509v3 Authority Key Identifier:
                keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231372e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f2:e0:5c:36:01:6d:4e:75:b5:2e:66:18:99:28:14:73:b2:45:
         22:a4:aa:97:5d:5b:7d:57:b0:f7:5b:04:93:15:02:2a:34:96:
         3f:66:a8:d6:34:31:64:01:c3:a5:4b:97:1b:c7:93:3d:1b:35:
         b6:1d:c9:66:ea:ea:59:6f:c0:29:3a:04:7c:2f:90:df:86:c0:
         60:a4:4a:be:0c:2a:bb:cb:36:1d:fd:19:da:7d:06:cb:5a:df:
         6b:de:7d:ea:8f:d3:5e:0f:9d:d4:a7:69:74:3d:31:53:e2:43:
         1a:c2:2f:b0:0c:10:8c:c0:83:7e:52:45:cf:08:f8:75:e2:5a:
         40:09:2f:20:ed:74:f9:6d:56:20:9f:d5:40:d2:73:bd:f2:fa:
         83:fd:cf:f8:b1:4e:72:00:14:a5:61:d6:00:a9:1c:3b:1a:fa:
         78:78:0b:b1:08:91:05:20:c4:78:20:e1:ac:f8:5c:d0:37:ab:
         6a:4a:b8:b9:6c:27:2e:89:0d:1c:1f:36:78:a6:73:13:32:e9:
         19:6f:c6:ff:15:0e:af:b2:e2:8c:13:e0:88:e0:37:ab:dc:fc:
         a0:01:da:09:6e:04:f9:a0:64:96:6c:7d:a3:55:d0:ca:b7:3b:
         a8:3b:54:0c:77:cb:5e:8c:52:11:50:ae:4a:05:1d:9d:03:17:
         bb:fc:c7:a0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUORzS1AQ1RnF+t6q4MgSdjaFkLrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2
RDlCN0FEMTAeFw0yNjA1MDMwMjEzMDlaFw0yNzA1MDIwMjE4MDlaMDMxMTAvBgNV
BAMTKEU2QTZEMEVCNTg1OUI3ODMwMjY1RjFEM0ExOUNCQzBCOTUxMDA2QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXSI7xxxyCT4azI4wCddJNP1fL
0vIvvRLyYCLrajYOvf/26nSYcSG2F97g63f3nOWCX7gC8CcGK4ZIukHp5z2ZkfKh
7AwcYOAuXjjCZiBkvjZJcIfnx/cDXlw2fd8/aA2B74VzTMzFEXUdjiuAsMdo+F0f
/a4QoYVtzaoYDqonopRNIlnQ9GdN+WKClN2ii7ZjBXGl9C/RCUV1J+Rlm9r71JKj
dOJdMoW3MSD9LQ2ZDn1hqQF8zfm7XBUYGSn6tbBxu5V9kFgPeKJW95XQVwU8kdwD
uc23tlPuI/vlmAaaxcnFo1jbeHTaoSh/5Qn7rBknRNBtp44dg3z1JkU9IRZxAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5qbQ61hZt4MCZfHToZy8C5UQBrQwHwYDVR0j
BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0
NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3
QUQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFlMzE1OWYyLTBjZjAtNDNjNi1i
MjgyLWM2OWZiYTEzYTE0YS8wLzMyMzAzMzJlMzczNzJlMzIzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtN2TANBgkqhkiG
9w0BAQsFAAOCAQEA8uBcNgFtTnW1LmYYmSgUc7JFIqSql11bfVew91sEkxUCKjSW
P2ao1jQxZAHDpUuXG8eTPRs1th3JZurqWW/AKToEfC+Q34bAYKRKvgwqu8s2Hf0Z
2n0Gy1rfa9596o/TXg+d1KdpdD0xU+JDGsIvsAwQjMCDflJFzwj4deJaQAkvIO10
+W1WIJ/VQNJzvfL6g/3P+LFOcgAUpWHWAKkcOxr6eHgLsQiRBSDEeCDhrPhc0Der
akq4uWwnLokNHB82eKZzEzLpGW/G/xUOr7LijBPgiOA3q9z8oAHaCW4E+aBklmx9
o1XQyrc7qDtUDHfLXoxSEVCuSgUdnQMXu/zHoA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:49 2026 by rpki-client