Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232312e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=
Subject key identifier:   6D:F8:A2:03:7B:85:D7:6B:80:AF:47:BF:0B:A8:01:E3:15:A3:5A:41
Certificate issuer:       /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial:       1B5994EF71AC91A5947FC997B717165E042B6EE4
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232312e302f32342d3234203d3e203138333933.roa
Signing time:             Sun 03 May 2026 02:18:07 +0000
ROA not before:           Sun 03 May 2026 02:13:07 +0000
ROA not after:            Sun 02 May 2027 02:18:07 +0000
asID:                     18393
IP address blocks:        203.77.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
                          rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:59:94:ef:71:ac:91:a5:94:7f:c9:97:b7:17:16:5e:04:2b:6e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
        Validity
            Not Before: May  3 02:13:07 2026 GMT
            Not After : May  2 02:18:07 2027 GMT
        Subject: CN=6DF8A2037B85D76B80AF47BF0BA801E315A35A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:42:9d:75:53:d9:31:7e:2d:75:79:77:9e:
                    82:92:cd:34:32:38:9e:68:be:8d:ce:d7:48:e4:3e:
                    e4:bc:ab:55:1b:a8:95:17:84:57:31:25:a5:a4:b1:
                    fb:e1:3c:04:2a:a6:bb:1c:60:e8:9c:e0:e2:9e:47:
                    18:d7:01:3f:e5:4d:20:4e:b8:db:dc:ee:e7:e2:b7:
                    f0:2c:78:97:02:69:04:f9:e5:f5:fa:4f:a7:5d:e3:
                    0d:10:c9:69:09:f9:4d:9f:66:a0:25:7e:3e:59:e9:
                    98:6b:e7:de:c9:c2:3e:22:e4:63:d4:2f:51:96:1c:
                    c9:bf:0b:16:ae:9e:a3:bb:71:ba:6b:4e:30:4d:5d:
                    ed:c7:ac:19:2e:22:f8:6e:98:0c:fb:f3:8f:79:6a:
                    2a:de:a4:ee:b0:2a:6a:ca:14:8d:f8:49:98:5e:29:
                    1a:cb:e3:10:57:83:78:7c:60:9e:f7:22:a5:81:40:
                    3d:d0:8f:7b:11:81:2a:22:f3:84:6e:8d:ca:be:0c:
                    de:82:80:d1:d8:af:a6:51:f0:91:f2:0c:40:a7:b5:
                    69:45:a8:e3:c0:4f:3a:be:59:f5:74:4b:c1:6e:c9:
                    e3:a5:c2:8c:dc:ac:fb:a6:cf:ec:06:bf:fc:40:19:
                    01:df:1c:1f:d8:f4:3a:62:97:1f:39:f3:dd:c0:e7:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F8:A2:03:7B:85:D7:6B:80:AF:47:BF:0B:A8:01:E3:15:A3:5A:41
            X509v3 Authority Key Identifier:
                keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232312e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:33:e8:8c:9f:c0:07:f7:a1:04:50:89:6a:49:b4:bc:ea:90:
         a1:82:81:10:ef:70:c4:65:f4:50:04:23:de:7d:0e:8f:df:73:
         2b:74:51:0d:7e:7b:4a:7a:ed:0d:1a:9d:2b:54:94:8d:6a:c3:
         cb:c3:2c:60:c2:83:03:7f:10:c3:da:2a:1a:03:17:2d:4d:2c:
         a9:fb:c0:9c:cf:fe:8f:bc:f2:d0:5a:92:27:0c:64:22:88:c6:
         eb:8f:f8:c8:21:4c:21:04:36:9b:b9:37:a0:2b:da:20:07:c4:
         26:0b:a8:71:fc:59:4f:aa:ce:45:2d:3d:8c:a1:2d:56:ae:22:
         a9:c5:1c:33:d5:bd:48:37:84:52:a5:6a:ca:a7:14:f9:26:36:
         0e:99:e5:77:9e:18:65:14:4d:9b:c0:61:98:a5:34:f7:c4:9d:
         86:e4:32:e4:de:47:3d:9f:19:18:28:d1:08:b2:73:9a:eb:8b:
         c9:43:9b:99:45:3c:f5:d4:ec:76:1a:93:9f:00:3d:02:bb:55:
         64:3c:32:86:47:7d:b6:0b:ca:ff:a3:58:34:48:e1:dd:6a:39:
         4d:30:6b:5e:43:a9:cc:5e:78:08:48:4d:b9:f0:72:3f:46:59:
         37:e3:a7:69:5a:e8:17:f9:c5:64:68:43:90:17:31:66:45:5e:
         4d:54:a8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:37 2026 by rpki-client