Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232322e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=
Subject key identifier:   15:83:07:17:EB:56:BC:D1:31:F1:99:B6:43:BF:BD:60:BF:F4:D4:0E
Certificate issuer:       /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial:       51494AAEC01AD5BF6A6326D29507EA9C121A7358
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232322e302f32342d3234203d3e203138333933.roa
Signing time:             Sun 03 May 2026 02:18:02 +0000
ROA not before:           Sun 03 May 2026 02:13:02 +0000
ROA not after:            Sun 02 May 2027 02:18:02 +0000
asID:                     18393
IP address blocks:        203.77.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
                          rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:49:4a:ae:c0:1a:d5:bf:6a:63:26:d2:95:07:ea:9c:12:1a:73:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
        Validity
            Not Before: May  3 02:13:02 2026 GMT
            Not After : May  2 02:18:02 2027 GMT
        Subject: CN=15830717EB56BCD131F199B643BFBD60BFF4D40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:b0:f6:a4:01:55:3b:d7:eb:16:4d:74:f9:
                    c2:91:72:0b:4a:5c:1b:75:b3:d0:b5:71:70:c7:d3:
                    9e:ea:b7:a3:ff:07:fc:4c:22:18:a3:a9:ce:f5:f7:
                    64:85:54:cd:c4:3d:19:ba:82:96:9e:f1:03:a9:40:
                    c2:24:cb:63:10:f4:4c:61:a3:c6:13:92:79:54:d9:
                    8c:7a:c9:97:5f:09:74:a4:bb:08:1d:28:0e:a7:d2:
                    76:12:b4:cb:21:95:8c:bf:26:91:db:51:56:b9:83:
                    62:98:26:a4:29:9a:f7:88:c0:49:c2:3b:89:e6:78:
                    9d:05:64:34:38:90:60:19:45:fe:fc:7d:19:76:78:
                    ef:ee:08:14:15:b1:c4:8c:d9:02:aa:34:57:dc:5e:
                    cb:09:cd:46:5c:0a:48:41:22:aa:76:05:45:13:ce:
                    f0:74:dc:2c:ad:20:4f:c7:8b:99:2e:d5:d9:0b:61:
                    4f:11:38:ed:c8:76:e0:b5:ab:a6:23:75:05:10:e5:
                    fb:9f:77:8f:84:34:e7:1f:3f:64:da:c2:9d:9f:7f:
                    30:74:73:1f:5e:ea:9d:4d:27:01:a4:cd:31:a3:c3:
                    7a:88:8f:80:81:ee:79:23:ce:00:a4:27:53:0e:f5:
                    5a:71:2a:3f:68:71:8f:3b:38:1d:75:79:fe:8d:ec:
                    37:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:83:07:17:EB:56:BC:D1:31:F1:99:B6:43:BF:BD:60:BF:F4:D4:0E
            X509v3 Authority Key Identifier:
                keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232322e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:1f:93:d0:c6:2d:f6:22:c3:38:cf:cb:a0:a8:df:16:00:b1:
         ec:cb:fc:e2:a9:79:cf:a7:c5:65:0c:5c:25:dc:d7:83:b0:b6:
         15:98:d9:0a:89:54:20:00:d3:ce:ec:84:98:40:98:bc:c1:fb:
         fa:ce:ce:70:0c:72:80:57:3d:bb:90:28:27:73:df:24:11:2f:
         68:14:b1:30:b3:67:c5:c1:fd:14:72:6e:5d:c8:73:69:e5:c4:
         71:92:7e:c6:b0:8a:6b:63:35:79:b2:89:38:d7:e2:86:e1:ad:
         80:4f:e3:64:57:52:de:61:91:b4:ea:20:1c:a5:27:c8:f6:05:
         64:4b:12:dc:42:d9:ae:dd:d2:74:81:7b:f9:0a:0f:ba:ad:68:
         39:eb:0a:71:b3:bc:57:e1:ac:fb:e2:4b:23:84:22:f7:de:a6:
         53:c7:6e:64:0d:b4:a1:9a:4e:70:4f:2e:ed:33:12:04:8a:4a:
         a0:20:60:17:45:19:18:87:48:66:e7:d1:87:a4:da:f3:a8:95:
         ab:6e:a1:58:6e:90:dc:34:10:2c:d1:a3:46:e1:29:bc:f7:e0:
         6f:4e:3e:c5:68:52:39:5a:fe:ad:ba:fa:98:34:b8:8d:4f:f0:
         b4:f6:38:0d:b3:d1:09:05:30:b1:71:d4:72:52:d9:5b:75:e1:
         d6:02:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:58 2026 by rpki-client