Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132312e302f32342d3234203d3e203233393531.roa
File:                     3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (raw, json)
Hash identifier:          ieaoOIKWcjfMopIKpCICGAmLYWwCSO+V3LkDuBSNkT8=
Subject key identifier:   3A:10:AA:4C:79:39:1C:4E:28:18:C9:9E:8C:A6:92:D4:89:6A:C4:30
Certificate issuer:       /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Certificate serial:       3308FB5C89FAF6163DD94C2886419FDF2C7DDA5D
Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132312e302f32342d3234203d3e203233393531.roa
Signing time:             Sun 03 May 2026 02:18:10 +0000
ROA not before:           Sun 03 May 2026 02:13:10 +0000
ROA not after:            Sun 02 May 2027 02:18:10 +0000
asID:                     23951
IP address blocks:        202.65.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
                          rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:08:fb:5c:89:fa:f6:16:3d:d9:4c:28:86:41:9f:df:2c:7d:da:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
        Validity
            Not Before: May  3 02:13:10 2026 GMT
            Not After : May  2 02:18:10 2027 GMT
        Subject: CN=3A10AA4C79391C4E2818C99E8CA692D4896AC430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:d3:25:56:86:2a:bb:bc:39:f8:90:72:83:
                    62:1c:d5:b5:d4:e8:d7:60:2a:56:cc:f0:a1:c0:43:
                    a6:ac:7c:bf:9c:98:93:60:1d:ef:6e:11:dd:3d:28:
                    4f:e2:20:17:da:b7:10:54:b6:6a:1f:d0:a3:5e:8f:
                    03:2e:d1:4f:e8:21:53:b1:86:dd:b2:76:29:48:cd:
                    ba:52:a4:d3:dd:7b:84:9a:18:50:f3:f8:3f:89:c8:
                    04:d9:67:f3:d3:bf:36:c0:07:6b:39:a2:19:cf:73:
                    d0:5a:86:4b:80:e8:e7:8c:1e:8b:5a:a4:cd:85:f1:
                    9b:23:a9:1e:b7:12:f3:96:77:6a:e4:c1:ab:90:9b:
                    27:67:64:17:65:36:ac:9d:75:53:69:18:9e:cc:75:
                    88:16:6b:4e:ea:ea:66:1b:e5:d0:96:20:b7:22:61:
                    7c:22:27:14:71:74:64:82:05:43:3e:16:bc:dd:fb:
                    84:b0:1c:27:47:f4:4d:b7:5b:8b:b8:ff:1a:58:43:
                    8c:66:3c:dd:b0:41:9a:ff:ab:83:0b:51:a2:e3:83:
                    88:7d:a1:73:eb:ea:35:2d:f3:ab:3b:cb:88:ca:46:
                    64:f5:43:95:11:c2:d5:d5:92:88:75:7c:98:c4:43:
                    86:e9:62:e5:0b:cf:6c:48:bd:7b:ba:9e:d2:2e:7e:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:10:AA:4C:79:39:1C:4E:28:18:C9:9E:8C:A6:92:D4:89:6A:C4:30
            X509v3 Authority Key Identifier:
                keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132312e302f32342d3234203d3e203233393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.65.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e5:fe:a8:4b:c8:11:94:12:f7:b5:5e:d1:30:16:70:72:da:
         9d:31:b7:13:6b:ea:c9:ba:4a:f5:94:b3:41:00:3a:9d:e0:ef:
         9a:cc:6b:df:8c:fe:d8:6f:f8:de:74:9c:8d:5c:ef:f2:99:c7:
         de:6c:fb:79:6a:da:76:05:5d:92:89:20:af:61:5b:e4:55:75:
         c0:1f:52:93:ff:62:fa:06:1a:b4:42:d1:ea:d5:c5:f7:d5:33:
         28:fc:bc:06:d5:5c:ee:47:b0:fc:96:f9:39:26:26:f1:d6:f7:
         58:e4:1f:62:ec:08:c3:98:f5:86:8a:34:2b:7a:2c:e9:4e:7e:
         b5:ba:6d:86:ba:d0:81:30:7f:1c:37:ee:f9:d4:d9:31:e9:37:
         bf:3d:13:d6:62:ad:9f:e7:81:9d:a7:a8:e3:b9:d9:7b:a4:61:
         84:e6:e4:61:71:76:7e:ba:a3:31:2a:31:03:44:49:43:75:da:
         9c:6c:1c:8e:34:a4:5a:a8:8e:2b:49:34:22:22:c9:0d:39:5d:
         34:88:b9:74:95:1b:59:96:97:7e:b8:99:e5:40:61:b8:a2:89:
         96:fd:fd:66:31:8c:b0:68:f8:90:88:15:e6:1a:67:b0:1c:5d:
         2c:93:df:f4:b4:88:71:a0:92:bf:e0:03:8e:f8:3e:e7:c7:cb:
         2b:7c:6b:fe
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMwj7XIn69hY92UwohkGf3yx92l0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY4MkNGRjdGODBFNDU4NzEzM0E0RkZFRkMxNjNCMTQx
Nzc0MURDNjAeFw0yNjA1MDMwMjEzMTBaFw0yNzA1MDIwMjE4MTBaMDMxMTAvBgNV
BAMTKDNBMTBBQTRDNzkzOTFDNEUyODE4Qzk5RThDQTY5MkQ0ODk2QUM0MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPHdMlVoYqu7w5+JByg2Ic1bXU
6NdgKlbM8KHAQ6asfL+cmJNgHe9uEd09KE/iIBfatxBUtmof0KNejwMu0U/oIVOx
ht2ydilIzbpSpNPde4SaGFDz+D+JyATZZ/PTvzbAB2s5ohnPc9BahkuA6OeMHota
pM2F8ZsjqR63EvOWd2rkwauQmydnZBdlNqyddVNpGJ7MdYgWa07q6mYb5dCWILci
YXwiJxRxdGSCBUM+Frzd+4SwHCdH9E23W4u4/xpYQ4xmPN2wQZr/q4MLUaLjg4h9
oXPr6jUt86s7y4jKRmT1Q5URwtXVkoh1fJjEQ4bpYuULz2xIvXu6ntIufmpJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUOhCqTHk5HE4oGMmejKaS1IlqxDAwHwYDVR0j
BBgwFoAUZoLP9/gORYcTOk/+/BY7FBd0HcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWU2YTdlNDYtYjZhZC00YTdkLWI5MzAtMWFiMGJmMDJkZDVkLzAvNjY4MkNGRjdG
ODBFNDU4NzEzM0E0RkZFRkMxNjNCMTQxNzc0MURDNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NjgyQ0ZGN0Y4MEU0NTg3MTMzQTRGRkVGQzE2M0IxNDE3NzQx
REM2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFlNmE3ZTQ2LWI2YWQtNGE3ZC1i
OTMwLTFhYjBiZjAyZGQ1ZC8wLzMyMzAzMjJlMzYzNTJlMzEzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpBeTANBgkqhkiG
9w0BAQsFAAOCAQEAj+X+qEvIEZQS97Ve0TAWcHLanTG3E2vqybpK9ZSzQQA6neDv
msxr34z+2G/43nScjVzv8pnH3mz7eWradgVdkokgr2Fb5FV1wB9Sk/9i+gYatELR
6tXF99UzKPy8BtVc7kew/Jb5OSYm8db3WOQfYuwIw5j1hoo0K3os6U5+tbpthrrQ
gTB/HDfu+dTZMek3vz0T1mKtn+eBnaeo47nZe6RhhObkYXF2frqjMSoxA0RJQ3Xa
nGwcjjSkWqiOK0k0IiLJDTldNIi5dJUbWZaXfriZ5UBhuKKJlv39ZjGMsGj4kIgV
5hpnsBxdLJPf9LSIcaCSv+ADjvg+58fLK3xr/g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:17 2026 by rpki-client