Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa
File:                     3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (raw, json)
Hash identifier:          4wSG33FQW497l9wd4KCTscDggwNpLmu4SJOzxz44RVQ=
Subject key identifier:   8B:09:38:13:EE:4E:27:CA:77:32:4F:AF:46:B7:41:C0:FF:54:05:E0
Certificate issuer:       /CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Certificate serial:       49126C7F2FA780259525B23E36C6CE8510BAC896
Authority key identifier: 05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa
Signing time:             Sun 03 May 2026 02:21:59 +0000
ROA not before:           Sun 03 May 2026 02:16:59 +0000
ROA not after:            Sun 02 May 2027 02:21:59 +0000
asID:                     23949
IP address blocks:        202.150.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
                          rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:12:6c:7f:2f:a7:80:25:95:25:b2:3e:36:c6:ce:85:10:ba:c8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
        Validity
            Not Before: May  3 02:16:59 2026 GMT
            Not After : May  2 02:21:59 2027 GMT
        Subject: CN=8B093813EE4E27CA77324FAF46B741C0FF5405E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:72:b1:77:b4:2c:bb:0c:11:f3:59:76:e8:
                    ad:21:da:a2:79:f0:5d:7f:a1:b1:9d:49:88:d0:79:
                    19:03:59:61:0c:c5:15:e4:f7:57:e2:72:67:77:87:
                    af:e8:16:70:85:a1:c1:a8:2a:bc:1e:d9:ac:20:27:
                    23:69:cb:1c:c4:59:2b:db:62:d8:8c:f3:d7:1d:56:
                    76:7b:68:34:05:6c:1b:65:5c:fa:93:a7:ac:33:2b:
                    e8:b3:fb:f3:c2:98:c3:4e:fb:89:e1:8a:36:14:43:
                    14:e7:56:9b:97:ec:9b:5c:2d:70:04:79:56:db:19:
                    69:bb:c0:2e:95:30:64:e1:51:18:aa:c7:5b:e9:bd:
                    dd:df:e2:95:29:ed:1f:51:54:8e:4b:06:5d:00:7b:
                    ad:9b:13:4f:cb:33:fe:1a:2e:91:8a:de:fc:25:84:
                    1d:33:e5:d7:0d:7b:95:46:33:f9:7a:57:40:6c:2d:
                    90:03:86:ee:a1:3a:74:88:e6:2a:1e:6b:1f:e7:26:
                    37:a0:79:74:0d:0a:cc:a5:74:81:72:9a:5e:f6:fd:
                    41:32:63:89:00:4a:d3:be:ba:2b:0f:f7:5b:00:19:
                    42:69:7c:85:1f:51:d4:b2:1c:3e:f7:c9:48:7b:cf:
                    0d:a2:99:43:9b:e2:0d:8e:24:ee:e8:62:ec:d3:d9:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:38:13:EE:4E:27:CA:77:32:4F:AF:46:B7:41:C0:FF:54:05:E0
            X509v3 Authority Key Identifier:
                keyid:05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:b4:5a:a0:ea:ea:86:d3:bf:78:1b:13:98:09:3a:6d:f8:
         97:4a:63:98:0e:ed:47:14:72:6b:25:a9:f4:4f:f0:d4:03:3d:
         1f:88:01:29:64:6e:c6:85:ee:54:dd:68:d9:34:57:4d:0c:2c:
         78:74:43:19:11:5d:7d:6e:1f:22:2f:c9:97:94:d4:a4:4e:0d:
         54:8b:04:09:53:c3:6b:92:c0:4f:77:2d:63:b7:ae:e3:e5:dc:
         88:06:0f:10:cf:a9:71:03:60:d6:4a:32:85:62:39:48:8e:ad:
         63:91:60:2b:9e:6f:0c:c4:76:6c:e3:5c:7a:9e:fd:0c:c8:38:
         d6:47:bc:54:c4:12:ec:c6:9f:87:cf:57:8b:e4:d4:ed:92:53:
         ba:64:03:70:a6:05:0b:bc:6c:0d:f5:f7:bc:04:9a:dc:36:11:
         d1:93:68:cf:7c:f2:23:70:5b:98:7c:8c:fb:fd:15:76:17:b4:
         f9:2c:34:ff:b2:d8:42:de:d3:89:c4:51:81:8a:24:ed:6c:a7:
         08:be:ec:4d:c9:58:6f:33:96:27:29:ca:cf:a5:11:aa:fa:14:
         e2:11:1b:05:a5:53:b5:c7:59:31:9c:b9:18:81:44:a3:4d:d3:
         e8:f5:a1:38:7d:40:12:cb:91:45:fa:00:f6:ba:2b:50:cb:68:
         6d:62:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:58 2026 by rpki-client