Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa
File:                     3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (raw, json)
Hash identifier:          Emh7sO7kJSNFsbIsXv30t/j66tuYFAQx0UDDDCsbvSk=
Subject key identifier:   62:C7:D9:C1:43:08:DA:B3:4E:DA:93:3E:AE:34:ED:7E:9E:D2:93:84
Certificate issuer:       /CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728
Certificate serial:       2C95DE7AA094789776F5FE4C50CCC8027A0B1B78
Authority key identifier: DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa
Signing time:             Sun 03 May 2026 02:25:30 +0000
ROA not before:           Sun 03 May 2026 02:20:30 +0000
ROA not after:            Sun 02 May 2027 02:25:30 +0000
asID:                     142375
IP address blocks:        203.145.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl
                          rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:95:de:7a:a0:94:78:97:76:f5:fe:4c:50:cc:c8:02:7a:0b:1b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728
        Validity
            Not Before: May  3 02:20:30 2026 GMT
            Not After : May  2 02:25:30 2027 GMT
        Subject: CN=62C7D9C14308DAB34EDA933EAE34ED7E9ED29384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:ec:c5:5a:1f:b0:fa:b4:08:b7:2f:87:4a:
                    4f:31:02:9d:38:65:94:ca:62:7a:f6:d0:7e:e3:ee:
                    5f:e6:ba:06:c7:75:8d:31:c6:cf:4d:23:b9:25:44:
                    fe:41:e9:b0:be:f0:25:d4:37:b2:e1:c8:b1:b3:04:
                    5a:2f:c7:d8:3b:65:92:18:39:da:d8:cd:c0:fc:db:
                    ed:90:8a:42:18:2c:92:c9:4e:61:57:4a:17:9f:64:
                    cb:fb:d5:c3:37:a0:77:44:c7:7b:e0:1a:ad:ac:81:
                    f8:e7:e0:0e:45:db:78:66:c4:d8:fb:e1:14:18:72:
                    fa:2b:29:ed:cc:c6:26:97:03:77:06:fd:7e:82:2c:
                    a3:c7:5e:d5:34:99:6f:f7:00:96:98:c3:ab:a7:ef:
                    74:9f:57:6a:b8:da:54:c1:04:7f:1b:99:d9:f1:29:
                    24:f3:28:d9:39:59:c6:09:eb:17:58:d0:a2:25:f8:
                    ab:29:fa:72:f0:09:ed:c1:19:46:7a:f2:e5:ad:5c:
                    f2:b6:f0:42:f1:15:86:86:1d:aa:18:e1:7f:9c:f0:
                    5d:8d:35:05:94:df:87:4c:0c:c4:3e:03:01:34:41:
                    78:a9:9d:1d:1c:80:9d:61:ac:30:a3:51:88:c6:f2:
                    ed:6b:5f:40:75:1d:29:af:39:7b:63:ba:1d:7c:87:
                    f1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C7:D9:C1:43:08:DA:B3:4E:DA:93:3E:AE:34:ED:7E:9E:D2:93:84
            X509v3 Authority Key Identifier:
                keyid:DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:18:24:d3:05:90:c4:ca:a2:6c:98:83:45:cf:d1:19:ba:
         35:59:29:c9:d2:6b:86:47:1b:42:08:85:7b:6d:ea:71:f1:2f:
         88:32:ed:a4:fb:7e:54:63:9d:c0:3b:2c:3d:75:61:e7:e8:fc:
         30:29:5a:e4:c5:39:d1:95:ba:35:85:e8:8c:b4:eb:d3:fb:6e:
         7d:6c:f1:5c:b3:45:7a:b4:0b:3e:a1:b8:28:a0:64:b6:48:a0:
         33:a4:39:6a:3d:88:96:91:45:c5:ef:f0:ad:85:2b:3c:4b:92:
         04:29:f3:e5:fe:d2:37:2b:16:49:5c:15:38:d4:8d:bb:2c:47:
         71:84:b5:f4:5b:c5:0a:2c:46:0c:52:c2:bb:02:03:fd:de:65:
         10:8a:34:cb:84:a7:da:95:95:b1:6a:4a:f4:1c:a5:51:15:74:
         ae:10:42:51:bc:a0:8e:86:59:19:ab:05:09:28:f2:d6:ad:71:
         b2:17:32:12:66:5b:73:f6:55:9f:f0:3e:b1:7e:bb:58:97:49:
         e9:b5:38:4c:18:c2:a5:fa:03:3e:92:6b:9d:f1:3a:a8:8b:2c:
         e4:00:33:21:90:f6:47:c7:e9:2b:a3:fc:c4:ff:11:90:a0:6f:
         7d:61:70:0c:f0:bb:dc:5e:fc:68:fb:f9:e7:aa:94:4a:af:0e:
         65:0b:61:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:00 2026 by rpki-client