Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32362e302f32342d3234203d3e203233393532.roa
File:                     3230322e39332e32362e302f32342d3234203d3e203233393532.roa (raw, json)
Hash identifier:          wkOR/tKRFg1S67lRSPwTcy9/cVjDL9uk2HigWHRxfeU=
Subject key identifier:   A7:2C:65:0E:8C:39:9C:27:74:A0:55:93:B9:69:C1:D8:C9:9B:54:1E
Certificate issuer:       /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F
Certificate serial:       2465050D1BA44DE596064F1BE77BE3EC841026DA
Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32362e302f32342d3234203d3e203233393532.roa
Signing time:             Sun 03 May 2026 02:27:48 +0000
ROA not before:           Sun 03 May 2026 02:22:48 +0000
ROA not after:            Sun 02 May 2027 02:27:48 +0000
asID:                     23952
IP address blocks:        202.93.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl
                          rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:65:05:0d:1b:a4:4d:e5:96:06:4f:1b:e7:7b:e3:ec:84:10:26:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F
        Validity
            Not Before: May  3 02:22:48 2026 GMT
            Not After : May  2 02:27:48 2027 GMT
        Subject: CN=A72C650E8C399C2774A05593B969C1D8C99B541E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:df:f0:b8:dc:39:4c:47:c8:34:7b:06:16:0b:
                    87:4d:88:fd:95:a8:b2:9f:96:57:f8:00:ab:1f:94:
                    ee:48:05:3f:b1:f4:ac:2e:ec:b9:0b:7a:36:80:96:
                    22:46:d3:d2:48:60:d5:24:ea:59:05:1d:23:4e:59:
                    ed:56:dd:85:aa:ef:97:66:26:b2:34:bc:05:a3:e1:
                    be:3d:81:ac:bc:30:9e:7c:cc:b7:85:c3:de:ba:14:
                    02:01:72:97:6a:29:eb:24:b7:65:b8:69:6a:87:74:
                    35:27:6a:13:fe:5b:4d:8b:97:7c:fa:f7:51:ac:eb:
                    ff:4f:60:93:2a:14:a1:40:6f:3e:16:be:a6:ca:c0:
                    72:60:92:83:28:16:50:ee:fa:23:ee:55:8e:33:80:
                    3e:dc:3a:bf:70:04:69:e1:7c:49:c3:20:e9:09:49:
                    71:de:dd:22:5c:93:93:26:3d:2d:16:26:e7:a2:ac:
                    05:6e:59:75:27:4e:78:a0:7c:8a:ee:20:c0:ad:69:
                    8f:a0:19:1d:54:e4:b0:66:db:77:1f:43:4b:b2:ce:
                    24:90:60:9d:d4:e8:e6:d8:42:ee:78:92:12:8f:ef:
                    ea:55:07:58:29:74:aa:d8:aa:57:ab:97:a7:cb:db:
                    d0:36:24:2f:f1:4a:5d:84:be:86:73:fc:76:4c:f1:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2C:65:0E:8C:39:9C:27:74:A0:55:93:B9:69:C1:D8:C9:9B:54:1E
            X509v3 Authority Key Identifier:
                keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32362e302f32342d3234203d3e203233393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:4d:b5:ea:b9:6b:c6:00:fd:60:e4:56:9b:50:ef:b6:ae:
         4b:47:6c:d5:1e:2f:ed:ce:cb:14:c9:5f:13:8b:4f:43:56:fb:
         06:1a:85:dd:14:1e:aa:19:0e:e9:ef:83:07:d2:8f:42:1a:9b:
         2a:1f:bb:d2:d9:a1:d5:5a:04:94:14:cf:3a:56:6d:2e:2d:e0:
         ea:2b:09:af:00:a3:f8:fa:10:71:da:d2:84:a0:a3:b2:1f:da:
         4f:73:0d:0f:f0:19:37:69:57:17:b0:0d:80:01:3a:a5:42:2e:
         6a:ee:3f:10:15:82:1b:6f:4e:76:c2:ee:36:27:df:4c:04:b8:
         cc:83:bd:aa:24:63:88:a8:e5:d1:c7:3c:22:6b:b2:52:52:c5:
         86:9f:4d:96:83:0f:34:66:74:35:d1:02:5a:21:76:24:12:37:
         7d:38:6a:db:e9:6f:ea:c8:7b:be:d9:a2:9a:3f:2a:55:cd:5a:
         9a:cf:9b:d7:a1:46:b4:06:c2:c6:85:44:75:7c:e9:47:b0:1d:
         38:df:2d:a8:63:6c:21:41:86:4d:54:01:06:2c:ef:25:2f:a0:
         82:da:da:39:21:55:82:de:54:18:89:d1:3f:ce:d2:bd:3c:e4:
         82:cf:af:fe:d1:cf:7d:f8:17:c2:56:b8:8a:32:dc:19:91:9f:
         59:1d:7e:0f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUJGUFDRukTeWWBk8b53vj7IQQJtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx
RTU3MEExRjAeFw0yNjA1MDMwMjIyNDhaFw0yNzA1MDIwMjI3NDhaMDMxMTAvBgNV
BAMTKEE3MkM2NTBFOEMzOTlDMjc3NEEwNTU5M0I5NjlDMUQ4Qzk5QjU0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW3/C43DlMR8g0ewYWC4dNiP2V
qLKfllf4AKsflO5IBT+x9Kwu7LkLejaAliJG09JIYNUk6lkFHSNOWe1W3YWq75dm
JrI0vAWj4b49gay8MJ58zLeFw966FAIBcpdqKeskt2W4aWqHdDUnahP+W02Ll3z6
91Gs6/9PYJMqFKFAbz4WvqbKwHJgkoMoFlDu+iPuVY4zgD7cOr9wBGnhfEnDIOkJ
SXHe3SJck5MmPS0WJueirAVuWXUnTnigfIruIMCtaY+gGR1U5LBm23cfQ0uyziSQ
YJ3U6ObYQu54khKP7+pVB1gpdKrYqlerl6fL29A2JC/xSl2EvoZz/HZM8QMvAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUpyxlDow5nCd0oFWTuWnB2MmbVB4wHwYDVR0j
BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2
NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw
QTFGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjOGFiM2UwLWNhNjgtNDJmNi05
OGY2LTY1NGEyNTJhODY0OC8wLzMyMzAzMjJlMzkzMzJlMzIzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzMzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXRowDQYJKoZIhvcN
AQELBQADggEBAGnCTbXquWvGAP1g5FabUO+2rktHbNUeL+3OyxTJXxOLT0NW+wYa
hd0UHqoZDunvgwfSj0Iamyofu9LZodVaBJQUzzpWbS4t4OorCa8Ao/j6EHHa0oSg
o7If2k9zDQ/wGTdpVxewDYABOqVCLmruPxAVghtvTnbC7jYn30wEuMyDvaokY4io
5dHHPCJrslJSxYafTZaDDzRmdDXRAlohdiQSN304atvpb+rIe77Zopo/KlXNWprP
m9ehRrQGwsaFRHV86UewHTjfLahjbCFBhk1UAQYs7yUvoILa2jkhVYLeVBiJ0T/O
0r085ILPr/7Rz334F8JWuIoy3BmRn1kdfg8=
-----END CERTIFICATE-----
Generated at Wed May 13 05:46:49 2026 by rpki-client