Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31312e302f32342d3234203d3e203234323034.roa
File:                     3230332e38302e31312e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier:          Z8294bGV1BqnPHshmggOhT7N0D0yzpQrvHBjc8hglpQ=
Subject key identifier:   11:D0:A1:5D:1B:C6:95:AF:79:17:9B:9C:00:D5:62:F5:2E:04:2D:CF
Certificate issuer:       /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial:       6EB0865D05F08F53A265338125BCFAE2738751CA
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31312e302f32342d3234203d3e203234323034.roa
Signing time:             Sun 03 May 2026 02:33:07 +0000
ROA not before:           Sun 03 May 2026 02:28:07 +0000
ROA not after:            Sun 02 May 2027 02:33:07 +0000
asID:                     24204
IP address blocks:        203.80.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
                          rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b0:86:5d:05:f0:8f:53:a2:65:33:81:25:bc:fa:e2:73:87:51:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
        Validity
            Not Before: May  3 02:28:07 2026 GMT
            Not After : May  2 02:33:07 2027 GMT
        Subject: CN=11D0A15D1BC695AF79179B9C00D562F52E042DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ad:be:36:41:c7:f7:b1:f4:85:bf:b3:82:1d:
                    ff:23:6c:2b:cf:8c:5a:36:8a:38:8f:5a:a5:6c:47:
                    41:ca:1b:8d:de:90:ac:c1:d8:58:53:f9:00:cd:f7:
                    b4:ac:e5:f5:58:40:20:14:d1:26:97:eb:a0:6f:e8:
                    51:31:d2:f3:f7:07:8d:7d:8b:94:d1:62:56:c6:53:
                    85:34:3c:2b:19:57:45:36:88:32:85:65:02:d8:d7:
                    4d:9d:52:3b:24:7f:14:e6:0a:77:ba:60:53:14:de:
                    cf:b3:5e:90:7f:ae:89:9f:23:10:6b:8c:06:ed:e9:
                    c4:ea:ef:4f:4e:3d:25:c6:0f:1a:12:d4:82:a7:e6:
                    61:db:27:85:32:df:92:d1:2f:96:b9:ca:b2:fe:31:
                    9c:c9:d1:ad:eb:e7:8d:ce:37:32:0b:95:d3:25:b2:
                    ab:2c:51:dc:de:bc:9c:12:fc:ef:5d:67:72:9d:18:
                    e2:8c:93:70:8d:1d:ea:f6:e4:fe:18:14:f4:4a:a4:
                    b0:c8:74:f3:d6:6c:26:df:12:56:5d:00:a9:21:8b:
                    0f:1f:75:43:8d:0c:9f:3b:54:b6:4e:c7:be:0d:4b:
                    7d:d0:b1:32:86:86:28:72:ac:46:0a:db:f0:bb:3a:
                    87:18:0f:e7:20:a9:b8:75:db:ed:05:54:70:bf:2c:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:A1:5D:1B:C6:95:AF:79:17:9B:9C:00:D5:62:F5:2E:04:2D:CF
            X509v3 Authority Key Identifier:
                keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31312e302f32342d3234203d3e203234323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.80.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:5a:da:bb:6b:38:f6:27:65:ca:5e:a3:2f:a7:c4:83:fc:
         55:f5:43:2f:1d:cd:88:ab:8e:d2:50:f5:0a:36:b0:ba:ba:13:
         b7:fc:70:d5:b1:af:9a:10:51:4e:1f:42:15:2d:de:bd:aa:ab:
         90:fb:7b:ed:0d:68:5b:6a:a3:d4:a3:9b:03:8f:a8:94:b1:fb:
         51:e1:ce:2c:ca:c8:a5:6d:b6:98:8d:96:8c:a2:9f:ce:61:2e:
         7d:70:38:a7:8b:f8:84:2d:64:19:34:3e:1d:9d:b4:be:5e:e6:
         c1:1e:a0:07:76:d4:a7:43:88:99:b1:ce:89:3f:e9:3c:8b:dc:
         ba:26:0a:45:39:0a:1a:36:9b:2d:58:9d:24:93:e3:00:5f:08:
         b5:57:ec:f3:cf:81:76:70:f2:c8:cc:12:19:aa:e8:94:74:fd:
         f3:18:da:8a:db:36:61:12:ad:40:ee:ab:ed:69:48:49:ba:a5:
         49:bc:85:53:36:55:ac:8a:d0:44:2f:be:69:8e:2b:10:29:53:
         01:a1:4d:2f:11:74:ec:2d:69:0b:c7:a8:36:4a:e6:34:f8:40:
         f4:5e:1f:a6:04:11:06:3a:5e:81:fc:48:54:1d:11:e8:ee:fd:
         ee:ad:3c:70:ef:60:50:fe:af:3c:d5:c9:63:53:56:c9:91:bd:
         0c:64:41:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:37 2026 by rpki-client