Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa
File:                     3230332e38302e31322e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier:          h2tT8uN39aiQAWcw3BdGn9c/xBwZZb5nFDTta01r+Os=
Subject key identifier:   77:32:3C:50:0A:04:CE:60:9A:AE:8F:26:A5:06:04:7B:1C:AC:4D:AB
Certificate issuer:       /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial:       6943C3D6732CDF3A42700AC1EB7F46CF56A33439
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa
Signing time:             Sun 03 May 2026 02:33:05 +0000
ROA not before:           Sun 03 May 2026 02:28:05 +0000
ROA not after:            Sun 02 May 2027 02:33:05 +0000
asID:                     24204
IP address blocks:        203.80.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
                          rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:43:c3:d6:73:2c:df:3a:42:70:0a:c1:eb:7f:46:cf:56:a3:34:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
        Validity
            Not Before: May  3 02:28:05 2026 GMT
            Not After : May  2 02:33:05 2027 GMT
        Subject: CN=77323C500A04CE609AAE8F26A506047B1CAC4DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:76:34:e2:74:a7:95:30:c8:11:46:55:b7:
                    dd:9e:60:77:9a:7e:86:91:27:0c:60:0e:ee:f4:fd:
                    cf:a2:69:24:d4:e0:9b:7d:7e:e8:9f:5a:bf:47:bc:
                    9d:3a:43:b5:6c:92:11:f8:2e:84:d5:43:29:c5:e9:
                    90:d6:05:90:c3:51:98:27:89:35:d1:81:8f:d7:0e:
                    cc:fd:fe:d5:3a:13:a3:5c:8e:f5:f1:e1:59:89:5c:
                    01:17:c0:2e:75:91:9a:e2:11:3b:4e:9c:2c:f4:17:
                    a5:c2:3c:e4:06:19:16:e7:7f:d9:0f:fd:70:ea:62:
                    c3:61:57:b6:c3:d4:b0:22:5c:dd:24:0f:e1:1d:22:
                    61:05:8e:85:74:29:a7:7e:83:e7:e3:d1:3b:bc:90:
                    27:65:41:ca:73:b2:fe:63:62:91:34:eb:af:02:8c:
                    2a:49:ab:f7:70:8e:61:9c:49:df:57:35:4d:a2:b7:
                    00:8b:fe:7e:bf:0d:93:04:56:b4:9a:ba:ca:b1:b3:
                    12:85:79:cf:e2:29:1f:4b:ff:f6:dd:0e:7d:0e:63:
                    6f:58:31:b2:e5:d3:df:4f:84:25:68:3a:59:61:32:
                    d3:d9:79:54:90:75:9e:9c:14:f0:16:4d:c0:d2:1a:
                    2a:b9:03:d4:95:94:16:16:e8:4a:5e:ff:ab:f0:3a:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:32:3C:50:0A:04:CE:60:9A:AE:8F:26:A5:06:04:7B:1C:AC:4D:AB
            X509v3 Authority Key Identifier:
                keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.80.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:07:80:f6:b9:54:78:a1:cc:46:b9:83:d5:8b:88:77:5f:
         ec:a0:71:57:bf:5c:fd:62:87:c9:e3:3c:8f:b5:33:20:46:3d:
         e1:b0:b9:31:63:69:cc:53:1f:59:31:46:c2:ad:a5:c2:73:06:
         39:bd:1e:a1:18:35:10:c2:0c:c9:9f:f2:4d:79:ba:ab:d7:e1:
         dc:e0:51:80:5e:a6:8f:f7:82:06:28:ba:72:33:d1:b7:13:ea:
         b2:8a:5a:ec:da:c7:4b:0d:f1:47:06:5c:cb:4b:92:11:74:ee:
         0b:cc:a9:f8:65:a5:81:3e:98:f9:42:60:67:94:80:b1:bb:24:
         04:03:74:4e:2b:56:c4:62:80:24:52:cf:79:6b:92:67:87:f6:
         5e:ad:59:74:9d:57:8f:58:c3:16:ea:4c:66:b4:e2:65:d5:cd:
         f5:b6:e9:f4:9d:7c:8c:93:4c:fb:4b:d6:50:95:a6:85:ef:e0:
         08:c0:ed:68:c1:06:82:c5:1f:13:89:ce:80:c1:ab:07:df:01:
         43:b7:a8:b8:bc:2a:d1:1a:89:11:49:56:3c:fe:fd:4d:3d:7d:
         e9:f6:92:32:7e:62:0b:4d:f5:0f:88:95:e6:d0:92:a2:ef:52:
         01:bf:fb:d3:7f:d9:d4:9a:2c:df:d3:a6:79:63:94:d7:cc:ee:
         d9:bb:3d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:03 2026 by rpki-client