Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35352e302f32342d3234203d3e203338313435.roa
File:                     3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier:          gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=
Subject key identifier:   8E:1F:F0:9C:56:B2:84:F9:82:5D:AE:FE:15:51:EB:C1:42:9C:C1:3D
Certificate issuer:       /CN=FAF852347432F9918D1450C78A1EC83C3599937A
Certificate serial:       5EF7393C56DCDA553A84A87B2394C79733F4D287
Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35352e302f32342d3234203d3e203338313435.roa
Signing time:             Sun 03 May 2026 02:34:35 +0000
ROA not before:           Sun 03 May 2026 02:29:35 +0000
ROA not after:            Sun 02 May 2027 02:34:35 +0000
asID:                     38145
IP address blocks:        202.180.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl
                          rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f7:39:3c:56:dc:da:55:3a:84:a8:7b:23:94:c7:97:33:f4:d2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A
        Validity
            Not Before: May  3 02:29:35 2026 GMT
            Not After : May  2 02:34:35 2027 GMT
        Subject: CN=8E1FF09C56B284F9825DAEFE1551EBC1429CC13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bf:b8:06:63:ee:32:9f:1c:78:82:a0:dd:99:
                    9f:1d:ea:59:b0:3a:a4:44:fb:a5:6f:6d:71:6d:90:
                    35:39:ce:f7:da:37:23:f5:2f:1c:e4:35:77:84:b7:
                    f6:e5:01:85:9d:77:c9:4b:62:e1:b4:63:1b:2e:80:
                    a2:97:f4:02:4a:13:f8:21:6b:a6:ee:b3:08:d8:b7:
                    52:26:9b:4f:e8:70:1f:fa:11:86:44:a7:89:3c:94:
                    46:3a:fa:56:8e:e6:5a:74:ec:45:3c:50:4d:65:8c:
                    bb:92:cf:64:cd:8f:1b:17:94:2d:cd:dc:34:42:c9:
                    f1:44:3c:33:6c:b7:ba:f6:89:61:e9:8d:f1:55:c3:
                    1e:95:1b:96:72:81:90:d1:5e:e9:40:dd:93:ac:a9:
                    df:43:a7:ed:a3:8e:3f:4c:51:7a:d7:3c:67:b6:18:
                    5c:83:c4:62:1c:89:71:75:2b:b0:49:f2:fd:bd:23:
                    eb:b2:ec:5c:55:61:bb:d2:4f:ee:2a:be:9e:44:c4:
                    c3:ec:37:f9:c9:57:34:41:b7:5b:b3:df:61:71:ad:
                    5d:c7:6e:c0:68:9a:be:a7:aa:df:72:29:16:07:fa:
                    c6:36:c3:5e:91:70:96:61:cd:37:2e:01:8c:04:f1:
                    ad:05:95:61:f6:2e:67:07:ea:de:a4:e7:8f:6f:3c:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1F:F0:9C:56:B2:84:F9:82:5D:AE:FE:15:51:EB:C1:42:9C:C1:3D
            X509v3 Authority Key Identifier:
                keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35352e302f32342d3234203d3e203338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:79:88:b5:35:20:ef:d9:be:8d:3a:ed:17:11:07:49:9b:7a:
         74:6d:3c:ed:c6:97:6e:5b:5f:cc:a7:d2:97:00:7a:2c:52:e1:
         62:2c:81:fa:34:6b:e5:22:77:58:20:41:23:90:0f:a2:d0:da:
         77:5d:43:4f:8e:f3:97:8a:2d:e8:34:e1:3d:cc:f5:5a:4c:49:
         02:87:c3:a0:c8:b9:8e:87:38:5f:0e:9c:a3:28:91:d0:4c:e4:
         6e:60:d3:72:f3:d8:88:12:5b:e7:f7:54:43:db:9f:ea:cd:a9:
         b0:d3:3f:47:c5:b6:6e:9f:54:ff:d1:45:07:1a:cc:19:0e:dc:
         95:33:56:e9:f7:29:6b:48:ac:e1:b1:9e:6a:d4:64:59:3a:74:
         37:c9:28:20:e1:3d:c0:5e:82:37:87:f0:24:ed:c3:28:8b:49:
         17:ea:5c:c7:fa:8d:53:c7:e1:40:8f:59:56:e7:9e:e5:f5:86:
         d7:c2:c6:4e:ea:87:09:f9:47:da:34:b9:ab:b5:73:e0:4f:22:
         1f:c7:18:9b:8f:24:9d:2a:69:44:fd:49:8c:99:10:8b:d5:5a:
         c4:f3:b3:42:01:78:00:2b:e2:ac:c1:1f:2a:07:39:91:55:66:
         6d:fd:f2:a7:60:9b:ac:c0:14:89:45:5d:a4:08:95:a8:1b:12:
         ab:52:fb:f2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXvc5PFbc2lU6hKh7I5THlzP00ocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz
NTk5OTM3QTAeFw0yNjA1MDMwMjI5MzVaFw0yNzA1MDIwMjM0MzVaMDMxMTAvBgNV
BAMTKDhFMUZGMDlDNTZCMjg0Rjk4MjVEQUVGRTE1NTFFQkMxNDI5Q0MxM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDov7gGY+4ynxx4gqDdmZ8d6lmw
OqRE+6VvbXFtkDU5zvfaNyP1LxzkNXeEt/blAYWdd8lLYuG0YxsugKKX9AJKE/gh
a6buswjYt1Imm0/ocB/6EYZEp4k8lEY6+laO5lp07EU8UE1ljLuSz2TNjxsXlC3N
3DRCyfFEPDNst7r2iWHpjfFVwx6VG5ZygZDRXulA3ZOsqd9Dp+2jjj9MUXrXPGe2
GFyDxGIciXF1K7BJ8v29I+uy7FxVYbvST+4qvp5ExMPsN/nJVzRBt1uz32FxrV3H
bsBomr6nqt9yKRYH+sY2w16RcJZhzTcuAYwE8a0FlWH2LmcH6t6k549vPOZnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUjh/wnFayhPmCXa7+FVHrwUKcwT0wHwYDVR0j
BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3
NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5
MzdBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3OTg0ZTNhLTQ4ZjktNGNkYS1i
ZTZjLTQwMDZjMDhmOGZkMi8wLzMyMzAzMjJlMzEzODMwMmUzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMq0NzANBgkqhkiG
9w0BAQsFAAOCAQEANnmItTUg79m+jTrtFxEHSZt6dG087caXbltfzKfSlwB6LFLh
YiyB+jRr5SJ3WCBBI5APotDad11DT47zl4ot6DThPcz1WkxJAofDoMi5joc4Xw6c
oyiR0EzkbmDTcvPYiBJb5/dUQ9uf6s2psNM/R8W2bp9U/9FFBxrMGQ7clTNW6fcp
a0is4bGeatRkWTp0N8koIOE9wF6CN4fwJO3DKItJF+pcx/qNU8fhQI9ZVuee5fWG
18LGTuqHCflH2jS5q7Vz4E8iH8cYm48knSppRP1JjJkQi9VaxPOzQgF4ACvirMEf
Kgc5kVVmbf3yp2CbrMAUiUVdpAiVqBsSq1L78g==
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:23 2026 by rpki-client