Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234322e302f32342d3234203d3e203234313938.roa
File:                     3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (raw, json)
Hash identifier:          ahy9pgYJ/JRzmM8+Ec6KtXzoFXDTJf+AENe9YjQMlak=
Subject key identifier:   7F:D0:9C:65:83:EC:2C:BF:9B:6D:45:E4:45:E2:40:6D:07:E0:BB:FC
Certificate issuer:       /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial:       0932A7EB606CE0ADBC3B55A70A5FD4DDDDE01E82
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234322e302f32342d3234203d3e203234313938.roa
Signing time:             Sun 03 May 2026 02:35:46 +0000
ROA not before:           Sun 03 May 2026 02:30:46 +0000
ROA not after:            Sun 02 May 2027 02:35:46 +0000
asID:                     24198
IP address blocks:        202.93.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
                          rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:32:a7:eb:60:6c:e0:ad:bc:3b:55:a7:0a:5f:d4:dd:dd:e0:1e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
        Validity
            Not Before: May  3 02:30:46 2026 GMT
            Not After : May  2 02:35:46 2027 GMT
        Subject: CN=7FD09C6583EC2CBF9B6D45E445E2406D07E0BBFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:8a:8d:a2:2c:21:40:cc:b8:60:7c:65:f9:
                    fa:77:c7:27:f2:d6:73:e3:59:20:a8:2f:12:be:84:
                    0b:23:34:d4:e5:1c:af:06:c0:53:9a:7c:1a:89:0d:
                    ff:a5:40:3b:e3:f5:ea:1f:11:65:ec:e6:96:83:56:
                    62:6b:c9:7b:0f:e0:04:af:9f:f1:c8:8a:b1:6d:dc:
                    a3:db:dc:b7:4c:90:3a:d2:de:09:09:72:ed:34:f3:
                    47:e7:f6:27:14:56:29:6d:27:6b:99:94:ee:85:48:
                    5a:9d:8d:2b:e0:62:e2:b7:00:51:14:85:c2:03:25:
                    ba:59:3d:d6:84:c7:84:95:8b:e5:3a:f5:3e:61:39:
                    29:2a:d5:2f:ac:c6:d6:57:a4:14:d9:c7:be:e0:5f:
                    b6:8b:0b:e3:08:c0:c4:8c:3f:6e:6e:45:e5:b0:bc:
                    78:2a:1e:93:8f:04:61:bc:1f:f3:2e:19:b5:9e:45:
                    0b:2f:04:43:50:3e:6f:5f:73:81:99:b6:37:d7:a3:
                    2d:6f:96:da:b9:e3:e5:70:84:e6:ab:ca:9a:59:c4:
                    73:ae:d3:b3:40:da:5b:40:48:1a:00:e0:b0:1b:a6:
                    2f:75:93:67:cb:31:8a:fb:1b:d8:8e:29:3c:f8:fe:
                    36:1f:80:68:3c:e3:6f:e2:38:86:ed:1a:2c:da:90:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D0:9C:65:83:EC:2C:BF:9B:6D:45:E4:45:E2:40:6D:07:E0:BB:FC
            X509v3 Authority Key Identifier:
                keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234322e302f32342d3234203d3e203234313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:36:a5:49:32:e0:19:29:bc:07:53:31:c8:50:17:65:62:2e:
         ff:c4:20:9d:8a:83:9c:70:2a:62:eb:de:28:25:ab:40:b2:ae:
         c8:c6:65:5f:93:68:7a:fa:66:21:da:88:96:ec:3f:ff:c6:27:
         7c:54:0b:2d:d7:bb:25:93:19:64:d6:da:d8:b8:7d:b9:89:44:
         75:7e:bb:5b:1e:8a:95:12:69:01:d3:0e:e0:f1:6c:fc:ee:bc:
         c8:07:5c:ce:0c:66:9e:f7:3d:9a:28:96:c4:fb:a4:13:9c:b5:
         34:d5:f7:15:d2:fc:bb:2e:3f:1a:24:cd:26:d2:24:d5:0e:95:
         c7:1f:12:8b:29:6f:31:af:68:ce:a2:d0:47:b7:5d:83:c9:0c:
         0e:68:fc:c6:a5:4d:87:5e:41:6f:e0:a3:f7:fe:0a:9e:f3:7a:
         c1:d5:d4:99:6f:be:c8:14:68:62:40:ac:66:10:3b:1c:06:b1:
         be:54:e1:e5:96:a0:69:46:25:0a:4f:10:19:5e:ce:37:d9:fe:
         0f:f9:fd:ca:b6:c4:7c:99:01:02:73:76:08:b1:a1:55:ba:ee:
         21:c7:68:e7:79:02:dd:ef:6d:19:79:68:cc:18:cb:08:a9:b2:
         c2:71:9e:36:19:50:6d:53:88:e0:05:30:35:89:95:f8:54:ed:
         20:42:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:00 2026 by rpki-client