Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234332e302f32342d3234203d3e203234313938.roa
File:                     3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (raw, json)
Hash identifier:          uoDjto4Bon7pce7gaQoVwabXxUeeyeeN7W67OfZu0pY=
Subject key identifier:   64:CE:0F:C7:52:9C:37:C9:4C:1C:4A:01:65:DF:FA:90:B3:DE:0B:4C
Certificate issuer:       /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial:       5147B0E7F71101F6F3EED127ACA0BA78EAD4B262
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234332e302f32342d3234203d3e203234313938.roa
Signing time:             Sun 03 May 2026 02:35:42 +0000
ROA not before:           Sun 03 May 2026 02:30:42 +0000
ROA not after:            Sun 02 May 2027 02:35:42 +0000
asID:                     24198
IP address blocks:        202.93.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
                          rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:47:b0:e7:f7:11:01:f6:f3:ee:d1:27:ac:a0:ba:78:ea:d4:b2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
        Validity
            Not Before: May  3 02:30:42 2026 GMT
            Not After : May  2 02:35:42 2027 GMT
        Subject: CN=64CE0FC7529C37C94C1C4A0165DFFA90B3DE0B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:fc:d7:9d:ac:06:60:b8:92:96:7e:4d:68:
                    21:b5:1a:2f:f7:c0:0d:8e:f9:95:43:9b:bc:17:3a:
                    91:49:33:9e:e9:0d:d5:3f:05:63:cb:55:b6:ed:35:
                    b2:2f:e4:2e:64:4a:ce:41:d7:5a:a3:10:a0:a7:55:
                    bb:f8:d3:88:d6:06:89:48:e0:e8:65:a6:ae:62:6d:
                    b6:95:14:04:89:aa:46:d1:0f:2d:b3:0a:6e:63:f7:
                    3e:11:3f:83:4f:3e:ea:f0:d9:0b:d8:24:4d:d6:c1:
                    ac:bf:de:d0:49:f5:d7:0f:76:19:3d:4b:f1:5a:8d:
                    dd:8c:4d:45:ea:12:a5:7b:dd:1d:14:81:c6:06:9a:
                    88:62:b1:d6:96:72:f1:97:ba:45:55:4c:74:5f:5f:
                    aa:47:b6:97:d1:d5:11:2e:1c:9c:18:17:57:b5:2e:
                    90:24:64:30:29:b4:b5:c8:e4:f8:b3:43:d0:56:bb:
                    64:33:d7:7c:54:18:e3:cc:db:0f:c4:c2:21:2d:43:
                    24:43:b6:dc:80:39:fd:a2:82:08:c7:7a:83:a4:24:
                    d0:38:fc:f7:4c:68:53:cf:3d:3f:0e:d9:85:ac:85:
                    55:de:cb:cb:0e:58:e9:5b:27:f0:32:cf:42:38:65:
                    55:a7:e4:38:b7:6f:59:64:35:86:c7:d0:2c:26:61:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CE:0F:C7:52:9C:37:C9:4C:1C:4A:01:65:DF:FA:90:B3:DE:0B:4C
            X509v3 Authority Key Identifier:
                keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234332e302f32342d3234203d3e203234313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:5d:1b:72:df:5a:43:e6:0f:fd:2c:1b:d7:22:5f:ff:7a:eb:
         ed:32:c2:7f:92:ea:75:89:55:b7:44:5a:2a:fc:3f:d6:2a:b4:
         70:86:54:5c:a7:d1:e7:85:41:de:9f:f8:2f:52:aa:ee:21:97:
         85:e4:38:ac:ee:56:ed:c4:bf:2e:de:ac:5a:1b:33:e5:66:be:
         64:c3:43:ed:d5:75:b1:05:b1:fc:e7:52:fb:93:76:0c:ab:fc:
         f7:8b:6c:13:5a:32:ea:c6:4f:0a:e6:c7:6d:8d:1c:55:89:9f:
         79:9a:e2:69:be:bc:d6:26:65:6c:50:6f:dd:c2:8e:3f:eb:7d:
         8f:73:42:3d:63:00:4f:57:df:1e:b2:83:73:dd:95:8a:4f:76:
         42:66:5d:0b:50:48:17:f0:ce:42:4c:66:91:77:3c:97:77:87:
         bc:4e:69:58:ba:30:85:da:1d:e4:95:0d:13:49:0c:56:47:f9:
         90:4f:75:7a:99:dc:bf:02:77:6b:3d:d1:ed:c7:32:c7:ac:2e:
         5a:f0:01:7c:5e:15:4c:2d:30:9d:ac:82:47:d7:90:67:ca:4d:
         6d:68:c9:6b:c8:22:c5:dd:2e:6c:16:1d:21:56:a5:31:fe:a4:
         91:82:7e:01:70:8f:7f:fa:aa:dc:83:b3:f7:48:fb:f8:ee:3a:
         dd:e4:26:f1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUUew5/cRAfbz7tEnrKC6eOrUsmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVEQkJFQzY3ODE3N0I3MTU5QUQ5MDFBNDAyM0JBNTdB
QTQwOTZEQzAeFw0yNjA1MDMwMjMwNDJaFw0yNzA1MDIwMjM1NDJaMDMxMTAvBgNV
BAMTKDY0Q0UwRkM3NTI5QzM3Qzk0QzFDNEEwMTY1REZGQTkwQjNERTBCNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdHvzXnawGYLiSln5NaCG1Gi/3
wA2O+ZVDm7wXOpFJM57pDdU/BWPLVbbtNbIv5C5kSs5B11qjEKCnVbv404jWBolI
4Ohlpq5ibbaVFASJqkbRDy2zCm5j9z4RP4NPPurw2QvYJE3Wway/3tBJ9dcPdhk9
S/Fajd2MTUXqEqV73R0UgcYGmohisdaWcvGXukVVTHRfX6pHtpfR1REuHJwYF1e1
LpAkZDAptLXI5PizQ9BWu2Qz13xUGOPM2w/EwiEtQyRDttyAOf2iggjHeoOkJNA4
/PdMaFPPPT8O2YWshVXey8sOWOlbJ/Ayz0I4ZVWn5Di3b1lkNYbH0CwmYXZtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUZM4Px1KcN8lMHEoBZd/6kLPeC0wwHwYDVR0j
BBgwFoAUZdu+xngXe3FZrZAaQCO6V6pAltwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWFkNmRjYzktMTcwMC00OGViLTkwOTktNjY3OGY5MWJmNDRlLzAvNjVEQkJFQzY3
ODE3N0I3MTU5QUQ5MDFBNDAyM0JBNTdBQTQwOTZEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NURCQkVDNjc4MTc3QjcxNTlBRDkwMUE0MDIzQkE1N0FBNDA5
NkRDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhZDZkY2M5LTE3MDAtNDhlYi05
MDk5LTY2NzhmOTFiZjQ0ZS8wLzMyMzAzMjJlMzkzMzJlMzIzNDMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDMxMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpd8zANBgkqhkiG
9w0BAQsFAAOCAQEAT10bct9aQ+YP/Swb1yJf/3rr7TLCf5LqdYlVt0RaKvw/1iq0
cIZUXKfR54VB3p/4L1Kq7iGXheQ4rO5W7cS/Lt6sWhsz5Wa+ZMND7dV1sQWx/OdS
+5N2DKv894tsE1oy6sZPCubHbY0cVYmfeZriab681iZlbFBv3cKOP+t9j3NCPWMA
T1ffHrKDc92Vik92QmZdC1BIF/DOQkxmkXc8l3eHvE5pWLowhdod5JUNE0kMVkf5
kE91epncvwJ3az3R7ccyx6wuWvABfF4VTC0wnayCR9eQZ8pNbWjJa8gixd0ubBYd
IValMf6kkYJ+AXCPf/qq3IOz90j7+O463eQm8Q==
-----END CERTIFICATE-----
Generated at Wed May 13 08:34:42 2026 by rpki-client