Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3233203d3e203338373738.roa
File:                     3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier:          RES+IzVfinBoTB3WoZkBb0K0PMLwmwjFh6203Hnv7Fk=
Subject key identifier:   94:57:AA:F2:7C:20:8E:95:03:31:07:92:51:16:24:DD:37:4C:60:5E
Certificate issuer:       /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial:       3135FE2CB90F9A28C179226833E26E507970CDA3
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3233203d3e203338373738.roa
Signing time:             Sun 03 May 2026 02:35:46 +0000
ROA not before:           Sun 03 May 2026 02:30:46 +0000
ROA not after:            Sun 02 May 2027 02:35:46 +0000
asID:                     38778
IP address blocks:        202.93.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
                          rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:35:fe:2c:b9:0f:9a:28:c1:79:22:68:33:e2:6e:50:79:70:cd:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
        Validity
            Not Before: May  3 02:30:46 2026 GMT
            Not After : May  2 02:35:46 2027 GMT
        Subject: CN=9457AAF27C208E9503310792511624DD374C605E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:9f:5f:78:2b:89:1e:b9:34:e8:96:66:96:
                    41:39:15:8b:20:a0:b7:dd:f7:f4:be:b9:d7:69:6c:
                    e4:0b:57:e4:1a:af:26:1c:01:03:0a:24:f5:3b:15:
                    b8:d1:5a:03:03:52:08:a1:bf:e2:5a:62:00:9f:b5:
                    8a:e2:91:45:97:87:2d:b7:c1:d8:cd:38:7d:a9:ee:
                    cd:6e:75:a7:1b:7d:e1:ee:2a:df:51:c3:9a:59:3a:
                    8c:e1:e5:76:78:a0:71:f7:c4:69:77:26:2e:aa:61:
                    0c:7e:ee:84:f2:c1:c6:5e:c4:6e:b3:56:c2:76:43:
                    da:62:c6:05:52:32:cc:36:74:f0:44:e8:ea:6f:0b:
                    24:f8:2c:10:cd:cc:e2:0b:f1:44:99:0b:1b:e3:43:
                    43:f2:bb:8b:3c:5d:9b:a4:71:bc:1c:79:eb:fb:8f:
                    b8:60:15:92:5a:f0:7a:04:db:f7:1d:1e:2a:10:5c:
                    84:aa:44:20:a8:01:ce:95:b6:6d:ae:bb:0b:ca:bc:
                    e7:7b:4d:b0:94:1d:cf:98:7a:9e:f2:25:a5:30:38:
                    ca:91:31:41:84:84:9d:85:84:d3:73:68:ab:10:49:
                    9c:3e:4c:73:b3:c9:89:0d:bb:bc:2e:4f:43:b2:23:
                    0b:7f:19:4d:a2:75:07:40:32:88:ba:66:ab:87:4e:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:57:AA:F2:7C:20:8E:95:03:31:07:92:51:16:24:DD:37:4C:60:5E
            X509v3 Authority Key Identifier:
                keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3233203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:3c:e1:7e:cc:f9:af:7d:29:40:de:79:52:45:b5:ae:4d:98:
         a2:02:61:fd:74:63:48:d5:f3:cc:30:fe:a8:21:f1:08:d7:29:
         62:9a:ef:8b:a1:94:06:31:11:b6:7b:4d:1d:18:b0:eb:6b:3e:
         e4:50:53:a3:8e:69:c6:dd:e6:1c:f4:1a:fc:a9:8f:9c:b8:a3:
         5a:e8:c7:7a:28:2d:8a:5f:23:03:67:b0:3b:7b:a2:2a:06:b6:
         63:70:4a:5b:53:b1:9b:b3:fe:34:cf:91:8e:be:fa:37:7c:55:
         18:ad:2f:d7:24:4a:90:21:9a:46:0f:c4:e4:9f:ba:b8:03:cf:
         78:7e:9e:2a:94:72:18:c9:81:36:93:1c:0b:3e:ee:31:7b:44:
         05:12:48:95:c3:e3:39:bb:dd:02:10:a8:a5:24:66:69:0e:df:
         c6:68:28:d6:80:3e:86:ac:3e:57:91:c2:0b:7e:93:77:cd:48:
         bc:f1:5f:90:c1:32:70:a4:7a:c5:cf:9a:7b:14:a0:09:19:b1:
         96:11:03:b4:c5:99:03:cf:c2:1c:7c:d6:5a:30:d9:26:33:9f:
         df:59:f4:e7:86:53:5c:78:91:c8:14:ec:1c:a3:d7:46:3b:92:
         db:19:13:36:fb:cd:60:0c:bc:b7:24:a4:5d:65:ea:2d:41:94:
         50:26:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:56 2026 by rpki-client