Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32342d3234203d3e203338373738.roa
File:                     3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          ryDBz/OArSkajCTSmWMTBuq6yxPVuRRR4FSfEXo1xKg=
Subject key identifier:   9C:93:58:16:82:10:D3:D9:98:DC:0D:7E:DB:45:8B:FF:22:4F:68:75
Certificate issuer:       /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial:       0B73297BA215C5E9AD12D1C3A454FC1CCDA102DC
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32342d3234203d3e203338373738.roa
Signing time:             Sun 03 May 2026 02:35:42 +0000
ROA not before:           Sun 03 May 2026 02:30:42 +0000
ROA not after:            Sun 02 May 2027 02:35:42 +0000
asID:                     38778
IP address blocks:        202.93.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
                          rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:73:29:7b:a2:15:c5:e9:ad:12:d1:c3:a4:54:fc:1c:cd:a1:02:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
        Validity
            Not Before: May  3 02:30:42 2026 GMT
            Not After : May  2 02:35:42 2027 GMT
        Subject: CN=9C9358168210D3D998DC0D7EDB458BFF224F6875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:09:91:68:8c:cf:a4:09:07:79:2b:9b:32:
                    7c:ec:d0:9e:0c:65:71:18:90:07:81:d0:74:e5:d3:
                    bd:4d:57:af:2f:a1:ab:f5:82:a5:ab:94:a0:04:09:
                    1f:15:dc:34:c8:fc:e2:c2:89:d2:4a:5c:11:78:55:
                    60:51:f7:0f:de:73:b5:84:51:13:85:b8:c5:20:01:
                    72:64:e8:eb:13:55:ed:77:1f:1f:d2:c2:de:fa:17:
                    33:c2:33:af:75:24:e0:04:b2:f9:76:34:ff:94:ed:
                    d8:cb:05:34:0c:b7:18:13:37:38:64:41:72:ca:3c:
                    80:71:bf:b7:97:b9:fb:a6:bb:d7:b1:d9:53:11:53:
                    79:30:c1:cf:95:ec:b7:db:70:fb:9f:da:dc:a0:45:
                    f0:69:c2:d4:16:37:f0:ad:4d:a6:bc:55:2d:bc:ef:
                    b0:97:bd:64:6c:fb:87:37:fa:17:4d:72:83:fb:11:
                    c9:ab:c5:20:87:a5:56:92:ea:44:18:d0:eb:1d:d0:
                    bb:a2:de:03:43:ff:01:05:e0:7d:e4:12:88:98:47:
                    45:5c:73:17:04:32:58:24:b3:8f:79:f8:f3:c9:e4:
                    f6:04:fe:da:4c:a8:90:03:87:a9:14:ed:2e:a6:db:
                    07:ee:8b:4f:90:71:73:43:09:ad:6d:b1:77:5f:4e:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:93:58:16:82:10:D3:D9:98:DC:0D:7E:DB:45:8B:FF:22:4F:68:75
            X509v3 Authority Key Identifier:
                keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:88:0c:35:fc:9a:83:1b:6a:c1:06:04:a3:39:e3:19:cf:
         37:2f:ec:6b:f6:29:68:33:bb:8c:f1:3e:d9:b6:97:cf:37:98:
         bc:29:ae:d9:dd:f1:c6:44:0b:af:43:64:0d:51:18:a3:09:d0:
         bf:d7:24:e6:9e:b8:5d:0d:94:6b:c4:87:30:16:cc:28:ce:cc:
         d7:0e:55:23:0f:6f:43:d8:cf:6f:80:75:1c:b5:5c:68:c5:aa:
         fe:55:9b:e7:bf:11:c4:30:8d:5d:d2:e2:24:b7:db:48:1f:12:
         28:07:cb:aa:17:0f:15:94:54:40:87:2a:80:d4:c7:c8:4b:9e:
         b0:93:e9:fc:f3:5f:e1:f2:30:7f:c2:76:da:12:b0:5f:de:ba:
         97:c5:dc:7c:f9:bf:e9:90:f3:55:30:0b:fc:b9:c0:81:a3:05:
         6d:3c:49:99:51:7e:a3:31:2d:f1:fd:bb:01:cf:65:05:d0:2a:
         f0:13:ce:62:74:e9:24:59:1d:16:d8:4a:ee:9c:f0:ac:c2:dd:
         6f:4b:38:34:b7:55:51:c6:9d:b4:a4:92:51:ec:4d:b9:95:f2:
         67:7b:0a:aa:1b:d2:c8:1d:6f:91:1a:bc:0c:6d:b1:a6:8c:24:
         5c:f9:ac:7a:ab:a5:a3:3c:41:1d:a9:9a:0a:f7:19:04:1e:e3:
         40:bc:f0:17
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUC3Mpe6IVxemtEtHDpFT8HM2hAtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVEQkJFQzY3ODE3N0I3MTU5QUQ5MDFBNDAyM0JBNTdB
QTQwOTZEQzAeFw0yNjA1MDMwMjMwNDJaFw0yNzA1MDIwMjM1NDJaMDMxMTAvBgNV
BAMTKDlDOTM1ODE2ODIxMEQzRDk5OERDMEQ3RURCNDU4QkZGMjI0RjY4NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8gmRaIzPpAkHeSubMnzs0J4M
ZXEYkAeB0HTl071NV68voav1gqWrlKAECR8V3DTI/OLCidJKXBF4VWBR9w/ec7WE
UROFuMUgAXJk6OsTVe13Hx/Swt76FzPCM691JOAEsvl2NP+U7djLBTQMtxgTNzhk
QXLKPIBxv7eXufumu9ex2VMRU3kwwc+V7LfbcPuf2tygRfBpwtQWN/CtTaa8VS28
77CXvWRs+4c3+hdNcoP7EcmrxSCHpVaS6kQY0Osd0Lui3gND/wEF4H3kEoiYR0Vc
cxcEMlgks495+PPJ5PYE/tpMqJADh6kU7S6m2wfui0+QcXNDCa1tsXdfTgRzAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUnJNYFoIQ09mY3A1+20WL/yJPaHUwHwYDVR0j
BBgwFoAUZdu+xngXe3FZrZAaQCO6V6pAltwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWFkNmRjYzktMTcwMC00OGViLTkwOTktNjY3OGY5MWJmNDRlLzAvNjVEQkJFQzY3
ODE3N0I3MTU5QUQ5MDFBNDAyM0JBNTdBQTQwOTZEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NURCQkVDNjc4MTc3QjcxNTlBRDkwMUE0MDIzQkE1N0FBNDA5
NkRDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhZDZkY2M5LTE3MDAtNDhlYi05
MDk5LTY2NzhmOTFiZjQ0ZS8wLzMyMzAzMjJlMzkzMzJlMzIzNDM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpd9jANBgkqhkiG
9w0BAQsFAAOCAQEAPlmIDDX8moMbasEGBKM54xnPNy/sa/YpaDO7jPE+2baXzzeY
vCmu2d3xxkQLr0NkDVEYownQv9ck5p64XQ2Ua8SHMBbMKM7M1w5VIw9vQ9jPb4B1
HLVcaMWq/lWb578RxDCNXdLiJLfbSB8SKAfLqhcPFZRUQIcqgNTHyEuesJPp/PNf
4fIwf8J22hKwX966l8XcfPm/6ZDzVTAL/LnAgaMFbTxJmVF+ozEt8f27Ac9lBdAq
8BPOYnTpJFkdFthK7pzwrMLdb0s4NLdVUcadtKSSUexNuZXyZ3sKqhvSyB1vkRq8
DG2xpowkXPmsequlozxBHamaCvcZBB7jQLzwFw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:28:30 2026 by rpki-client