Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231302e302f32342d3234203d3e203338313432.roa
File:                     3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier:          P12FJNsFFyWSsRexfHM3kWn+2VKYuVhwIEq6slsbCcg=
Subject key identifier:   2B:A2:ED:D2:77:53:90:BC:1B:34:6E:12:7C:55:F1:5C:4B:80:51:28
Certificate issuer:       /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial:       7DE27D8ED7E27F4379D24303383C47D3DF797511
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231302e302f32342d3234203d3e203338313432.roa
Signing time:             Sun 03 May 2026 02:37:40 +0000
ROA not before:           Sun 03 May 2026 02:32:40 +0000
ROA not after:            Sun 02 May 2027 02:37:40 +0000
asID:                     38142
IP address blocks:        210.57.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
                          rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e2:7d:8e:d7:e2:7f:43:79:d2:43:03:38:3c:47:d3:df:79:75:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
        Validity
            Not Before: May  3 02:32:40 2026 GMT
            Not After : May  2 02:37:40 2027 GMT
        Subject: CN=2BA2EDD2775390BC1B346E127C55F15C4B805128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:ce:96:9f:2c:c7:75:29:c0:0e:1f:87:cc:
                    a6:64:ba:20:11:c8:1f:db:51:fd:7a:16:51:05:4b:
                    f0:e7:55:48:ab:91:f3:fe:d7:9e:b4:36:66:05:b2:
                    cc:c8:79:a3:27:25:bc:c0:40:81:eb:f4:a6:58:74:
                    7a:60:f0:26:db:50:93:48:be:c5:b3:da:fa:06:af:
                    d7:20:e0:95:4b:78:83:25:16:2c:be:d1:f7:bb:98:
                    08:64:7a:a2:aa:5b:b6:4f:99:03:49:3f:82:2a:7d:
                    3e:10:57:80:50:91:ac:a5:69:f5:c4:45:bf:03:fc:
                    c4:3e:c5:61:3c:43:c0:ce:13:c3:4d:db:e1:d9:31:
                    1a:be:c0:36:19:a8:ac:6b:c6:4b:f4:7c:19:3e:07:
                    62:7d:e4:46:dd:27:98:fb:a9:01:b4:07:22:a9:23:
                    92:56:4b:5d:2f:9b:f2:74:5d:08:36:b2:56:20:c2:
                    74:7b:43:3c:ed:c2:70:b3:6a:e2:6e:f1:a2:94:c9:
                    be:80:25:2c:30:b5:a3:5b:3f:54:62:a7:e2:30:e3:
                    57:cf:5d:45:3f:45:a1:e7:f1:b2:18:68:59:fb:27:
                    68:c6:83:8b:c1:8b:30:9d:9f:a5:aa:dd:db:94:ee:
                    62:1a:e2:51:22:49:b6:8a:94:58:26:be:7a:f7:70:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A2:ED:D2:77:53:90:BC:1B:34:6E:12:7C:55:F1:5C:4B:80:51:28
            X509v3 Authority Key Identifier:
                keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231302e302f32342d3234203d3e203338313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ea:f7:1e:83:35:0f:28:77:d5:31:88:99:3a:24:81:fb:bb:
         41:5a:f3:5c:f8:e9:00:ed:a3:92:b3:c1:61:5c:82:49:24:86:
         6f:ae:4e:e4:53:9c:35:b5:8c:08:3a:c5:17:df:fb:15:04:62:
         61:c4:3b:cd:ca:28:5d:93:c5:9a:f8:7d:b7:33:c1:77:01:9e:
         72:f7:54:45:f3:5e:8a:83:ae:c3:e5:6b:6b:32:bd:be:c9:a3:
         33:d0:96:03:3c:42:8a:f7:71:c3:14:88:9d:ad:55:b7:51:c5:
         c1:aa:75:12:f2:22:0b:e7:1a:9d:c4:d3:e4:42:8a:3c:7a:cc:
         74:b1:46:41:49:5b:f3:7d:1c:be:81:49:f1:4a:60:1d:44:28:
         c2:80:4b:1f:4b:18:da:d7:82:83:54:b8:5f:2d:a5:7d:98:1e:
         ef:b0:e4:6b:a7:8f:07:d7:54:c0:c2:88:36:2f:8a:6d:c8:a2:
         45:74:3c:49:df:91:82:aa:67:c7:55:4d:fc:e6:9f:ba:38:fc:
         ab:01:44:28:9c:ef:c8:f9:94:ea:64:ad:66:c8:b9:a0:da:a6:
         07:84:e6:88:36:10:07:5e:b6:96:03:d4:21:48:5b:e5:0f:9f:
         a8:1e:4e:e7:83:6d:ab:29:b2:8e:75:65:1a:0c:59:9f:01:b8:
         96:6b:28:2f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfeJ9jtfif0N50kMDODxH0995dREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QwOTBBMUJDRTk0NzE3OThFRTZEMDc5RUVDMDcyNkVD
QTlBMDE4NzAeFw0yNjA1MDMwMjMyNDBaFw0yNzA1MDIwMjM3NDBaMDMxMTAvBgNV
BAMTKDJCQTJFREQyNzc1MzkwQkMxQjM0NkUxMjdDNTVGMTVDNEI4MDUxMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWc6WnyzHdSnADh+HzKZkuiAR
yB/bUf16FlEFS/DnVUirkfP+1560NmYFsszIeaMnJbzAQIHr9KZYdHpg8CbbUJNI
vsWz2voGr9cg4JVLeIMlFiy+0fe7mAhkeqKqW7ZPmQNJP4IqfT4QV4BQkaylafXE
Rb8D/MQ+xWE8Q8DOE8NN2+HZMRq+wDYZqKxrxkv0fBk+B2J95EbdJ5j7qQG0ByKp
I5JWS10vm/J0XQg2slYgwnR7QzztwnCzauJu8aKUyb6AJSwwtaNbP1Rip+Iw41fP
XUU/RaHn8bIYaFn7J2jGg4vBizCdn6Wq3duU7mIa4lEiSbaKlFgmvnr3cGT1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUK6Lt0ndTkLwbNG4SfFXxXEuAUSgwHwYDVR0j
BBgwFoAUPQkKG86UcXmO5tB57sBybsqaAYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjA4YjI5NTktMWMyNS00NmEwLTg5ZDEtZjc3ZDVjNDc0NjkxLzAvM0QwOTBBMUJD
RTk0NzE3OThFRTZEMDc5RUVDMDcyNkVDQTlBMDE4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRDA5MEExQkNFOTQ3MTc5OEVFNkQwNzlFRUMwNzI2RUNBOUEw
MTg3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04
OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI50jANBgkqhkiG
9w0BAQsFAAOCAQEAbOr3HoM1Dyh31TGImTokgfu7QVrzXPjpAO2jkrPBYVyCSSSG
b65O5FOcNbWMCDrFF9/7FQRiYcQ7zcooXZPFmvh9tzPBdwGecvdURfNeioOuw+Vr
azK9vsmjM9CWAzxCivdxwxSIna1Vt1HFwap1EvIiC+cancTT5EKKPHrMdLFGQUlb
830cvoFJ8UpgHUQowoBLH0sY2teCg1S4Xy2lfZge77Dka6ePB9dUwMKINi+Kbcii
RXQ8Sd+Rgqpnx1VN/Oafujj8qwFEKJzvyPmU6mStZsi5oNqmB4TmiDYQB162lgPU
IUhb5Q+fqB5O54NtqymyjnVlGgxZnwG4lmsoLw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:24:51 2026 by rpki-client