Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231342e302f32342d3234203d3e203338313432.roa
File:                     3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier:          J+zYKwZ+SXdC6vvuqB/51PHxQKuHMJSM0Dgp8PV/GWI=
Subject key identifier:   CF:E1:19:74:AF:91:DD:B4:64:9D:A6:CD:A1:84:AA:42:81:3C:5E:4E
Certificate issuer:       /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial:       4032EA5BF38C4332EC5B0D8721F848FC0CC941E6
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231342e302f32342d3234203d3e203338313432.roa
Signing time:             Sun 03 May 2026 02:37:36 +0000
ROA not before:           Sun 03 May 2026 02:32:36 +0000
ROA not after:            Sun 02 May 2027 02:37:36 +0000
asID:                     38142
IP address blocks:        210.57.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
                          rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:32:ea:5b:f3:8c:43:32:ec:5b:0d:87:21:f8:48:fc:0c:c9:41:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
        Validity
            Not Before: May  3 02:32:36 2026 GMT
            Not After : May  2 02:37:36 2027 GMT
        Subject: CN=CFE11974AF91DDB4649DA6CDA184AA42813C5E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:13:70:35:49:39:7d:b9:0c:d6:2b:bb:ca:
                    da:79:4c:97:d6:b8:8c:3a:24:45:87:ba:30:94:fd:
                    bb:f4:f3:ef:32:bf:db:60:38:72:aa:72:fc:2d:e6:
                    38:d8:e4:3b:aa:9e:31:55:e9:31:ca:d6:8d:dc:25:
                    41:9b:61:b3:c9:7b:62:5c:bc:87:34:ea:3e:de:98:
                    48:c8:21:39:b4:51:fc:02:75:f0:72:f2:fa:26:48:
                    66:6f:c0:6b:77:ac:3e:33:c7:46:ca:51:34:e5:08:
                    b7:31:b7:f4:e9:73:ec:59:94:e1:82:d9:0b:8c:fd:
                    f8:16:4a:78:e0:cf:28:ec:c7:90:b9:ad:b3:f8:d5:
                    fa:0a:a1:31:0a:c4:dc:d2:47:cb:b4:f9:39:70:ee:
                    19:8f:e1:c7:8b:d8:ec:42:03:86:4d:81:6c:b8:63:
                    ff:9e:79:80:44:d9:ec:65:ad:7b:6f:8e:c8:f5:21:
                    f1:21:bb:bd:ec:04:15:98:e0:5f:1d:e0:b4:a3:7f:
                    2f:4b:17:ba:32:e4:cc:b7:c6:31:3a:70:5f:c1:9a:
                    55:3b:fc:70:c1:d5:20:95:ad:84:17:06:8b:a5:17:
                    9e:d5:fd:3f:8a:7e:b6:ee:d2:52:1f:9d:13:9e:fa:
                    e2:08:3a:86:68:65:bc:1e:5e:ac:51:e2:55:1b:b8:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E1:19:74:AF:91:DD:B4:64:9D:A6:CD:A1:84:AA:42:81:3C:5E:4E
            X509v3 Authority Key Identifier:
                keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231342e302f32342d3234203d3e203338313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e8:e2:6d:e0:a6:29:a8:a4:f6:c3:4c:f7:f0:9f:77:87:2e:
         8a:62:02:77:fc:df:4b:ef:15:18:89:44:1b:76:70:d2:ec:4f:
         bf:d3:36:f2:ad:79:00:39:2a:33:80:aa:49:f0:72:82:d9:c3:
         76:ab:fd:95:af:cf:83:13:bc:b6:24:87:8e:e5:ca:22:9c:0f:
         6a:97:ea:58:a3:35:db:1f:3e:98:02:6e:d3:62:fd:eb:fc:cf:
         76:05:8a:35:8d:5b:c8:cb:b4:a3:42:5f:37:c1:1f:13:a2:2f:
         7b:4c:20:9d:d7:87:b3:2f:a4:eb:62:0d:86:43:9e:4c:18:0b:
         a4:ec:22:65:e9:e6:56:b3:08:ec:f9:1d:73:e0:53:aa:30:ee:
         62:b4:ff:05:44:58:3b:33:bf:e9:31:52:75:c3:62:b4:87:dd:
         f5:51:e8:71:57:e1:19:5a:16:28:60:10:4a:65:78:35:83:cf:
         f2:05:58:a3:84:5e:a2:db:b0:cd:eb:9e:8e:18:44:e7:f6:f7:
         96:80:15:59:72:23:7d:31:e9:2d:3d:ed:4e:aa:0e:23:96:33:
         22:a4:df:40:51:67:e8:ca:c5:e3:d7:34:19:43:99:43:70:32:
         93:0d:9a:21:5f:2f:04:a7:ab:f1:d8:8e:46:0b:c3:3e:31:e5:
         6c:c8:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:18 2026 by rpki-client