Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231352e302f32342d3234203d3e203338313432.roa
File:                     3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier:          ZJYJND6cBL2XfAoUPgiKsDkKfS/wfCExUcg8XPfgBm0=
Subject key identifier:   CB:D8:5D:EE:AA:89:76:2E:69:CB:D8:4A:15:0E:F5:34:3E:3A:09:91
Certificate issuer:       /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial:       5F9FC7121475FB9BD0E651835BEE02BA6E0B9387
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231352e302f32342d3234203d3e203338313432.roa
Signing time:             Sun 03 May 2026 02:37:42 +0000
ROA not before:           Sun 03 May 2026 02:32:42 +0000
ROA not after:            Sun 02 May 2027 02:37:42 +0000
asID:                     38142
IP address blocks:        210.57.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
                          rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9f:c7:12:14:75:fb:9b:d0:e6:51:83:5b:ee:02:ba:6e:0b:93:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
        Validity
            Not Before: May  3 02:32:42 2026 GMT
            Not After : May  2 02:37:42 2027 GMT
        Subject: CN=CBD85DEEAA89762E69CBD84A150EF5343E3A0991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:10:d1:92:e2:08:56:81:8b:1a:82:f6:68:
                    12:ad:e0:b8:0f:cb:36:06:cb:6b:86:a4:5c:8a:dd:
                    0a:be:83:bb:d8:4d:8a:11:98:8f:dc:b4:d1:1e:ca:
                    84:79:8e:46:e9:62:12:8b:aa:e1:bc:11:4e:ca:43:
                    38:e2:26:10:a7:97:9f:f5:3f:87:5b:db:8c:b2:72:
                    9e:d4:3f:78:88:62:03:93:60:73:e6:e8:18:d9:33:
                    e8:87:4f:71:a0:3b:18:12:8c:df:37:e5:7b:7a:cf:
                    9c:17:82:1a:86:66:6e:a9:e5:70:fb:e5:be:dd:0b:
                    b0:78:53:c4:2c:0b:1a:87:11:d0:58:61:06:9f:a5:
                    45:b1:5a:07:27:92:5a:a4:0d:22:eb:2b:d3:ed:1e:
                    38:62:43:75:a5:9b:de:cb:2b:b8:5f:cb:a5:16:ec:
                    8e:2b:41:7f:0b:82:4b:68:56:d1:8d:e2:25:04:97:
                    69:9d:43:5d:9b:5b:b6:7a:fb:05:16:d1:81:41:28:
                    5a:78:78:9b:69:f4:73:be:a8:e4:80:f9:bb:64:87:
                    6a:2f:cf:7d:be:69:eb:b4:ed:31:29:57:0f:82:53:
                    71:72:c8:c8:e1:99:3b:c7:ad:02:ac:e9:e4:7e:a4:
                    12:e9:80:80:d4:c4:54:c0:d9:d3:cc:ab:16:94:fd:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D8:5D:EE:AA:89:76:2E:69:CB:D8:4A:15:0E:F5:34:3E:3A:09:91
            X509v3 Authority Key Identifier:
                keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231352e302f32342d3234203d3e203338313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:e4:da:93:d3:fe:41:29:46:03:55:63:dd:36:dd:09:b2:
         8a:63:74:1f:c4:d4:a4:8e:c7:f8:49:63:21:4e:39:77:67:e3:
         3b:41:d3:20:a2:28:71:60:ea:4a:47:ec:a7:ba:b3:f6:ed:34:
         69:7c:88:f3:04:51:80:b6:3a:83:42:90:aa:80:21:6f:91:61:
         89:62:b2:4a:db:39:dd:81:02:31:38:db:54:cd:3f:08:fa:4e:
         04:d7:55:76:e1:aa:eb:02:d3:71:db:04:8e:62:e6:bd:ea:e2:
         fd:5c:85:a2:e8:5c:62:a9:57:ce:01:2e:3f:f1:0a:5d:cd:9e:
         42:e3:18:f6:26:87:ed:31:d5:82:72:a1:2d:eb:a9:45:27:46:
         d9:90:40:f2:77:8e:4b:16:e1:68:16:6e:31:56:20:24:6d:11:
         21:1b:21:26:a1:65:17:1b:70:8b:77:d8:c8:bb:f7:89:7b:1b:
         71:af:e0:c5:a1:88:07:58:77:7c:18:15:9a:f9:f6:94:0a:62:
         35:15:7b:b1:09:e6:1a:14:0b:62:ca:eb:23:c4:44:49:d7:59:
         c2:9a:00:c3:d3:34:46:c9:1c:37:4c:b3:23:46:5f:62:b8:49:
         91:97:ed:29:16:f1:e2:10:80:62:6c:47:82:14:8e:b3:2d:72:
         d2:5e:45:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:31 2026 by rpki-client