Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232332e302f32342d3234203d3e203338313432.roa
File:                     3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier:          furgG1WGsI/SaHbEkYDIDFe9YchJUqhB/+OGElUaiP4=
Subject key identifier:   76:2D:18:82:A9:95:E7:59:18:18:8C:17:C9:95:AD:0F:33:DB:6D:25
Certificate issuer:       /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial:       37878DE38F1EA7D06C58844D6F05B1EB8D8CF7A3
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232332e302f32342d3234203d3e203338313432.roa
Signing time:             Sun 03 May 2026 02:37:39 +0000
ROA not before:           Sun 03 May 2026 02:32:39 +0000
ROA not after:            Sun 02 May 2027 02:37:39 +0000
asID:                     38142
IP address blocks:        210.57.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
                          rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:87:8d:e3:8f:1e:a7:d0:6c:58:84:4d:6f:05:b1:eb:8d:8c:f7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
        Validity
            Not Before: May  3 02:32:39 2026 GMT
            Not After : May  2 02:37:39 2027 GMT
        Subject: CN=762D1882A995E75918188C17C995AD0F33DB6D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:08:f9:c6:2f:c2:36:d7:eb:0b:24:17:0f:
                    fb:8f:89:81:c6:aa:64:c6:cc:a7:ad:4f:f1:84:9c:
                    36:69:a7:ae:eb:21:ba:30:47:97:51:9e:d9:ae:12:
                    42:8e:85:42:ae:6d:b5:03:41:c7:16:95:dc:2a:ea:
                    e3:47:03:34:ba:02:bc:7d:11:5e:19:85:28:e6:b6:
                    aa:25:75:ab:d1:e6:bd:4d:56:4c:9d:26:d4:3d:1f:
                    0d:39:28:0c:48:50:42:63:63:28:b7:87:f1:13:98:
                    ab:8b:72:52:82:f1:bc:c2:73:94:ba:df:1f:c2:d1:
                    4d:35:fd:78:01:5b:94:4c:be:a2:a0:ea:df:e1:46:
                    f6:e8:a1:3e:e4:b9:14:5f:b1:ce:56:14:f3:c5:21:
                    f4:5e:09:33:d7:c9:45:ee:d3:8c:3c:85:20:7d:1c:
                    0e:a0:00:8a:34:b4:05:44:73:8f:0d:61:63:87:76:
                    dd:d2:63:b6:26:04:59:dc:9e:ff:c3:4c:72:08:15:
                    0f:e3:7d:09:e7:fd:55:bd:a8:2b:c3:f5:40:95:bc:
                    50:5c:9a:54:c4:df:1d:d2:96:aa:95:e2:c7:f4:d1:
                    ef:ac:5b:2a:52:c4:86:78:c1:f8:27:43:0d:e4:71:
                    93:c0:52:e9:5a:18:3b:ab:68:0a:8e:83:5e:e7:14:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2D:18:82:A9:95:E7:59:18:18:8C:17:C9:95:AD:0F:33:DB:6D:25
            X509v3 Authority Key Identifier:
                keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232332e302f32342d3234203d3e203338313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:96:49:44:b1:e2:04:23:3b:41:31:3c:bd:c4:cb:7b:53:9b:
         7c:ec:a0:45:37:2b:ba:00:b3:d0:7c:55:10:f5:ac:db:05:20:
         d1:41:22:23:62:89:c5:32:5a:fe:2b:8a:b4:cb:71:fa:bf:05:
         9b:fe:9f:83:83:c1:10:cc:eb:27:3a:27:82:dc:60:31:5f:e6:
         e1:30:f7:74:f1:c0:50:e0:74:0d:1b:70:04:54:4c:50:05:da:
         8e:72:2f:95:43:0e:21:86:fc:b6:bc:c7:90:7e:25:19:ab:20:
         c6:3c:f1:0d:22:7e:66:12:23:41:58:bb:25:9f:27:b4:3f:90:
         62:85:26:60:ad:d5:95:3e:13:6a:79:b1:fb:e2:4e:78:6d:f0:
         a6:86:03:f9:fb:67:42:dd:9a:91:c1:4d:91:4e:fc:20:17:2e:
         36:79:c4:c6:a7:68:62:66:07:4d:0b:2d:31:3d:a4:e8:94:bf:
         4f:59:51:a7:3e:e1:31:40:f4:5f:60:1b:ed:68:78:9e:4a:47:
         75:f7:f0:e8:df:dc:e4:55:0e:a3:f0:37:d7:9d:37:38:f1:69:
         b3:5e:f0:57:f2:d3:43:dc:41:77:91:df:1c:b3:44:ea:8f:90:
         fc:1d:86:19:c3:30:ea:bb:8a:99:15:02:0f:0e:35:bf:4f:89:
         90:91:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:28 2026 by rpki-client