Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e352e302f32342d3234203d3e203234323030.roa
File:                     3230322e3133332e352e302f32342d3234203d3e203234323030.roa (raw, json)
Hash identifier:          Uo09a87NfO0QaaV8cWvKqLh7Yr8GIHaL3+B8rEdhvDg=
Subject key identifier:   A5:67:D8:69:32:13:58:3E:F2:75:E7:A5:DE:86:66:7C:12:E2:76:92
Certificate issuer:       /CN=008FD9C34C50033457705A2A8FA8AD31C58901DF
Certificate serial:       18070A4F59D1BE428B966069C4118981E4E75D70
Authority key identifier: 00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e352e302f32342d3234203d3e203234323030.roa
Signing time:             Sun 03 May 2026 02:38:53 +0000
ROA not before:           Sun 03 May 2026 02:33:53 +0000
ROA not after:            Sun 02 May 2027 02:38:53 +0000
asID:                     24200
IP address blocks:        202.133.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl
                          rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:07:0a:4f:59:d1:be:42:8b:96:60:69:c4:11:89:81:e4:e7:5d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008FD9C34C50033457705A2A8FA8AD31C58901DF
        Validity
            Not Before: May  3 02:33:53 2026 GMT
            Not After : May  2 02:38:53 2027 GMT
        Subject: CN=A567D8693213583EF275E7A5DE86667C12E27692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:77:eb:7b:c8:5d:f2:c2:3b:d6:cd:ac:18:aa:
                    d6:4a:e1:9f:14:d0:9e:09:70:c5:fb:db:ea:1f:97:
                    c1:bd:6a:34:b8:1b:ac:a9:be:cc:ed:78:ac:ff:36:
                    34:f9:5c:ce:e5:d9:c5:0e:1b:4f:e4:fd:94:7d:f9:
                    05:c9:b8:b2:7f:66:fd:84:c1:32:e8:98:d6:b5:2e:
                    fb:e1:c1:91:2e:c2:e6:ea:b6:b1:08:bd:d6:90:4b:
                    4f:08:bf:88:dc:a2:d6:62:fd:14:6c:7f:b9:76:63:
                    bc:90:1b:eb:28:60:e1:b1:04:59:34:7b:7c:db:11:
                    d1:70:64:0f:37:ee:23:7d:66:ca:76:06:a0:ec:8d:
                    31:7a:b9:e7:c0:49:bd:24:aa:2c:89:24:ed:b9:06:
                    6b:cb:9f:ac:b6:b0:08:31:92:69:51:de:0c:98:83:
                    ae:64:83:da:74:7a:46:31:0b:3d:9b:e1:81:1b:3c:
                    33:26:d6:80:4f:2d:a4:e5:e8:79:40:51:b4:00:98:
                    cc:37:35:4f:5d:76:01:4a:bb:48:d4:df:1a:ee:12:
                    04:38:41:74:2e:00:71:d6:f3:b8:1b:5e:41:9b:16:
                    dd:85:88:2b:65:c4:8b:e3:03:bd:64:cc:d9:25:d0:
                    6e:aa:4d:d5:44:6e:db:bd:99:c3:58:f7:ab:9e:e2:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:67:D8:69:32:13:58:3E:F2:75:E7:A5:DE:86:66:7C:12:E2:76:92
            X509v3 Authority Key Identifier:
                keyid:00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e352e302f32342d3234203d3e203234323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.133.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:f1:4e:79:f9:3a:7e:a0:10:00:c3:4b:00:b9:ac:47:f8:76:
         1f:95:a1:32:6e:0e:a6:eb:8c:9a:fd:95:37:1a:10:4d:ea:e5:
         2a:a8:c5:82:1f:f3:9e:9a:0c:0b:98:06:0a:c0:27:61:2f:10:
         9e:d2:47:ba:96:8f:9f:c6:0b:c2:f4:ee:1e:5c:6c:4e:6e:f5:
         4a:2d:42:be:34:2b:03:35:9a:54:d9:61:e0:3b:8d:30:21:3c:
         93:bf:c3:09:b2:01:3e:23:fc:f8:70:45:a2:78:f8:62:42:bf:
         be:3b:5e:67:07:8d:25:f9:1a:99:75:2e:1e:f6:08:b0:0d:37:
         bd:de:08:92:2d:f9:4a:7e:60:e7:09:5a:43:fb:51:55:20:38:
         d0:3a:70:7f:d3:3a:6a:f7:f0:41:6e:51:66:eb:e6:7b:be:66:
         5c:8a:d9:af:95:7e:91:ef:88:ec:37:41:ff:d5:a5:d6:f2:6f:
         81:70:99:ab:f6:44:08:89:83:95:43:77:8e:c7:eb:0b:21:50:
         67:54:22:b6:cc:af:cb:3f:d5:ec:75:4d:e3:24:24:11:dc:16:
         75:ef:d2:ae:0f:10:56:e2:f7:ea:7b:94:eb:a4:09:94:61:88:
         8a:52:33:e5:c7:72:bc:cd:40:dd:40:27:e4:23:dc:1a:d9:e3:
         bf:fe:b1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:30 2026 by rpki-client