Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa
File:                     3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (raw, json)
Hash identifier:          s0tvtnOzBx2wg+4vUHWBA8KcfOBbxN88qTxKuGgJguU=
Subject key identifier:   74:5B:C2:6A:DC:93:77:04:6A:E2:E8:28:4C:F8:94:E2:89:2B:B9:E9
Certificate issuer:       /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial:       6CDDD6DF79D7C368CFFD60CE46D549799C8A1B1D
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa
Signing time:             Sun 03 May 2026 02:42:33 +0000
ROA not before:           Sun 03 May 2026 02:37:33 +0000
ROA not after:            Sun 02 May 2027 02:42:33 +0000
asID:                     38750
IP address blocks:        202.179.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
                          rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dd:d6:df:79:d7:c3:68:cf:fd:60:ce:46:d5:49:79:9c:8a:1b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
        Validity
            Not Before: May  3 02:37:33 2026 GMT
            Not After : May  2 02:42:33 2027 GMT
        Subject: CN=745BC26ADC9377046AE2E8284CF894E2892BB9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a9:ec:a9:6c:3e:55:a0:5d:c6:1c:e8:ad:0a:
                    82:04:20:14:f5:b0:dc:87:b6:e9:81:4e:6b:be:20:
                    04:a7:fa:53:74:b0:ab:d5:11:11:3e:ea:94:dc:99:
                    10:db:ed:fd:b7:f4:a6:16:47:6d:9a:ad:6f:20:85:
                    fd:1c:c5:64:e8:e9:5b:02:e8:e1:8d:76:44:c6:97:
                    e0:8e:88:f2:8a:eb:93:a2:09:26:4b:c8:64:ba:1a:
                    27:79:8a:dc:4a:66:54:c6:3d:ef:d7:bd:17:8f:19:
                    3b:de:60:52:0f:82:aa:01:e0:0b:56:33:a1:9a:14:
                    b7:5f:e1:f0:18:77:80:c5:d0:c5:68:be:a4:53:de:
                    68:d3:7e:e2:e7:ba:bc:d4:7a:af:dc:e6:db:e1:b0:
                    82:1f:49:ce:39:b6:8e:99:ea:3b:80:3f:4f:96:1b:
                    18:ad:97:df:e9:fe:26:28:1a:37:36:6b:b2:13:da:
                    b5:84:4d:76:f5:29:60:e2:d3:56:93:f5:d1:5b:1c:
                    bb:54:40:4f:cd:38:6a:2e:f0:5e:41:49:6e:e0:8c:
                    98:16:a1:fd:e4:6d:f5:ee:38:b7:91:25:c4:12:0a:
                    ff:28:bf:5d:8f:8a:c6:e3:dd:8b:8a:01:9f:0f:cc:
                    48:94:0a:3c:cb:01:1c:b5:85:8b:f2:d8:1d:a4:fa:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5B:C2:6A:DC:93:77:04:6A:E2:E8:28:4C:F8:94:E2:89:2B:B9:E9
            X509v3 Authority Key Identifier:
                keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:ec:6a:cf:35:21:74:d4:b2:93:a9:ec:ec:6f:99:10:7c:
         74:f2:3d:8a:23:58:d1:57:a5:63:70:25:ad:a8:3a:ef:39:74:
         b9:97:df:2e:cd:fe:d3:c2:b9:f6:74:0b:ed:1d:13:70:70:31:
         20:74:a3:8d:ac:d5:d6:7e:60:ec:a6:8e:12:6e:f7:0f:d2:57:
         f2:e2:3d:57:fd:3f:28:3a:97:fe:cd:13:f9:65:f7:f9:31:df:
         ca:08:7a:10:89:01:f9:8e:0e:d0:5d:56:0e:af:17:7d:69:77:
         9a:8d:3f:c3:9d:ea:51:61:fd:b7:6b:a1:cf:98:6e:d5:89:bd:
         a9:f8:21:19:1d:1c:36:07:08:da:79:64:35:4a:de:07:07:aa:
         d3:3c:1a:89:7a:d1:85:a5:aa:be:d4:96:98:c4:ba:c6:44:1f:
         0c:ca:e4:1e:de:22:0e:22:e6:d7:da:1b:bf:67:b2:7c:91:3c:
         d1:1f:50:0b:fd:99:35:6f:b5:58:f7:2c:4d:8b:6c:ac:cd:a2:
         cb:6b:1b:c4:a0:3c:b3:ea:5c:b2:e8:ba:5d:be:3b:3a:e9:9e:
         d5:c9:54:e2:e5:76:dc:b5:77:b3:d9:f3:23:23:d4:91:88:de:
         4d:28:04:db:59:07:41:67:ab:8c:ba:45:8f:7a:67:79:c5:4b:
         7b:8e:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:26 2026 by rpki-client