Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa
File:                     3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (raw, json)
Hash identifier:          REpKs/RXrD6+kSVY+pi8I08ad5JiVlI+VsKG+qhKX6I=
Subject key identifier:   38:F6:5F:81:F9:29:03:DB:CB:43:22:7E:80:7F:2E:BD:82:BC:B6:9C
Certificate issuer:       /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial:       1E365FFA0086C4F52EB7470EB0A0243F97E66A5C
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa
Signing time:             Sun 03 May 2026 02:42:32 +0000
ROA not before:           Sun 03 May 2026 02:37:32 +0000
ROA not after:            Sun 02 May 2027 02:42:32 +0000
asID:                     38750
IP address blocks:        202.179.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
                          rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:36:5f:fa:00:86:c4:f5:2e:b7:47:0e:b0:a0:24:3f:97:e6:6a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
        Validity
            Not Before: May  3 02:37:32 2026 GMT
            Not After : May  2 02:42:32 2027 GMT
        Subject: CN=38F65F81F92903DBCB43227E807F2EBD82BCB69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:fa:53:43:83:83:7e:68:71:59:00:16:e6:
                    ce:63:72:d7:96:14:82:e4:fa:c1:2f:9b:ee:fb:0e:
                    93:29:f0:2a:73:92:81:6f:38:53:7d:db:8e:96:79:
                    35:45:55:e2:4a:d4:00:bf:20:d0:f7:39:ea:d3:b5:
                    16:06:1a:2e:56:4e:d3:c3:dc:de:e5:8f:a4:25:17:
                    72:d4:6f:39:fd:aa:74:30:a4:47:c3:41:62:7c:fc:
                    07:4a:59:62:c9:80:f6:0a:b4:3b:17:d6:5e:4f:8a:
                    cc:c5:dc:27:2c:f4:68:4c:60:63:23:96:3b:e4:2c:
                    ee:c7:8d:92:2c:13:33:ff:05:7b:1b:41:25:2a:59:
                    89:4f:cd:71:1e:2f:f3:5a:35:d3:99:a2:d1:08:6b:
                    1d:10:59:84:c3:98:10:d2:10:06:87:b2:81:b2:1a:
                    65:13:f9:82:8a:c6:c5:9d:cc:a6:65:48:33:0b:0d:
                    9e:25:65:b1:dd:e3:56:a7:1d:1f:a8:6d:3f:05:78:
                    51:25:55:cf:50:2b:5e:6c:20:95:76:5d:a0:dc:6a:
                    d5:6e:1a:83:a8:06:14:21:a5:f3:c2:74:39:e9:32:
                    16:3f:d0:a6:2c:38:c2:68:33:d7:3e:5f:24:ae:ca:
                    90:97:d8:31:45:77:41:c1:e6:f6:71:f2:15:41:35:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F6:5F:81:F9:29:03:DB:CB:43:22:7E:80:7F:2E:BD:82:BC:B6:9C
            X509v3 Authority Key Identifier:
                keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:23:82:52:76:4f:45:dc:19:2d:22:f0:7f:13:2a:4b:54:b4:
         52:63:3b:c2:de:38:49:40:49:c9:55:1e:c3:e9:96:a1:8e:7b:
         83:d2:67:b9:ea:1c:3f:a1:ee:a7:f0:2b:ab:e2:8b:0f:71:61:
         11:ef:c6:ce:e5:85:2a:f1:e3:46:7b:c1:78:00:cc:0a:ee:74:
         3d:bf:4c:32:77:5c:fa:ee:db:24:d5:ca:57:ea:9f:f7:5f:a6:
         00:19:6a:2f:20:52:6d:9e:18:be:b1:4d:b7:d2:22:80:a5:ac:
         36:ec:38:78:c4:a3:94:25:0d:a9:b5:95:ef:1b:d2:96:15:ac:
         8e:d8:f4:34:fb:ab:73:16:53:9f:0a:1a:9b:fd:43:f2:7f:09:
         97:40:1a:7c:2c:48:e4:91:71:c2:4c:68:84:f8:42:9f:2d:d9:
         d9:f1:a9:0c:65:9c:9d:4d:11:47:03:f0:6d:92:cc:85:4c:13:
         ca:e4:9f:cb:f8:b5:f6:e5:a5:2b:6d:f7:b2:07:67:75:f3:95:
         ce:fa:7f:a4:63:3d:5b:f6:05:2f:a3:2b:2c:46:0c:8e:b5:61:
         94:00:f2:a5:75:72:08:ce:f3:30:19:41:cb:f1:3e:26:a5:08:
         05:16:85:d3:2a:2b:93:73:26:ac:f9:f6:de:04:57:19:42:7c:
         fb:52:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:02 2026 by rpki-client