Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa
File:                     3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (raw, json)
Hash identifier:          Aetna6+21CQMAQqjAiUJIu47yG7i7XqoQJ5+dzrZLGg=
Subject key identifier:   AB:73:CB:53:0E:0C:98:0C:A5:45:1D:5C:AF:B9:B1:CE:57:13:D9:1E
Certificate issuer:       /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial:       56FBEDA1B5C31588D194F9F56788CF75CCBB8057
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa
Signing time:             Sun 03 May 2026 02:42:32 +0000
ROA not before:           Sun 03 May 2026 02:37:32 +0000
ROA not after:            Sun 02 May 2027 02:42:32 +0000
asID:                     38750
IP address blocks:        202.179.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
                          rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fb:ed:a1:b5:c3:15:88:d1:94:f9:f5:67:88:cf:75:cc:bb:80:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
        Validity
            Not Before: May  3 02:37:32 2026 GMT
            Not After : May  2 02:42:32 2027 GMT
        Subject: CN=AB73CB530E0C980CA5451D5CAFB9B1CE5713D91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:b4:04:81:bc:24:da:eb:dd:20:dd:92:7b:
                    21:ef:b3:06:f7:1d:0d:09:a5:b5:4b:c7:60:2b:14:
                    16:6c:4e:c7:35:3b:2d:97:a7:3d:0a:66:b0:78:65:
                    01:07:f5:52:ea:cb:9f:e1:18:c7:1e:f3:59:99:7d:
                    c3:28:0a:d9:3d:eb:99:c8:b5:16:3f:68:2e:fa:c3:
                    6d:60:15:ed:04:f8:9d:e2:d7:6d:18:31:17:40:7b:
                    1d:52:ac:0a:f5:b0:b0:3c:e3:da:71:89:2b:d2:74:
                    49:57:e3:98:a7:a7:93:99:d9:7b:ab:3e:ad:11:98:
                    43:fd:b4:70:65:37:b0:f8:67:31:47:6d:fe:f6:43:
                    c2:70:b4:8a:a2:3d:ce:89:5f:9c:4a:20:d2:29:3c:
                    4b:3b:52:59:f4:d0:68:95:f3:66:b8:1b:32:a8:ca:
                    f5:ab:89:d2:0e:23:8a:76:4f:e8:24:f6:81:a7:97:
                    f9:ee:e7:63:de:94:aa:f7:41:fe:18:4c:71:a7:91:
                    36:59:ae:e0:0e:7f:87:7d:eb:07:20:6a:de:c6:48:
                    3c:62:5b:e0:78:42:85:f3:f2:be:10:ba:df:95:93:
                    f0:66:25:f1:db:88:d6:da:68:d7:aa:c3:88:e0:14:
                    11:c7:41:4a:fd:6d:fc:87:71:ca:52:78:ea:49:8a:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:73:CB:53:0E:0C:98:0C:A5:45:1D:5C:AF:B9:B1:CE:57:13:D9:1E
            X509v3 Authority Key Identifier:
                keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:31:08:cd:be:a4:7a:02:67:46:73:5c:2c:e1:a4:20:31:e8:
         93:38:4b:58:ae:e7:84:85:d0:83:5b:fa:73:cd:c9:6a:e5:67:
         06:6e:b9:6e:e7:27:81:c6:04:2e:cb:c8:5c:9e:68:06:70:69:
         22:13:49:07:ef:88:67:b7:42:ce:df:ca:c8:34:ac:83:5e:87:
         53:47:68:80:5a:a9:da:a4:3f:a6:5f:e6:41:18:c9:b0:51:6e:
         a4:51:e1:5a:52:97:56:01:20:94:e6:7c:1c:a4:ec:ae:ce:36:
         2e:4a:40:91:e7:95:ca:88:56:32:b8:a4:ed:24:ef:36:14:ef:
         f4:98:38:eb:16:e2:7a:ee:53:73:2c:16:d6:6f:a6:10:a4:c4:
         a7:be:16:00:a4:a2:53:f3:55:3b:c1:82:c7:f8:25:8b:44:8c:
         16:65:fa:fd:39:3e:62:c2:be:06:a7:e9:e5:ff:1c:22:ad:75:
         b5:e9:a1:81:21:f5:e1:43:ab:c3:c4:3a:36:2b:d6:7d:9a:41:
         27:91:1f:86:0a:59:3b:22:13:c8:1d:27:3a:b1:6f:de:8c:5a:
         c1:6e:d0:38:33:d2:43:f7:84:3e:c2:65:10:e7:87:65:41:d8:
         0e:23:5f:4d:3b:1b:5c:e0:23:0d:9f:e2:6a:84:1e:fb:4f:7f:
         61:70:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:01 2026 by rpki-client