Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa
File:                     3230322e3133372e31322e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          DsSxJ+60lvbsX4hG81MSfAY6DjOKwAPqkr7jR3rXmbA=
Subject key identifier:   C9:9E:2D:F6:C0:A7:C0:2D:62:61:00:C8:A6:A5:5A:94:C2:CD:05:B8
Certificate issuer:       /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial:       25D6033D00F0C6AB5B8651F2710DD92537E9C229
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa
Signing time:             Sun 03 May 2026 02:44:40 +0000
ROA not before:           Sun 03 May 2026 02:39:40 +0000
ROA not after:            Sun 02 May 2027 02:44:40 +0000
asID:                     9905
IP address blocks:        202.137.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
                          rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d6:03:3d:00:f0:c6:ab:5b:86:51:f2:71:0d:d9:25:37:e9:c2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
        Validity
            Not Before: May  3 02:39:40 2026 GMT
            Not After : May  2 02:44:40 2027 GMT
        Subject: CN=C99E2DF6C0A7C02D626100C8A6A55A94C2CD05B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:01:c2:91:04:be:bc:55:fd:ec:a5:fc:ce:
                    61:cb:1a:a5:b3:3b:c4:1c:ef:29:f4:5b:36:85:ca:
                    c9:5c:0c:da:4f:f6:c2:8d:fe:db:6e:90:22:48:74:
                    27:6b:df:a3:f8:a3:c8:f3:64:6a:85:d5:80:90:fd:
                    02:25:d6:94:69:7c:da:6a:42:99:6c:02:2a:e1:06:
                    3b:52:dd:e1:57:01:f1:c8:83:15:69:ce:58:ea:c3:
                    f0:c2:8c:d0:a7:fc:af:9a:27:a0:0c:67:5d:81:d9:
                    22:a4:43:c7:f0:86:bc:6b:09:29:5e:be:98:00:5c:
                    4f:b5:35:30:55:30:ee:f5:80:44:c9:3b:6f:2c:8d:
                    ba:78:76:72:fc:0a:bf:bb:f6:24:20:e1:17:f4:a3:
                    67:a8:8c:c5:34:43:3b:b0:37:75:5f:6b:dd:37:ed:
                    36:d5:ae:31:e2:b1:5f:cd:0c:b4:3d:fa:25:45:3b:
                    de:0d:83:70:4f:68:76:4c:c7:e2:d2:ed:4e:de:00:
                    13:6b:e2:a9:36:3d:25:f4:8b:00:f3:2a:83:32:44:
                    4a:07:68:9f:d5:5e:a4:bf:5c:47:51:90:fb:e8:a6:
                    5b:0d:2a:85:46:15:fc:dd:33:09:c3:4d:b7:15:6d:
                    da:98:21:10:bf:b1:83:3e:fe:72:36:ea:c8:63:8e:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9E:2D:F6:C0:A7:C0:2D:62:61:00:C8:A6:A5:5A:94:C2:CD:05:B8
            X509v3 Authority Key Identifier:
                keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.137.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:32:77:5a:65:83:2d:db:c5:43:e3:45:7a:0b:0d:83:9d:
         63:76:00:d4:68:e9:a2:b3:12:f4:9e:6b:00:bb:54:a7:2c:7e:
         ba:32:e3:3a:80:19:41:c7:2f:0b:9f:5f:05:87:7c:0d:89:10:
         00:0c:56:1b:e9:a9:f4:e8:d6:65:05:89:6f:9e:4c:6d:33:7d:
         bb:f6:d0:a1:4f:ad:94:ba:ca:ec:0f:74:1a:55:90:5c:00:ac:
         28:80:71:bd:f2:03:ea:7e:a7:3f:49:df:75:38:01:cb:8a:50:
         2e:64:ab:3e:07:58:bb:9b:3a:21:fb:4f:e6:b2:ff:16:74:d1:
         ea:61:a0:71:c5:fa:51:65:85:ff:1f:28:d9:a4:71:4e:2a:7f:
         a1:4c:6d:5d:7a:73:d8:d1:08:1a:12:6f:e9:cc:12:19:d7:e7:
         65:12:e8:86:ae:f2:8d:f2:68:6e:6c:50:de:ce:ce:5b:03:0c:
         7f:e6:72:e7:34:f5:bc:d1:17:ff:77:12:99:36:d3:4a:95:bd:
         89:b6:bb:2f:64:73:51:d3:a2:7c:cd:1b:9a:9d:0b:4f:66:68:
         2a:a9:a5:ad:35:ac:e5:8d:be:fa:0a:48:99:95:c6:27:37:17:
         f3:3a:cb:e7:6f:12:00:1c:db:ff:65:34:01:a2:a0:57:7d:39:
         16:b1:09:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:07 2026 by rpki-client