Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa
File:                     3230322e3133372e31362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          dSBZailoQQTSiyKxA2l6AI3PspujPG35rpgdMX5KHK0=
Subject key identifier:   C4:F9:CD:DF:20:FE:73:B4:7F:97:6F:2C:B2:96:C2:C4:01:C0:44:04
Certificate issuer:       /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial:       752B00EA8E15CDC38A8C3B9C9C1DB151993A0944
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa
Signing time:             Sun 03 May 2026 02:44:40 +0000
ROA not before:           Sun 03 May 2026 02:39:40 +0000
ROA not after:            Sun 02 May 2027 02:44:40 +0000
asID:                     9905
IP address blocks:        202.137.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
                          rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2b:00:ea:8e:15:cd:c3:8a:8c:3b:9c:9c:1d:b1:51:99:3a:09:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
        Validity
            Not Before: May  3 02:39:40 2026 GMT
            Not After : May  2 02:44:40 2027 GMT
        Subject: CN=C4F9CDDF20FE73B47F976F2CB296C2C401C04404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:cb:b6:e2:ee:df:60:92:fb:ed:be:11:52:
                    aa:45:16:3e:0c:b5:b7:fa:1c:8d:bd:e8:91:28:78:
                    4b:c2:84:c3:f2:bf:77:d3:7b:5d:61:ce:ff:b8:11:
                    18:a4:86:60:f2:66:f8:3c:5f:5b:71:7e:ae:18:6e:
                    3d:f2:9d:15:d5:d8:d6:4c:b2:b9:1f:7b:9e:91:5e:
                    eb:11:d2:c5:77:d7:de:df:b7:b8:d8:a1:10:16:20:
                    66:be:84:fb:06:e3:71:5b:0f:43:21:49:61:2e:cf:
                    94:da:ec:3b:ed:7d:38:6f:8e:81:5e:7e:7e:91:7f:
                    c5:fd:5b:1c:04:2e:d3:1b:cb:f5:b8:51:bf:73:c8:
                    15:dc:6c:91:e7:83:31:59:9f:aa:33:ea:e4:cf:0c:
                    82:d1:bd:9a:fc:28:2a:d7:49:8d:58:7c:af:e9:79:
                    c2:4d:e4:aa:fc:64:ce:7f:ba:cf:df:49:90:1d:ab:
                    b4:39:1b:37:77:4d:b0:b0:18:7a:da:d1:e3:23:b7:
                    f2:a1:c0:60:d0:78:27:cd:41:86:18:1e:87:bf:5a:
                    6f:51:d2:8a:db:c2:00:8d:f7:e0:56:b6:7d:fd:b9:
                    a6:5d:e5:5c:7d:6d:12:71:f1:88:c1:3e:d6:90:32:
                    cc:6c:54:33:47:2d:40:d5:34:fd:0b:cf:e4:fa:4b:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F9:CD:DF:20:FE:73:B4:7F:97:6F:2C:B2:96:C2:C4:01:C0:44:04
            X509v3 Authority Key Identifier:
                keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.137.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:b9:89:28:0b:3e:09:00:8d:57:26:68:d5:74:11:53:34:4b:
         20:95:c8:2e:49:b0:7e:a4:47:30:05:d2:78:a0:81:85:50:64:
         fb:e6:1e:d2:9e:a7:ed:77:6f:0b:e2:33:4c:41:7b:b2:94:ec:
         cb:5f:c0:d9:42:0f:ba:ea:6f:bd:72:6c:e7:2c:98:fd:8c:31:
         e9:37:78:2d:f6:74:9a:b3:32:4d:ad:04:36:7c:96:80:48:36:
         13:a5:0f:bf:9c:59:18:eb:2a:32:cf:f6:e1:66:77:da:d8:8f:
         90:be:7d:79:39:25:58:48:68:30:59:24:18:44:3e:d2:03:42:
         95:a0:f3:99:2b:8c:2b:a9:d7:d5:6e:f6:76:cb:3e:ff:6b:94:
         f4:7f:44:78:76:4c:f4:f1:7b:97:ca:f3:c8:5e:2b:02:21:db:
         cc:1c:71:b0:3d:9d:39:96:ef:27:63:9a:8b:2e:ae:c9:bc:56:
         82:29:51:f5:12:20:33:30:0e:9a:77:14:16:e0:a1:37:76:0f:
         f5:b8:a6:74:45:82:e1:80:08:a5:db:03:c6:ca:35:cf:01:cf:
         3a:09:15:d3:09:2e:c2:75:99:39:36:62:34:7d:c1:80:e4:1c:
         39:75:1a:44:19:85:7e:3e:15:9b:54:1d:78:31:cc:b8:f0:3c:
         bc:20:32:3d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUdSsA6o4VzcOKjDucnB2xUZk6CUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhBMDE2NzE2NDEzRDAxMjhCQTQ3M0QwNDZBOTNBMjIy
RUYyNThFMTAeFw0yNjA1MDMwMjM5NDBaFw0yNzA1MDIwMjQ0NDBaMDMxMTAvBgNV
BAMTKEM0RjlDRERGMjBGRTczQjQ3Rjk3NkYyQ0IyOTZDMkM0MDFDMDQ0MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1d8u24u7fYJL77b4RUqpFFj4M
tbf6HI296JEoeEvChMPyv3fTe11hzv+4ERikhmDyZvg8X1txfq4Ybj3ynRXV2NZM
srkfe56RXusR0sV3197ft7jYoRAWIGa+hPsG43FbD0MhSWEuz5Ta7DvtfThvjoFe
fn6Rf8X9WxwELtMby/W4Ub9zyBXcbJHngzFZn6oz6uTPDILRvZr8KCrXSY1YfK/p
ecJN5Kr8ZM5/us/fSZAdq7Q5Gzd3TbCwGHra0eMjt/KhwGDQeCfNQYYYHoe/Wm9R
0orbwgCN9+BWtn39uaZd5Vx9bRJx8YjBPtaQMsxsVDNHLUDVNP0Lz+T6S2zRAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUxPnN3yD+c7R/l28sspbCxAHARAQwHwYDVR0j
BBgwFoAUOKAWcWQT0BKLpHPQRqk6Ii7yWOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzljMDVlZTMtN2ZjOC00NDA3LWIyYzAtY2I0MGJmY2ZiODY2LzAvMzhBMDE2NzE2
NDEzRDAxMjhCQTQ3M0QwNDZBOTNBMjIyRUYyNThFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zOEEwMTY3MTY0MTNEMDEyOEJBNDczRDA0NkE5M0EyMjJFRjI1
OEUxLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc5YzA1ZWUzLTdmYzgtNDQwNy1i
MmMwLWNiNDBiZmNmYjg2Ni8wLzMyMzAzMjJlMzEzMzM3MmUzMTM2MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKiRAwDQYJKoZIhvcN
AQELBQADggEBAF+5iSgLPgkAjVcmaNV0EVM0SyCVyC5JsH6kRzAF0niggYVQZPvm
HtKep+13bwviM0xBe7KU7MtfwNlCD7rqb71ybOcsmP2MMek3eC32dJqzMk2tBDZ8
loBINhOlD7+cWRjrKjLP9uFmd9rYj5C+fXk5JVhIaDBZJBhEPtIDQpWg85krjCup
19Vu9nbLPv9rlPR/RHh2TPTxe5fK88heKwIh28wccbA9nTmW7ydjmosursm8VoIp
UfUSIDMwDpp3FBbgoTd2D/W4pnRFguGACKXbA8bKNc8BzzoJFdMJLsJ1mTk2YjR9
wYDkHDl1GkQZhX4+FZtUHXgxzLjwPLwgMj0=
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:08 2026 by rpki-client