Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130302e302f32322d3234203d3e2039393035.roa
File:                     3230322e37372e3130302e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          4zcs3dsKUpw1QSrJt91B69SmnZX4YnkFdN0jKF+1k7E=
Subject key identifier:   DE:B4:F0:7C:4C:22:8B:58:44:B6:0F:95:73:70:EE:E1:C3:3F:23:AE
Certificate issuer:       /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial:       135F9E078E1BAA42AEFC2715DA0C81BA4CFE52CE
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130302e302f32322d3234203d3e2039393035.roa
Signing time:             Sun 03 May 2026 02:44:33 +0000
ROA not before:           Sun 03 May 2026 02:39:33 +0000
ROA not after:            Sun 02 May 2027 02:44:33 +0000
asID:                     9905
IP address blocks:        202.77.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
                          rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5f:9e:07:8e:1b:aa:42:ae:fc:27:15:da:0c:81:ba:4c:fe:52:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
        Validity
            Not Before: May  3 02:39:33 2026 GMT
            Not After : May  2 02:44:33 2027 GMT
        Subject: CN=DEB4F07C4C228B5844B60F957370EEE1C33F23AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:3c:b5:2d:40:73:4e:5a:73:97:19:33:63:
                    f1:cd:19:23:c1:16:49:62:de:5c:3c:38:d9:24:1a:
                    52:57:e4:09:bf:b8:e2:a8:cd:e7:20:6c:dd:87:0c:
                    ee:85:74:39:2a:7e:c1:80:dd:6a:7e:e7:89:6a:a1:
                    49:dc:ac:f3:48:9b:cb:bd:bd:c4:72:2d:04:ad:95:
                    ba:3c:48:df:be:25:cb:f0:f4:3e:1b:9a:d5:c9:45:
                    cd:fe:3b:ff:25:4d:e3:45:8e:f7:e3:63:1b:73:99:
                    b3:3b:c5:22:66:08:73:5d:f9:e1:f8:2a:0d:b9:e6:
                    25:21:0b:23:02:59:3b:63:06:24:2d:de:2c:01:a7:
                    b0:3f:d1:d7:12:04:a9:59:fd:9b:04:24:cb:93:96:
                    23:f9:81:a9:b7:bb:84:33:bf:64:e8:bc:44:41:80:
                    e7:2c:68:8b:6d:53:45:ab:b1:ac:b4:35:6c:05:54:
                    8b:bf:b7:5a:ec:ea:8a:74:99:76:88:f9:ab:84:68:
                    ca:3b:55:f9:9a:18:f3:f8:ce:29:4e:3b:ef:a3:e1:
                    03:4c:32:ab:13:77:1d:fb:b6:6b:16:e0:ed:fc:2c:
                    95:ae:de:d2:77:55:ba:5b:25:be:e6:a1:d3:4d:d4:
                    10:5b:de:e8:f1:0e:d9:b7:72:09:82:0b:a1:bf:86:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B4:F0:7C:4C:22:8B:58:44:B6:0F:95:73:70:EE:E1:C3:3F:23:AE
            X509v3 Authority Key Identifier:
                keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130302e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:d8:29:75:2b:82:20:f9:0b:79:37:5d:b8:7b:48:b8:88:a4:
         71:18:02:91:e3:5d:88:7b:37:cb:ca:fc:fa:de:6a:95:cb:15:
         8a:39:7e:55:ac:83:7b:4d:f0:6e:04:c1:0d:f3:2e:9f:6f:65:
         7a:93:a9:f2:2c:13:1a:f8:d3:60:56:67:aa:40:73:3e:e6:22:
         3e:44:e1:e2:8a:b2:f1:72:48:47:a7:93:82:64:06:93:e8:07:
         7f:5f:75:5e:8b:3e:2c:73:f1:ff:ee:c8:8d:48:66:b8:f0:ca:
         b3:64:11:8e:e7:6e:e2:fa:eb:2f:25:3a:82:22:f7:71:4c:df:
         06:2e:54:f5:05:21:5a:9f:e0:de:ac:da:9c:77:e0:7d:72:b9:
         95:c8:2e:fd:86:32:b7:36:3c:34:0d:84:a4:c5:87:cd:a8:6c:
         42:9e:51:38:0c:e4:84:f6:3e:82:3f:0a:c9:cf:ca:aa:f1:35:
         72:f7:60:4f:54:01:b8:66:0e:34:53:0a:2a:05:f9:d2:2a:ee:
         91:aa:09:94:01:ef:3c:f1:7f:3d:2c:89:e1:cd:30:63:09:7e:
         fb:95:60:bc:70:66:18:78:6a:3e:34:16:5d:d8:a5:e2:13:d8:
         f4:75:da:02:56:b6:f5:6d:df:cf:67:e9:b6:9a:38:e3:d1:b2:
         44:fa:da:92
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUE1+eB44bqkKu/CcV2gyBukz+Us4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhBMDE2NzE2NDEzRDAxMjhCQTQ3M0QwNDZBOTNBMjIy
RUYyNThFMTAeFw0yNjA1MDMwMjM5MzNaFw0yNzA1MDIwMjQ0MzNaMDMxMTAvBgNV
BAMTKERFQjRGMDdDNEMyMjhCNTg0NEI2MEY5NTczNzBFRUUxQzMzRjIzQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4pjy1LUBzTlpzlxkzY/HNGSPB
Fkli3lw8ONkkGlJX5Am/uOKozecgbN2HDO6FdDkqfsGA3Wp+54lqoUncrPNIm8u9
vcRyLQStlbo8SN++Jcvw9D4bmtXJRc3+O/8lTeNFjvfjYxtzmbM7xSJmCHNd+eH4
Kg255iUhCyMCWTtjBiQt3iwBp7A/0dcSBKlZ/ZsEJMuTliP5gam3u4Qzv2TovERB
gOcsaIttU0Wrsay0NWwFVIu/t1rs6op0mXaI+auEaMo7VfmaGPP4zilOO++j4QNM
MqsTdx37tmsW4O38LJWu3tJ3VbpbJb7modNN1BBb3ujxDtm3cgmCC6G/hvWtAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU3rTwfEwii1hEtg+Vc3Du4cM/I64wHwYDVR0j
BBgwFoAUOKAWcWQT0BKLpHPQRqk6Ii7yWOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzljMDVlZTMtN2ZjOC00NDA3LWIyYzAtY2I0MGJmY2ZiODY2LzAvMzhBMDE2NzE2
NDEzRDAxMjhCQTQ3M0QwNDZBOTNBMjIyRUYyNThFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zOEEwMTY3MTY0MTNEMDEyOEJBNDczRDA0NkE5M0EyMjJFRjI1
OEUxLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc5YzA1ZWUzLTdmYzgtNDQwNy1i
MmMwLWNiNDBiZmNmYjg2Ni8wLzMyMzAzMjJlMzczNzJlMzEzMDMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKTWQwDQYJKoZIhvcN
AQELBQADggEBAAHYKXUrgiD5C3k3Xbh7SLiIpHEYApHjXYh7N8vK/PreapXLFYo5
flWsg3tN8G4EwQ3zLp9vZXqTqfIsExr402BWZ6pAcz7mIj5E4eKKsvFySEenk4Jk
BpPoB39fdV6LPixz8f/uyI1IZrjwyrNkEY7nbuL66y8lOoIi93FM3wYuVPUFIVqf
4N6s2px34H1yuZXILv2GMrc2PDQNhKTFh82obEKeUTgM5IT2PoI/CsnPyqrxNXL3
YE9UAbhmDjRTCioF+dIq7pGqCZQB7zzxfz0sieHNMGMJfvuVYLxwZhh4aj40Fl3Y
peIT2PR12gJWtvVt389n6baaOOPRskT62pI=
-----END CERTIFICATE-----
Generated at Wed May 13 02:51:41 2026 by rpki-client