Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131362e302f32322d3234203d3e2039393035.roa
File:                     3230322e37372e3131362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          Vv/Gc1aZqIRGDihUWMWmB/KFIBvi6zpuuDKDQW27nxM=
Subject key identifier:   FD:81:1A:E4:10:2C:81:E4:8B:E0:7D:D3:12:34:9C:6E:5D:10:52:D4
Certificate issuer:       /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial:       47D4682D4FD14A42BFB012AEFD8486A02702EC8C
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131362e302f32322d3234203d3e2039393035.roa
Signing time:             Sun 03 May 2026 02:44:41 +0000
ROA not before:           Sun 03 May 2026 02:39:41 +0000
ROA not after:            Sun 02 May 2027 02:44:41 +0000
asID:                     9905
IP address blocks:        202.77.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
                          rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d4:68:2d:4f:d1:4a:42:bf:b0:12:ae:fd:84:86:a0:27:02:ec:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
        Validity
            Not Before: May  3 02:39:41 2026 GMT
            Not After : May  2 02:44:41 2027 GMT
        Subject: CN=FD811AE4102C81E48BE07DD312349C6E5D1052D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:93:ec:9b:dd:5d:cc:0b:10:e0:39:65:08:
                    0e:ac:a3:01:5f:a4:24:11:12:e7:8a:9e:c9:d6:4b:
                    0e:cd:f5:de:7e:27:07:cf:27:88:0e:46:aa:61:dd:
                    39:6d:56:a6:4b:39:e7:64:eb:9f:16:bc:c1:09:4d:
                    4e:51:88:15:8b:14:99:8f:c2:5a:17:63:9b:bb:4e:
                    8e:84:85:d7:e9:1e:eb:6c:88:9d:f9:97:ac:3e:70:
                    db:19:4c:c9:4e:f0:25:23:b5:9a:d1:da:4d:f5:ba:
                    fb:b9:cd:65:27:73:13:2e:3c:e2:2d:27:23:16:40:
                    53:8d:fc:91:cb:57:5f:d6:ba:61:8d:ba:90:38:df:
                    d0:0f:9b:68:33:f9:3b:eb:4c:7c:fd:7a:9e:1f:1e:
                    28:41:54:df:a4:66:4a:7f:98:65:63:6a:f8:78:08:
                    c1:16:9c:e7:95:3e:09:92:9c:96:70:aa:66:45:f9:
                    d3:f5:97:af:f1:07:05:0c:9a:2e:83:97:ad:dd:12:
                    78:10:41:4b:fb:11:c5:32:f3:df:7c:4e:0f:79:1f:
                    65:5e:31:13:4c:95:26:d3:bc:23:38:fe:dd:c8:3f:
                    67:0b:8f:1c:90:42:32:6d:fd:73:f0:f5:0f:85:3d:
                    07:55:6f:2b:92:57:ab:12:3b:64:ce:fa:0a:26:22:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:81:1A:E4:10:2C:81:E4:8B:E0:7D:D3:12:34:9C:6E:5D:10:52:D4
            X509v3 Authority Key Identifier:
                keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131362e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:c4:21:9b:49:16:0c:7b:50:d0:b1:54:22:5a:03:77:3e:
         db:57:95:d3:d8:14:bc:c1:5f:a0:26:d1:51:b6:63:70:00:2e:
         e3:93:b8:e2:be:13:43:c0:dc:bd:18:32:83:5b:39:ec:4e:42:
         05:da:b6:cf:13:7f:5b:df:3a:dd:87:e9:95:f8:82:26:2f:f9:
         cf:75:24:33:ca:95:80:b9:57:b5:05:b1:bd:48:cd:77:95:4f:
         0d:37:dc:f8:b5:53:26:79:15:20:14:83:fd:2f:bc:50:89:b7:
         48:63:e6:89:10:ae:cf:29:6e:db:0a:b8:b5:85:0f:50:98:ea:
         30:a4:36:f6:db:fb:14:9a:b6:14:11:de:48:38:6c:fa:a7:b9:
         b9:a4:b6:c7:ce:b8:7a:b2:59:36:ca:dc:b8:8a:fd:c6:42:5c:
         ec:8a:00:ba:ba:f2:7c:a9:04:59:65:fe:8a:4f:59:2e:3d:82:
         3e:e0:fb:4c:34:ce:7e:f6:70:f7:b0:9c:60:22:1c:0f:88:ea:
         3d:81:a5:c0:03:08:2f:d4:cd:e3:c4:ec:f9:5e:ad:a3:9b:93:
         51:e4:b7:6b:d8:d9:6e:8c:8a:bd:d2:2b:07:bf:50:00:f3:4f:
         fe:da:05:49:ca:e3:e9:d5:ab:a2:17:2e:f0:87:7b:7d:88:ed:
         cd:70:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:32 2026 by rpki-client