Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3132302e302f32322d3234203d3e2039393035.roa
File:                     3230322e37372e3132302e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          dijnvbrxw14fcU7sTr4Hi9+AvVCISHBw/XOBUUSQn0M=
Subject key identifier:   23:C1:66:C7:72:59:A2:84:27:6A:5D:0D:1B:78:26:66:E2:02:F1:50
Certificate issuer:       /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial:       75873099665B557B4074A16AB198596E2A2D5F24
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3132302e302f32322d3234203d3e2039393035.roa
Signing time:             Sun 03 May 2026 02:44:34 +0000
ROA not before:           Sun 03 May 2026 02:39:34 +0000
ROA not after:            Sun 02 May 2027 02:44:34 +0000
asID:                     9905
IP address blocks:        202.77.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
                          rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:87:30:99:66:5b:55:7b:40:74:a1:6a:b1:98:59:6e:2a:2d:5f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
        Validity
            Not Before: May  3 02:39:34 2026 GMT
            Not After : May  2 02:44:34 2027 GMT
        Subject: CN=23C166C77259A284276A5D0D1B782666E202F150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:9b:72:9e:3c:74:31:fe:6c:b5:44:c3:d8:
                    a1:e7:3e:6f:bc:21:69:c2:c7:51:3c:28:8a:93:bf:
                    f2:60:bc:8a:b7:99:34:8d:bd:90:ad:ea:81:c2:fa:
                    4e:92:81:1c:ef:c6:eb:6e:7e:f0:c2:10:1c:66:6a:
                    2a:1b:4f:7f:84:5e:24:a8:e2:6e:63:79:d8:75:55:
                    53:18:13:7d:02:0e:ca:e1:d1:1d:41:bd:aa:c2:b3:
                    5c:0c:91:5e:8b:9c:34:94:f6:a3:7e:fa:fb:4d:ce:
                    05:fc:19:f2:3b:7b:92:3f:98:9f:9a:bd:d5:23:fd:
                    45:47:22:70:15:63:82:dc:e2:27:bc:0f:bf:44:36:
                    58:25:de:26:dd:93:b3:0e:c9:cf:fe:98:fb:f0:f6:
                    13:b6:8d:9a:7b:55:4d:8b:aa:df:aa:74:19:ea:3f:
                    b9:cf:5d:60:74:f6:9d:29:3e:bc:68:d0:dd:2d:41:
                    05:17:17:44:48:b6:a5:af:c1:fd:6a:ee:3d:b0:2b:
                    b7:ea:2a:de:2b:a3:6c:cd:b6:94:65:89:2c:2b:47:
                    45:be:fa:76:4e:61:a4:ee:e3:d3:48:70:67:c9:49:
                    6a:a0:13:05:94:0d:2c:9c:78:19:c7:4d:d7:dc:72:
                    01:64:bb:16:4a:b5:44:1a:d8:4a:e2:8d:5d:ba:23:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C1:66:C7:72:59:A2:84:27:6A:5D:0D:1B:78:26:66:E2:02:F1:50
            X509v3 Authority Key Identifier:
                keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3132302e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:c6:4d:d4:fd:67:d9:36:d5:36:05:e6:96:9e:a4:6d:ac:ae:
         73:45:b6:04:6d:5a:37:4b:30:a4:8c:de:27:b5:52:5e:9b:8c:
         3e:d5:01:c0:e1:22:29:35:62:17:ac:bb:22:73:7c:29:a9:ec:
         13:63:2f:18:ae:5c:c0:68:95:b5:51:49:1e:4a:51:3e:42:8a:
         87:29:41:34:9a:8d:23:0d:c0:91:b3:5f:f2:51:63:3e:55:e0:
         4f:00:e3:d6:2d:41:87:89:df:73:9b:c4:11:fe:cd:35:f0:2e:
         80:fd:f4:b8:cd:7d:0e:cc:38:6f:2d:84:16:38:aa:53:34:c1:
         71:46:41:4c:90:dd:0d:89:b4:42:49:b2:25:66:aa:3b:00:16:
         4a:72:fe:24:cb:2b:04:28:da:c4:5d:01:c8:e2:b1:ca:ac:01:
         b6:5f:d9:8a:60:69:bf:6a:eb:78:49:5d:07:a1:54:43:c5:a5:
         7b:b0:b2:00:5d:ef:82:e5:fb:1b:d2:16:5d:d8:5f:27:17:a0:
         4c:eb:a0:80:cb:01:99:67:c6:17:64:2f:56:6b:30:60:f8:8c:
         81:8d:cc:9b:cc:c3:45:8d:4d:5c:3d:cf:97:2a:2e:c3:b0:7a:
         fb:8a:9c:71:ee:bd:6a:9e:70:5b:d1:ea:45:bd:31:ff:02:44:
         e4:89:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:45 2026 by rpki-client