Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/3230322e36372e382e302f32312d3234203d3e203234313935.roa
File:                     3230322e36372e382e302f32312d3234203d3e203234313935.roa (raw, json)
Hash identifier:          vrQysHXSDOYVY5vPGR7dw/5TLODMWl8YiVoK5Waal3c=
Subject key identifier:   ED:0A:4B:33:76:A8:88:BC:AD:C0:A8:F1:28:7D:67:51:8F:3D:61:9D
Certificate issuer:       /CN=FB3286A3734F366E27845180AD985879147BEA5E
Certificate serial:       A9586DCE8C9FC260EA2388D2F3E169E609CF77
Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/3230322e36372e382e302f32312d3234203d3e203234313935.roa
Signing time:             Sun 03 May 2026 02:48:36 +0000
ROA not before:           Sun 03 May 2026 02:43:36 +0000
ROA not after:            Sun 02 May 2027 02:48:36 +0000
asID:                     24195
IP address blocks:        202.67.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl
                          rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a9:58:6d:ce:8c:9f:c2:60:ea:23:88:d2:f3:e1:69:e6:09:cf:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E
        Validity
            Not Before: May  3 02:43:36 2026 GMT
            Not After : May  2 02:48:36 2027 GMT
        Subject: CN=ED0A4B3376A888BCADC0A8F1287D67518F3D619D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:a0:00:b8:7e:92:59:27:1c:ae:44:89:71:
                    17:d2:94:09:fb:be:80:66:7f:8b:e6:53:1a:80:5d:
                    76:f9:f6:c7:e1:37:ce:9c:45:c5:83:61:c5:0b:98:
                    e4:6d:2b:47:0f:c9:fe:14:3b:f2:f9:61:cf:1a:ff:
                    96:ef:c4:fa:48:09:9b:4a:06:96:ba:f6:e1:ec:f2:
                    50:ad:8e:e0:ac:b8:2a:92:6c:6a:b7:8e:d8:ee:8e:
                    70:7d:51:01:f7:59:e5:9a:08:aa:a2:6b:46:99:ac:
                    b8:06:20:be:34:5a:e5:e4:de:44:b4:85:5b:4d:28:
                    05:c5:ab:13:bc:b1:a5:88:9b:fe:e1:21:63:4e:e8:
                    e6:09:ad:94:a1:cd:c7:10:6e:f3:b0:56:37:b8:cf:
                    4f:26:55:3f:37:ff:2f:a0:c0:78:16:2b:ca:d1:7f:
                    7a:98:88:e9:e0:5d:be:f9:38:0f:52:22:8f:50:4b:
                    60:56:aa:43:37:73:03:e1:3b:08:45:3e:e9:d6:d6:
                    96:46:ad:11:84:69:56:95:82:93:1d:99:44:6e:9d:
                    e0:4f:84:49:ad:08:76:ee:89:28:fc:4d:db:19:b0:
                    b6:e4:5a:b0:3e:20:db:7f:fe:7c:07:ea:79:3c:c7:
                    95:56:1a:e8:2d:33:e5:1a:16:21:1e:5f:44:3d:75:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0A:4B:33:76:A8:88:BC:AD:C0:A8:F1:28:7D:67:51:8F:3D:61:9D
            X509v3 Authority Key Identifier:
                keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/3230322e36372e382e302f32312d3234203d3e203234313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.67.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:90:8c:90:bd:3f:c0:9a:2b:bd:7f:fb:ac:e0:9a:f1:71:68:
         22:e9:c9:14:b2:cd:90:ad:6a:e6:fb:04:e0:0c:ba:4e:a3:0c:
         e4:8f:38:f6:8a:f2:ca:bb:5f:d3:12:73:d4:88:7b:a1:4e:34:
         51:d8:d9:1d:7d:3b:05:9b:f6:cc:bc:91:45:0c:c1:56:6a:ca:
         0b:33:11:b9:9c:fb:3a:1e:09:9d:95:1a:2f:51:28:27:95:17:
         f1:1a:a1:6b:fe:2a:da:83:a3:b3:2a:ea:04:cd:1c:8a:88:70:
         fa:a7:e0:fd:ef:e0:94:a9:71:25:21:31:58:f5:ce:c1:6a:53:
         05:d8:af:27:4d:71:58:07:e5:56:25:cf:6b:09:fe:80:6e:29:
         f2:46:f0:42:39:d0:d8:38:e3:f0:46:b7:6c:9b:d5:25:0a:b0:
         fc:29:6e:94:23:f0:26:d2:77:ff:13:14:e4:08:29:97:23:13:
         77:1e:3d:15:92:33:02:a6:39:fc:11:09:c1:5a:e2:b3:33:81:
         41:70:0b:73:4b:5b:23:d6:6f:d4:db:50:11:d0:99:71:50:d2:
         5a:8b:2f:68:dc:48:25:e7:e2:80:65:5a:2b:80:a0:6c:26:5c:
         72:85:fc:24:58:64:ae:a8:c3:03:d6:a4:cf:c2:76:0d:bb:49:
         cb:f1:ca:78
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUAKlYbc6Mn8Jg6iOI0vPhaeYJz3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx
NDdCRUE1RTAeFw0yNjA1MDMwMjQzMzZaFw0yNzA1MDIwMjQ4MzZaMDMxMTAvBgNV
BAMTKEVEMEE0QjMzNzZBODg4QkNBREMwQThGMTI4N0Q2NzUxOEYzRDYxOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWKqAAuH6SWSccrkSJcRfSlAn7
voBmf4vmUxqAXXb59sfhN86cRcWDYcULmORtK0cPyf4UO/L5Yc8a/5bvxPpICZtK
Bpa69uHs8lCtjuCsuCqSbGq3jtjujnB9UQH3WeWaCKqia0aZrLgGIL40WuXk3kS0
hVtNKAXFqxO8saWIm/7hIWNO6OYJrZShzccQbvOwVje4z08mVT83/y+gwHgWK8rR
f3qYiOngXb75OA9SIo9QS2BWqkM3cwPhOwhFPunW1pZGrRGEaVaVgpMdmURuneBP
hEmtCHbuiSj8TdsZsLbkWrA+INt//nwH6nk8x5VWGugtM+UaFiEeX0Q9dToHAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQU7QpLM3aoiLytwKjxKH1nUY89YZ0wHwYDVR0j
BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3
MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF
QTVFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw
NjAtMmU4ZDQyZWFlNjU1LzAvMzIzMDMyMmUzNjM3MmUzODJlMzAyZjMyMzEyZDMy
MzQyMDNkM2UyMDMyMzQzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPKQwgwDQYJKoZIhvcNAQEL
BQADggEBAHWQjJC9P8CaK71/+6zgmvFxaCLpyRSyzZCtaub7BOAMuk6jDOSPOPaK
8sq7X9MSc9SIe6FONFHY2R19OwWb9sy8kUUMwVZqygszEbmc+zoeCZ2VGi9RKCeV
F/EaoWv+KtqDo7Mq6gTNHIqIcPqn4P3v4JSpcSUhMVj1zsFqUwXYrydNcVgH5VYl
z2sJ/oBuKfJG8EI50Ng44/BGt2yb1SUKsPwpbpQj8CbSd/8TFOQIKZcjE3cePRWS
MwKmOfwRCcFa4rMzgUFwC3NLWyPWb9TbUBHQmXFQ0lqLL2jcSCXn4oBlWiuAoGwm
XHKF/CRYZK6owwPWpM/Cdg27Scvxyng=
-----END CERTIFICATE-----
Generated at Tue May 12 22:56:19 2026 by rpki-client