Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36322e302f32342d3234203d3e203338373535.roa
File:                     3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (raw, json)
Hash identifier:          rS0I7oveJtn+l4aAAzlWodrD1fslAxWP3f3cXLvaPIY=
Subject key identifier:   03:88:D7:CB:1F:C2:74:92:97:3C:59:43:71:12:68:1B:F6:A7:1A:3F
Certificate issuer:       /CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912
Certificate serial:       41224CA6AC16F9C50EAB043D63687FDD2B394E69
Authority key identifier: E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36322e302f32342d3234203d3e203338373535.roa
Signing time:             Sun 03 May 2026 02:54:13 +0000
ROA not before:           Sun 03 May 2026 02:49:13 +0000
ROA not after:            Sun 02 May 2027 02:54:13 +0000
asID:                     38755
IP address blocks:        203.123.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl
                          rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:22:4c:a6:ac:16:f9:c5:0e:ab:04:3d:63:68:7f:dd:2b:39:4e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912
        Validity
            Not Before: May  3 02:49:13 2026 GMT
            Not After : May  2 02:54:13 2027 GMT
        Subject: CN=0388D7CB1FC27492973C59437112681BF6A71A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:ae:2e:30:c0:2a:87:7a:42:bf:a5:dc:2c:
                    e8:f6:80:d5:49:2c:4a:22:ce:a7:c2:e2:76:ed:83:
                    72:2b:a3:62:1b:03:86:01:79:00:11:bc:7d:af:95:
                    2f:f1:24:d2:1a:b1:fa:24:fc:14:ec:58:0f:26:66:
                    d4:af:29:9c:f5:e9:7f:2a:2a:27:2c:cd:c7:89:64:
                    11:a7:22:4e:dc:42:37:27:94:90:66:4c:f0:ed:c1:
                    42:30:8e:4d:ce:dc:61:f7:76:a1:7c:12:64:0e:e4:
                    b2:a6:21:22:7f:1f:c7:2f:fc:cd:8d:1c:0f:49:fe:
                    12:94:36:72:12:48:54:aa:bd:a9:3c:6f:79:7d:2b:
                    e5:f6:51:07:4a:28:f8:f0:ed:75:41:b0:51:67:98:
                    38:50:a2:e9:98:b1:ed:4c:28:9f:63:94:be:83:27:
                    f8:b6:39:8c:7d:e2:75:91:df:05:33:c2:8a:8a:5e:
                    41:3f:fc:59:ea:b6:3b:0e:d9:81:5a:fa:b8:b4:10:
                    39:8f:9c:55:7a:28:31:71:b6:44:29:e0:40:06:f7:
                    9b:3a:a0:71:f5:73:5b:e6:24:09:61:19:02:f0:b5:
                    65:0c:40:b9:79:00:ab:d9:ff:d4:eb:bb:f2:c3:58:
                    21:f8:99:0f:36:d7:0d:f4:06:6d:f0:e0:b4:19:75:
                    d0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:88:D7:CB:1F:C2:74:92:97:3C:59:43:71:12:68:1B:F6:A7:1A:3F
            X509v3 Authority Key Identifier:
                keyid:E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36322e302f32342d3234203d3e203338373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.123.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:54:a2:1d:7e:d3:be:1e:ea:b1:0d:e5:8c:6f:f0:fe:26:
         ef:29:81:4c:7e:d6:37:bc:14:10:d8:b1:fc:26:46:61:38:91:
         c0:1c:ca:a2:5c:aa:0d:7b:07:d1:2f:23:86:61:6d:b4:6a:db:
         69:46:53:bd:eb:86:c9:0b:e0:c5:57:8e:d0:67:9b:63:0e:da:
         a8:f9:95:cb:cd:b9:d9:a0:5a:99:80:69:66:41:44:50:b3:b0:
         15:ab:bc:38:81:e1:bf:43:99:e1:d0:cd:41:8a:62:1b:08:5b:
         dc:0c:d0:97:c9:e0:ad:e4:00:b9:c6:fc:af:3d:b3:ba:d4:69:
         39:7f:db:d4:c3:cf:fa:f1:c9:66:8c:43:92:97:4f:96:96:2d:
         22:8d:72:d2:ef:89:49:3a:f5:1a:f3:8d:81:73:e4:0f:c0:53:
         26:52:22:02:cd:3b:9a:b7:f7:c5:ec:da:eb:34:97:4e:ff:45:
         63:e9:47:92:2d:a5:64:f1:9e:1e:de:82:9d:30:6e:14:ea:c6:
         c5:87:07:0b:c4:16:16:77:c2:d8:92:a9:77:e8:93:aa:a3:e4:
         21:70:dd:18:eb:20:26:2e:f4:98:14:c0:93:9f:0d:0b:45:30:
         28:36:9a:90:c3:99:8c:ef:dc:d4:bb:99:7d:ec:02:5e:e8:19:
         88:c3:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:19 2026 by rpki-client