Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/3230332e3139302e34302e302f32312d3234203d3e203435333137.roa
File:                     3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (raw, json)
Hash identifier:          qsT0+VavPcHM0/0OWpLNw++GFhjVrktegs30W7OSHuM=
Subject key identifier:   77:AD:2F:8C:9E:DE:85:B6:88:67:09:72:A1:D3:3B:91:D3:DC:B5:A2
Certificate issuer:       /CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E
Certificate serial:       6FE377DB74FE91056E1278DCDDCAE6699FF7C7AD
Authority key identifier: 9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/3230332e3139302e34302e302f32312d3234203d3e203435333137.roa
Signing time:             Sun 03 May 2026 02:54:47 +0000
ROA not before:           Sun 03 May 2026 02:49:47 +0000
ROA not after:            Sun 02 May 2027 02:54:47 +0000
asID:                     45317
IP address blocks:        203.190.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl
                          rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e3:77:db:74:fe:91:05:6e:12:78:dc:dd:ca:e6:69:9f:f7:c7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E
        Validity
            Not Before: May  3 02:49:47 2026 GMT
            Not After : May  2 02:54:47 2027 GMT
        Subject: CN=77AD2F8C9EDE85B688670972A1D33B91D3DCB5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:11:b1:b2:08:b4:6f:da:f6:21:5d:43:a3:
                    e1:2a:71:52:13:df:38:c0:7a:87:f5:aa:f6:a0:32:
                    09:5c:c1:58:eb:8a:14:44:0c:16:69:b7:b2:1d:68:
                    23:97:84:fa:c1:c5:08:96:13:ea:59:04:ab:97:8a:
                    19:a5:c3:7d:4e:6e:41:95:4a:ed:8c:cd:09:d1:52:
                    70:41:7d:31:c0:fa:7e:1a:d2:74:e1:a6:43:f1:f7:
                    b6:ad:19:11:ab:fc:6f:c8:e3:4b:c0:dd:36:e2:3a:
                    cd:3c:32:61:70:ea:66:6b:79:96:15:2b:7c:94:b1:
                    98:72:4a:ce:80:75:15:dc:32:18:47:53:1f:5d:ee:
                    67:e2:f8:de:c1:90:7f:07:89:be:c7:8a:a8:2f:bc:
                    9b:4b:99:28:0e:ec:68:29:34:d6:21:67:99:eb:65:
                    63:fa:22:be:c3:ca:4d:f8:24:36:6f:77:81:c3:89:
                    de:6f:48:83:ad:65:e7:99:c3:e1:84:f0:4e:f8:c1:
                    b7:f8:e2:c1:a4:49:f1:a0:24:9a:77:33:44:18:8c:
                    27:b5:37:8d:75:d7:e6:7b:58:dd:89:d2:e4:2f:8d:
                    74:4c:ca:04:2d:93:c2:d9:55:59:cf:36:3e:33:aa:
                    d8:4f:eb:99:bf:1b:7c:4c:92:cc:4e:50:c6:15:05:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AD:2F:8C:9E:DE:85:B6:88:67:09:72:A1:D3:3B:91:D3:DC:B5:A2
            X509v3 Authority Key Identifier:
                keyid:9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/3230332e3139302e34302e302f32312d3234203d3e203435333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.190.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:22:5e:ca:85:6b:09:ed:15:b9:5b:eb:e8:58:8c:1c:0b:31:
         59:94:2c:9b:e8:ee:75:c1:3f:3a:43:9a:e2:66:ed:d8:45:2f:
         80:03:a8:cc:96:37:73:c8:9e:ad:b4:c9:83:25:db:2c:e8:ca:
         6f:43:e0:3c:40:ab:8f:36:c3:ca:59:f0:16:00:a8:34:d9:69:
         b9:0c:35:84:3d:3d:63:9b:8e:bd:90:40:fb:a8:4c:c8:58:27:
         c3:f9:2e:61:f9:ff:7a:8e:ae:90:40:7c:d8:2e:5e:6a:93:b2:
         fb:9d:1c:e6:62:e4:9b:62:6f:d0:4f:0f:88:cb:e7:c8:d0:06:
         19:2c:55:bc:d3:06:29:3b:ff:2f:62:db:69:e3:2f:4f:48:3a:
         f1:81:d5:39:fd:f8:7e:4e:bb:ef:58:58:55:cb:97:a8:f5:9e:
         7b:99:d5:54:68:65:de:76:48:af:c0:03:5f:fa:f0:43:3e:92:
         ad:5c:94:2f:bb:24:b6:68:d0:ef:3c:a1:ba:19:6d:7c:6b:e4:
         59:e1:33:25:77:2d:31:9a:2b:f8:07:da:0a:71:f4:f9:c6:44:
         10:01:06:ac:62:99:10:45:60:4b:e1:83:ef:ec:90:f8:60:bd:
         a7:25:ab:15:53:3d:7c:d0:43:e6:7f:df:0c:1b:57:dc:40:f3:
         21:3d:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:07 2026 by rpki-client