Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e203234323036.roa
File:                     3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier:          AEVg+7i58qruunXCeLGmzypDAO404wrt2O3S9y5evhc=
Subject key identifier:   ED:0C:08:13:AB:49:AB:51:35:C0:F0:18:78:AA:0B:BE:E6:69:5C:22
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       6829E3DAC65578D1279FC126A0E157632B148AB6
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e203234323036.roa
Signing time:             Sun 03 May 2026 02:57:26 +0000
ROA not before:           Sun 03 May 2026 02:52:26 +0000
ROA not after:            Sun 02 May 2027 02:57:26 +0000
asID:                     24206
IP address blocks:        203.84.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:29:e3:da:c6:55:78:d1:27:9f:c1:26:a0:e1:57:63:2b:14:8a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: May  3 02:52:26 2026 GMT
            Not After : May  2 02:57:26 2027 GMT
        Subject: CN=ED0C0813AB49AB5135C0F01878AA0BBEE6695C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:5a:88:28:16:bf:a5:16:e4:f4:47:61:c7:
                    f6:e8:e9:d5:f4:4d:9a:d1:b2:d4:27:f9:22:c0:ad:
                    30:d7:78:da:22:c8:88:9b:6b:07:82:78:5c:5c:83:
                    0d:e0:71:a3:61:ee:28:cc:13:95:bd:b6:9b:25:3a:
                    16:ba:ca:60:b6:8a:ab:2c:ef:12:38:df:27:99:2d:
                    b4:58:7b:c5:89:1e:88:b3:8e:2e:68:cf:cc:64:d3:
                    b5:c6:44:21:ca:48:68:1c:33:7c:51:43:58:8c:75:
                    2f:b2:2e:2a:27:07:e7:6a:c4:53:38:1a:14:85:8b:
                    e6:03:c9:a5:15:82:07:44:08:91:a4:d3:90:57:a3:
                    e3:78:26:c2:d0:a8:c1:83:b2:aa:d9:8d:dd:95:ff:
                    1b:31:39:16:97:d4:9e:c3:3e:ba:49:9b:f6:e8:c0:
                    78:e2:79:0b:af:e2:e4:e3:78:ff:ab:11:22:98:67:
                    80:df:82:0a:79:07:58:7f:31:ff:24:6d:c0:f2:cb:
                    ed:f1:cc:fa:01:25:04:4b:a6:3e:7f:dd:e8:97:9c:
                    61:ac:1a:25:1b:27:99:06:46:03:89:f2:70:17:44:
                    78:db:4e:77:84:cf:eb:96:a2:64:f4:29:ec:7d:4b:
                    b9:8a:cc:f3:8a:19:4b:93:fe:d1:5b:21:7b:db:4c:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0C:08:13:AB:49:AB:51:35:C0:F0:18:78:AA:0B:BE:E6:69:5C:22
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.84.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:10:f4:67:84:01:28:77:c4:40:30:2c:3c:ff:47:00:a3:1a:
         b7:43:4f:d1:88:8f:69:20:d9:e4:fe:6d:d9:54:99:e2:07:6a:
         73:07:c5:7c:e6:b0:1f:f2:e8:71:76:d3:00:f6:82:6c:5e:3f:
         3d:eb:74:c6:2f:7d:5e:e9:6a:99:be:af:02:8e:8c:26:ef:a8:
         df:bf:20:34:4a:b7:e2:42:29:5d:d8:37:ee:d0:9e:a5:c3:bd:
         51:a4:ac:0a:6b:a1:a0:7c:f0:9f:17:fc:ba:e6:2c:0e:c5:e6:
         df:e1:6f:78:a4:67:1c:57:9a:a2:25:57:7f:29:95:41:ab:80:
         5d:ec:2e:e4:32:5c:63:fe:23:31:b2:b6:29:da:a2:35:3e:cc:
         51:3e:3f:47:50:ab:64:74:e8:b9:69:f2:e1:b6:88:02:e6:2b:
         81:2f:24:5c:1f:95:6b:3a:f8:bd:7f:f9:ea:a2:0a:fa:c2:dc:
         48:bb:2a:42:14:1e:0a:de:ca:9e:23:01:d9:7e:2b:d5:e9:a0:
         b1:66:3c:46:d0:cc:8b:72:8a:77:12:c7:f0:16:8f:92:bd:ca:
         1c:ab:b0:fe:ea:b5:c3:99:f6:5e:56:bf:6f:0e:22:93:83:fe:
         02:82:15:50:9b:79:8b:a1:e4:2e:0e:a2:3b:34:a1:47:20:92:
         bf:6f:9c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:17 2026 by rpki-client