Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa
File:                     3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier:          jWQefS3Ey1XKZj63Vgm7X9Au391EQXnRCYqwez8oUUU=
Subject key identifier:   93:81:96:15:0F:25:E7:1A:E2:87:0C:14:24:F4:08:DE:25:4C:91:34
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       2460C924FD8551A3EDDC10B0D6824A99AE484984
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa
Signing time:             Sun 03 May 2026 02:57:29 +0000
ROA not before:           Sun 03 May 2026 02:52:29 +0000
ROA not after:            Sun 02 May 2027 02:57:29 +0000
asID:                     214143
IP address blocks:        203.84.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:60:c9:24:fd:85:51:a3:ed:dc:10:b0:d6:82:4a:99:ae:48:49:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: May  3 02:52:29 2026 GMT
            Not After : May  2 02:57:29 2027 GMT
        Subject: CN=938196150F25E71AE2870C1424F408DE254C9134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:5f:a7:79:5f:5a:c1:bd:51:0b:21:cf:33:
                    52:bf:af:d6:01:39:8b:bb:a2:21:71:a6:1e:dc:85:
                    ce:ef:e9:f9:91:99:12:4a:83:08:e0:9e:f5:3b:c5:
                    e7:34:60:28:4f:61:ea:23:ae:4c:dc:0c:90:73:e0:
                    e8:a4:b0:1f:77:da:c1:56:e0:87:69:93:35:c5:4a:
                    e3:b6:15:4c:07:2d:40:57:07:52:c7:ac:fe:d0:2e:
                    b5:37:b8:6a:cd:07:59:7b:9c:fe:ce:c1:13:b9:33:
                    df:f1:35:c8:49:94:af:85:b2:72:17:8d:2e:35:2f:
                    53:a9:05:27:6b:a7:71:a0:c4:b4:72:f5:62:db:4e:
                    e9:60:c8:b2:79:5f:d1:15:e3:c7:64:4e:90:6c:53:
                    dd:94:b4:3b:71:3b:6d:e3:3a:c9:74:ff:ee:01:8d:
                    c4:09:ee:58:6f:7e:dc:f6:c0:09:6c:bc:ff:d2:fc:
                    97:3c:4d:52:c1:d2:33:1a:18:eb:56:b6:84:48:ea:
                    1c:f3:88:94:78:80:3c:45:9d:13:4d:de:73:4a:dd:
                    58:99:24:1d:9a:cb:6a:d4:31:6b:87:a5:3a:85:dc:
                    2b:86:10:45:75:a8:74:dd:8e:fa:46:ee:8c:ed:35:
                    0e:8a:34:22:0b:da:cc:74:d5:c1:95:54:a5:f5:e1:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:81:96:15:0F:25:E7:1A:E2:87:0C:14:24:F4:08:DE:25:4C:91:34
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.84.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:cd:ea:cb:c7:16:de:b0:32:26:90:6f:d7:b7:3f:cf:0a:89:
         24:ee:5c:5e:b1:95:8b:da:c5:6d:af:44:b2:f3:29:51:07:b1:
         68:d6:dc:3f:b2:21:1a:5b:d5:73:34:d7:e9:09:8e:9b:24:94:
         fc:22:13:6e:29:35:a2:c1:b6:f7:ef:c6:bd:d5:df:0c:58:d5:
         b9:dc:2e:76:0f:31:04:39:f2:c5:54:36:0f:71:de:b2:0d:be:
         84:d1:d5:62:b2:48:db:20:bf:f5:48:f4:0a:bd:75:cb:a2:ed:
         d4:d4:54:1b:fa:28:4b:93:89:ec:e5:45:ba:70:16:20:f7:c6:
         e9:33:e7:c2:df:88:9e:ec:7c:86:8e:53:55:60:fe:50:7e:ff:
         cc:1d:3c:f6:ef:c2:15:91:9b:da:0a:3a:87:f9:00:26:82:c8:
         de:c6:40:cd:a9:53:a8:2b:f9:8c:b6:5d:d2:de:1d:bd:ff:00:
         ca:cb:98:86:c3:43:92:b7:54:83:09:b7:c5:6c:c9:59:09:a8:
         7c:46:e0:28:b1:85:cc:b8:9d:84:20:b7:98:88:9e:dd:9c:c3:
         f9:6c:a2:26:98:5e:44:4e:c7:68:b5:26:77:9f:bd:32:1f:14:
         a1:16:16:6c:a5:ea:ff:09:28:73:08:84:16:df:55:6e:df:29:
         4c:6d:3e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:56 2026 by rpki-client