Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa
File:                     3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier:          iJX5sH3Bhksn+XNqPcn6ZO3Vn6gKWLlz7pKsmb67ses=
Subject key identifier:   AF:17:02:C9:98:1E:F9:09:8C:C3:A4:8E:EC:81:73:39:EC:5E:CE:A4
Certificate issuer:       /CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Certificate serial:       763EA03582FCA1E95D14B1BA7EEA9E21E611A498
Authority key identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa
Signing time:             Sun 03 May 2026 02:58:44 +0000
ROA not before:           Sun 03 May 2026 02:53:44 +0000
ROA not after:            Sun 02 May 2027 02:58:44 +0000
asID:                     38143
IP address blocks:        202.169.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
                          rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3e:a0:35:82:fc:a1:e9:5d:14:b1:ba:7e:ea:9e:21:e6:11:a4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
        Validity
            Not Before: May  3 02:53:44 2026 GMT
            Not After : May  2 02:58:44 2027 GMT
        Subject: CN=AF1702C9981EF9098CC3A48EEC817339EC5ECEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:a2:37:08:40:5b:be:87:2c:59:ae:f6:5c:
                    0a:c0:36:a8:40:7e:7b:0d:6e:9e:59:5b:83:7b:8a:
                    0b:e0:5e:27:22:db:97:5f:41:ea:a7:e0:91:71:26:
                    39:e0:4c:78:d3:b9:23:2c:76:bb:72:06:48:f3:72:
                    ab:03:ed:0c:0c:88:74:9f:2c:d8:53:24:3d:2c:16:
                    11:ed:c1:35:54:33:b9:99:7f:9b:5e:0c:b3:dc:a8:
                    56:b0:93:24:e5:ba:9e:5d:71:47:a2:c1:ba:af:16:
                    34:12:87:57:8c:4b:e5:b9:67:ad:36:12:e9:4a:23:
                    9a:11:2d:a4:44:73:e0:d9:ec:a0:4d:a7:e1:ee:0f:
                    f2:1f:6f:51:6b:10:a3:eb:dd:0d:77:37:1e:b5:db:
                    2f:80:7d:dd:9f:2f:f3:0b:75:68:39:9d:f1:2c:69:
                    64:cb:c0:c8:a6:e0:46:79:8e:a9:89:03:05:70:36:
                    aa:f5:8d:07:92:43:b6:46:fb:b7:ef:63:aa:66:04:
                    25:bb:c0:21:36:98:ca:33:86:b4:ab:ed:6d:7d:67:
                    f0:28:1e:52:31:8f:e5:fe:fe:96:cc:7e:e5:79:4a:
                    f9:1f:74:3d:79:2d:d8:a1:80:3d:96:49:dd:c1:8b:
                    ab:ee:f2:e2:d1:c3:4c:09:e7:36:54:4c:0a:f5:33:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:17:02:C9:98:1E:F9:09:8C:C3:A4:8E:EC:81:73:39:EC:5E:CE:A4
            X509v3 Authority Key Identifier:
                keyid:93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:a4:2f:54:16:6d:bd:c1:3b:92:ea:cf:0a:c9:df:b4:88:65:
         ad:bf:f5:fd:b5:ce:01:cb:81:8c:e6:2f:13:48:45:64:e1:a3:
         ba:35:94:fe:14:13:71:92:56:b6:57:32:90:49:9d:63:d8:c9:
         ec:a1:e9:87:86:9f:ef:b5:2a:37:27:19:b5:cc:b1:0f:aa:66:
         b1:c5:37:01:d0:0c:bd:32:96:1a:e8:b0:16:9f:9a:ad:5e:6b:
         22:1f:e3:c3:37:2d:4f:c2:64:24:f8:87:99:31:30:55:40:89:
         1b:bc:da:21:12:1c:97:a2:d6:ec:93:33:cf:d5:fc:00:0c:b2:
         2e:85:6a:28:71:04:61:04:7a:4a:42:79:37:ef:86:05:62:30:
         3a:cd:17:fc:c0:f0:a9:5e:39:63:ad:5e:e1:3d:69:2c:fc:d1:
         f2:58:50:71:b8:b9:43:6a:52:67:30:d3:b0:81:a7:f7:01:00:
         06:50:e7:37:94:80:b8:ed:dc:75:16:66:7f:0a:ef:28:49:5d:
         39:b8:56:d9:a1:96:03:9d:64:b1:9b:e3:c7:6f:b1:2b:a6:53:
         34:3e:55:2c:d1:ad:4c:62:46:b6:79:59:cb:4e:d7:b9:27:bd:
         04:ff:f6:1a:23:4e:a3:d9:2e:5a:2d:a3:ba:78:e7:0d:d5:a3:
         83:6a:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:56 2026 by rpki-client