Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa
File:                     3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier:          K67+Sn8Qcm4RPVdFgjEGgIOf1eYH+63GSSw4euAFDMU=
Subject key identifier:   F7:72:93:A7:2A:00:29:29:88:AF:C4:39:86:07:8E:B5:CC:F7:02:BF
Certificate issuer:       /CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Certificate serial:       6E6D162FDA89A5C6008D3DF9AF7682C3F72F0D8A
Authority key identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa
Signing time:             Sun 03 May 2026 02:58:42 +0000
ROA not before:           Sun 03 May 2026 02:53:42 +0000
ROA not after:            Sun 02 May 2027 02:58:42 +0000
asID:                     38143
IP address blocks:        202.169.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
                          rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6d:16:2f:da:89:a5:c6:00:8d:3d:f9:af:76:82:c3:f7:2f:0d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
        Validity
            Not Before: May  3 02:53:42 2026 GMT
            Not After : May  2 02:58:42 2027 GMT
        Subject: CN=F77293A72A00292988AFC43986078EB5CCF702BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:3f:e1:d5:3f:c5:6d:eb:74:18:2b:c6:95:
                    1c:63:72:7c:5e:b6:42:dd:35:e6:29:37:1d:a4:49:
                    09:e8:de:3b:5f:bf:25:8a:ec:35:98:1f:59:0a:99:
                    0c:dc:56:58:f2:a2:24:e9:58:5b:ed:12:0e:6b:95:
                    da:a9:e9:63:c5:f9:7f:7d:e1:e9:26:f0:8d:cd:fb:
                    f9:75:46:b5:d7:c6:71:2d:10:3f:b7:8c:99:d5:5a:
                    9e:de:31:2c:d2:40:bd:eb:23:a8:ed:c7:0c:b2:7a:
                    4d:ba:31:b6:59:f8:59:c6:de:12:a0:b7:1f:35:14:
                    e9:98:73:b8:24:42:da:8d:49:4e:df:52:a9:94:85:
                    0c:41:08:d4:e1:bf:de:74:14:5f:c2:3f:ae:e0:42:
                    da:b7:63:f9:c4:96:48:68:4a:b5:99:4b:7e:a3:0d:
                    a1:e1:36:52:1b:e5:9e:16:9f:04:50:8e:83:2a:f4:
                    ac:f8:c5:c2:bc:dc:57:2e:a9:50:63:82:2d:4c:e1:
                    ea:c7:70:a8:b5:83:e9:a7:07:23:80:f7:f4:35:e1:
                    ff:56:30:da:61:d8:2f:7f:88:ba:da:a8:27:1a:55:
                    63:b6:45:e3:1c:18:07:cd:92:4e:a6:dd:9e:1f:ad:
                    5e:e5:43:ad:4c:0c:45:18:eb:c0:45:fd:c3:01:69:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:72:93:A7:2A:00:29:29:88:AF:C4:39:86:07:8E:B5:CC:F7:02:BF
            X509v3 Authority Key Identifier:
                keyid:93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:74:d6:a0:bc:41:13:c3:d7:5f:ae:0d:28:21:2a:06:07:5b:
         d9:9b:73:af:5b:21:af:8c:e3:8c:af:e5:27:40:b8:fc:13:a5:
         f0:ad:90:8f:31:57:cb:6d:0f:2f:06:73:81:dc:b2:30:62:a1:
         cb:ce:cf:40:f8:84:b7:c0:54:98:09:b7:50:1b:0e:cf:08:2a:
         62:19:29:d0:20:2d:2d:63:50:8e:ac:cf:65:00:52:ce:2f:75:
         03:78:d4:47:2f:83:d6:c3:02:a0:cb:b4:78:98:16:55:45:1f:
         82:39:4c:59:79:41:60:e5:56:42:c1:80:da:f8:e9:c9:27:1e:
         c1:65:9f:35:47:77:e0:75:51:ef:19:bd:00:8a:2d:b4:2a:a3:
         6d:f0:71:1d:46:ad:ac:7f:db:63:28:e0:27:0b:56:a1:8f:14:
         97:e1:aa:b8:03:60:41:16:8f:27:d2:53:2c:ea:d4:21:b2:02:
         27:e3:08:56:f7:dd:7a:76:cb:3d:98:33:b0:a2:b7:6d:d5:76:
         a7:61:f4:ae:0e:67:a6:54:01:95:c7:d3:71:61:a1:95:cc:2b:
         9d:20:88:b7:4f:8d:6c:2c:33:d5:dc:69:21:9e:0d:ca:cc:ca:
         b4:85:1b:f9:8c:d7:ff:ff:93:7c:fa:9b:e7:93:08:81:70:31:
         7f:3a:ac:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:35 2026 by rpki-client