Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa
File:                     3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier:          q8kkNiq0NJ2HE69ColVfNaev+4kehYvpIGs4HRz1aFg=
Subject key identifier:   9B:9C:47:B7:48:91:40:19:16:02:C4:5A:56:EC:86:9E:E6:FA:7C:6D
Certificate issuer:       /CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Certificate serial:       560A94D97B3E2913F7522A17CCF63EE1CAB6EDBD
Authority key identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa
Signing time:             Sun 03 May 2026 02:58:47 +0000
ROA not before:           Sun 03 May 2026 02:53:47 +0000
ROA not after:            Sun 02 May 2027 02:58:47 +0000
asID:                     38143
IP address blocks:        202.169.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
                          rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0a:94:d9:7b:3e:29:13:f7:52:2a:17:cc:f6:3e:e1:ca:b6:ed:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
        Validity
            Not Before: May  3 02:53:47 2026 GMT
            Not After : May  2 02:58:47 2027 GMT
        Subject: CN=9B9C47B7489140191602C45A56EC869EE6FA7C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:20:00:dc:17:36:18:b4:37:8d:4b:61:25:
                    c6:93:76:64:b7:75:7b:ed:a2:f9:85:34:07:b0:01:
                    3a:25:69:f1:d0:67:53:1e:28:3c:0f:0d:99:8e:5c:
                    67:d3:12:d5:37:14:54:21:93:ca:e8:4c:4e:49:79:
                    dc:8a:09:7e:55:c3:f5:1a:cd:30:bf:d9:0d:41:72:
                    53:b3:00:ed:c4:4e:01:75:19:c3:b6:40:b1:5c:c8:
                    f6:e2:bc:8e:5e:47:90:1e:c7:b8:c8:d0:c0:ba:21:
                    08:3f:de:1a:ae:5c:a2:c8:9b:82:dc:28:1b:e6:83:
                    74:07:3f:88:bc:ea:79:14:1c:87:07:86:50:42:e6:
                    f2:ce:88:ea:ce:33:ce:4d:b0:cc:0e:84:78:ba:3a:
                    7b:cd:ed:8e:38:9b:2a:94:2c:66:53:c3:c6:1c:aa:
                    b9:a3:91:c9:ed:cd:bf:ce:06:65:5c:08:5e:3b:1c:
                    cd:e9:9d:24:9f:fb:e8:1c:4d:4a:3e:97:6d:40:5f:
                    18:5f:cb:8e:42:8a:12:89:f0:0c:c7:af:1c:a7:80:
                    a0:0c:03:fc:f4:eb:5a:e5:84:a9:28:16:f5:c7:e5:
                    c2:09:d9:82:ce:6d:c0:06:22:e9:8d:d4:6c:2a:22:
                    72:17:a2:80:f9:71:66:52:be:f2:4e:97:d0:f1:7b:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9C:47:B7:48:91:40:19:16:02:C4:5A:56:EC:86:9E:E6:FA:7C:6D
            X509v3 Authority Key Identifier:
                keyid:93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:81:1f:64:80:45:f9:2e:9f:6b:62:ce:d0:a1:cf:ae:4a:
         f4:0f:62:7b:57:92:5e:48:03:0c:71:68:ee:f1:9b:1a:14:4f:
         91:e5:66:76:56:36:0f:84:c9:8d:6b:8a:3b:28:66:ba:7b:27:
         86:33:05:d7:e8:91:26:ba:be:1d:8e:ee:c5:10:5e:b9:4e:10:
         3e:3a:71:26:ac:c8:62:02:63:0a:e5:18:03:47:9a:02:0a:bb:
         d1:8a:1b:bd:95:22:30:33:d5:3a:8d:90:52:90:b8:f9:4c:2f:
         c6:ab:c4:07:0b:2c:74:6f:e5:52:a3:cc:5e:19:90:c5:35:87:
         24:89:60:1c:24:9c:23:72:d4:73:1c:2e:04:52:44:14:ec:22:
         86:4f:90:e1:b6:66:1a:21:20:86:3e:13:5f:fd:18:8b:a8:c4:
         3a:78:90:d3:6c:99:9b:0f:97:6f:63:60:32:82:20:58:e9:d2:
         82:ec:95:f4:99:f8:66:a0:3f:88:09:c9:71:fc:37:c6:dd:8f:
         9a:0d:01:c2:b4:29:58:63:ee:ba:52:a8:ce:eb:10:c7:f6:3e:
         73:19:39:d9:01:69:3f:b7:1a:dd:ab:d3:63:64:bf:7d:e0:ef:
         10:d4:71:d5:97:36:e3:39:02:41:6f:1b:8b:ab:bd:4d:63:48:
         14:b6:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:24 2026 by rpki-client