Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa
File:                     3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier:          kTX+oQavRoiG8CROUsdY2d/jcuIrqIgudB90au7yKp0=
Subject key identifier:   27:11:54:04:E6:7E:B0:C0:BA:AB:5D:E2:7E:81:37:AF:F7:8F:99:98
Certificate issuer:       /CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Certificate serial:       6B101C1EDCB2FB96D5CA094F82FC8EE84F6B4C7F
Authority key identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa
Signing time:             Sun 03 May 2026 02:58:41 +0000
ROA not before:           Sun 03 May 2026 02:53:41 +0000
ROA not after:            Sun 02 May 2027 02:58:41 +0000
asID:                     38143
IP address blocks:        202.169.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
                          rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:10:1c:1e:dc:b2:fb:96:d5:ca:09:4f:82:fc:8e:e8:4f:6b:4c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
        Validity
            Not Before: May  3 02:53:41 2026 GMT
            Not After : May  2 02:58:41 2027 GMT
        Subject: CN=27115404E67EB0C0BAAB5DE27E8137AFF78F9998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:c6:4e:92:25:51:d4:c0:ec:ca:9e:a0:3d:
                    24:09:cf:6c:b8:7b:29:15:e2:a7:71:8a:f8:44:a8:
                    ae:d9:1e:5d:35:43:92:ca:d1:c9:ae:c7:28:1b:a8:
                    92:84:80:ce:3d:1d:30:ac:02:ce:c0:6a:13:ac:41:
                    d9:bb:2f:8b:60:f7:58:0a:e9:98:05:b5:1c:92:46:
                    7a:9d:95:4c:2e:b2:4e:5e:80:2a:29:ab:fd:44:9d:
                    6d:b8:76:90:94:ed:62:36:a0:6f:59:73:f6:0f:76:
                    d7:db:03:3c:0a:60:7b:13:ee:7d:f4:d0:fe:45:ed:
                    03:dc:d2:17:64:76:8a:7b:66:21:2c:de:7a:3c:3b:
                    14:24:bf:65:19:bc:ac:fa:f6:11:3a:39:b6:2f:c9:
                    78:87:a2:2a:54:c4:c4:8b:fe:64:8a:60:69:9e:b7:
                    07:55:35:1b:0a:1f:fa:5b:0c:e6:90:93:e6:57:a0:
                    ae:a4:09:94:09:68:14:0a:f0:65:f7:c9:28:a0:bb:
                    2f:d7:cb:d2:2b:25:91:a3:84:97:5b:1c:4b:41:f1:
                    24:a2:a3:dc:95:f2:c6:9e:fb:94:56:c0:0c:13:7a:
                    5d:be:5a:fa:22:e4:9c:fa:78:a5:86:06:96:cb:39:
                    ce:7c:df:16:ab:9a:66:a7:72:0e:39:e6:78:f0:1b:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:11:54:04:E6:7E:B0:C0:BA:AB:5D:E2:7E:81:37:AF:F7:8F:99:98
            X509v3 Authority Key Identifier:
                keyid:93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:2f:63:40:8f:c4:60:9d:b1:ed:31:33:57:9d:db:f7:0d:
         b6:4f:d1:19:17:bd:b0:da:e7:ac:d2:79:01:04:7d:41:92:c3:
         7e:b2:fe:13:2f:3b:7b:52:c0:9e:d8:40:91:98:76:a4:16:f1:
         cd:5e:3d:4a:2b:03:33:dd:68:0d:7c:79:9c:23:2b:32:e8:5a:
         8a:06:34:0d:e4:88:26:e6:9a:12:20:9a:b9:5f:ea:1a:54:ac:
         3b:ef:91:89:04:f4:8d:3a:69:b4:0e:0a:8f:68:ef:3b:29:56:
         a8:9d:97:53:67:a1:5e:60:5b:21:7b:29:10:33:1f:5f:3c:ab:
         0b:60:af:89:de:cf:a7:b0:83:24:89:f2:cf:22:9f:a3:13:bf:
         77:d0:36:3c:bc:a3:3a:a0:56:ca:fe:13:f3:f2:b8:9d:6f:07:
         be:fd:58:e0:03:38:b8:f6:3c:e7:ae:10:f4:60:76:99:b4:f6:
         31:01:b5:50:35:fa:e9:2f:13:b8:f3:74:a8:af:ac:aa:78:be:
         6f:96:6c:73:1f:f4:5a:1b:4f:2f:5b:f1:13:9e:e5:d5:d5:c4:
         57:e9:ac:dc:06:65:d8:71:f3:53:d4:4b:33:77:5d:d1:bd:c9:
         ac:7e:f2:6b:33:00:93:02:df:db:a6:8a:c5:f3:bb:6f:d8:c7:
         bd:4b:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:07 2026 by rpki-client