Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa
File:                     3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier:          zwmWwJsvHzv3Y2XGal+eYDuFdGtEpe8DD8iKlGPT2no=
Subject key identifier:   36:D6:E6:A9:9F:5D:A6:5B:97:25:6C:9E:F4:38:90:EE:B5:C2:13:C0
Certificate issuer:       /CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Certificate serial:       5F7345B86ED076A13C7EF58E2C87C323596A4D27
Authority key identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa
Signing time:             Sun 03 May 2026 02:58:42 +0000
ROA not before:           Sun 03 May 2026 02:53:42 +0000
ROA not after:            Sun 02 May 2027 02:58:42 +0000
asID:                     38143
IP address blocks:        202.169.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
                          rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:73:45:b8:6e:d0:76:a1:3c:7e:f5:8e:2c:87:c3:23:59:6a:4d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
        Validity
            Not Before: May  3 02:53:42 2026 GMT
            Not After : May  2 02:58:42 2027 GMT
        Subject: CN=36D6E6A99F5DA65B97256C9EF43890EEB5C213C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:12:da:07:4c:f3:ae:21:4a:60:a1:b7:9d:
                    f2:33:11:13:d9:ef:3d:3b:db:df:df:96:a1:08:91:
                    40:46:2b:f6:37:25:13:40:e0:d8:c5:a4:a5:a4:db:
                    94:90:29:03:5b:c8:09:12:56:02:1c:d7:b6:ec:1b:
                    23:a7:ab:e1:8b:76:f9:0e:8e:15:05:4c:7b:13:d2:
                    70:2a:a0:25:c1:d5:8b:58:b2:df:b5:90:43:aa:d5:
                    ad:5e:8f:00:64:6e:23:7a:d6:33:4e:e0:5d:84:81:
                    b4:27:63:ea:6d:e8:1f:43:10:5b:6b:95:9f:dc:68:
                    4e:ac:24:c8:1b:c8:33:72:e5:f5:4c:ad:cf:f9:ef:
                    7c:01:57:0b:93:1b:ab:b4:b2:0b:bd:96:8f:c1:80:
                    2e:8f:94:4e:b0:92:4c:68:cb:3d:00:59:85:ce:18:
                    a3:39:82:21:0b:4d:20:84:f2:b5:d9:2e:3f:a8:7c:
                    78:f4:f0:e4:9c:cc:4d:fe:d8:35:f6:ef:81:b8:c2:
                    55:de:e6:02:4d:78:d0:c4:35:c7:6c:cb:f4:a1:11:
                    a6:4c:ad:df:c9:64:9d:00:bf:8f:32:58:4d:92:c9:
                    cd:4d:0a:b6:51:c0:94:24:5b:50:f8:cb:08:2d:8a:
                    3b:8c:f7:2e:3c:b1:46:61:ea:79:36:7d:62:46:74:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D6:E6:A9:9F:5D:A6:5B:97:25:6C:9E:F4:38:90:EE:B5:C2:13:C0
            X509v3 Authority Key Identifier:
                keyid:93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:fc:22:03:f6:03:5e:59:31:c7:3c:c0:5c:2b:95:3f:75:47:
         d6:83:35:ca:70:34:62:cb:44:e5:5a:de:cb:7b:72:78:60:4e:
         d1:0c:ad:cb:60:90:1f:9b:40:20:ab:6e:2e:ad:9c:a7:a5:4d:
         da:5b:9f:4a:15:23:dd:ce:aa:e0:00:bb:64:70:f4:d4:ed:b3:
         87:9d:60:90:a4:e1:ea:83:59:27:7e:06:33:fe:30:71:72:73:
         3a:1c:0b:c0:82:76:eb:61:14:42:ad:9f:93:20:e4:3c:20:fd:
         de:b0:da:de:61:64:52:69:f2:e6:4a:14:47:73:70:d7:95:16:
         26:b1:5c:87:f3:40:a0:a2:94:1b:db:94:90:e2:c2:55:89:2d:
         5b:a8:ac:a4:d9:c3:5d:ea:4e:a0:4c:f5:11:2e:db:21:30:c2:
         88:d8:30:aa:33:88:52:0f:b2:6f:dd:84:cb:87:be:cf:02:d3:
         c5:d7:01:00:a1:0e:37:a3:c9:48:5b:50:d7:b3:88:0b:59:7f:
         c6:6c:fe:e2:eb:21:5f:74:14:d6:cd:a8:b0:b3:89:de:9a:e4:
         6c:19:c6:d6:f8:71:7b:3b:8a:0a:45:4e:af:9e:48:de:68:06:
         f7:21:9c:2e:32:0b:9b:a0:f1:08:75:18:3e:fb:0a:04:2e:b5:
         3c:cb:bb:54
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUX3NFuG7QdqE8fvWOLIfDI1lqTScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwRTc3ODhFM0RDNDgzREM1Rjg1QzEyQjhCQjBDNEY0
MTMxMkJDMTAeFw0yNjA1MDMwMjUzNDJaFw0yNzA1MDIwMjU4NDJaMDMxMTAvBgNV
BAMTKDM2RDZFNkE5OUY1REE2NUI5NzI1NkM5RUY0Mzg5MEVFQjVDMjEzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXhLaB0zzriFKYKG3nfIzERPZ
7z0729/flqEIkUBGK/Y3JRNA4NjFpKWk25SQKQNbyAkSVgIc17bsGyOnq+GLdvkO
jhUFTHsT0nAqoCXB1YtYst+1kEOq1a1ejwBkbiN61jNO4F2EgbQnY+pt6B9DEFtr
lZ/caE6sJMgbyDNy5fVMrc/573wBVwuTG6u0sgu9lo/BgC6PlE6wkkxoyz0AWYXO
GKM5giELTSCE8rXZLj+ofHj08OSczE3+2DX274G4wlXe5gJNeNDENcdsy/ShEaZM
rd/JZJ0Av48yWE2Syc1NCrZRwJQkW1D4ywgtijuM9y48sUZh6nk2fWJGdFkdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNtbmqZ9dpluXJWye9DiQ7rXCE8AwHwYDVR0j
BBgwFoAUkw53iOPcSD3F+FwSuLsMT0ExK8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWNiOWE0YjktNGFlMy00NjdhLWI5MTktNDEwZTE0MmI2NzlmLzAvOTMwRTc3ODhF
M0RDNDgzREM1Rjg1QzEyQjhCQjBDNEY0MTMxMkJDMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MzBFNzc4OEUzREM0ODNEQzVGODVDMTJCOEJCMEM0RjQxMzEy
QkMxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i
OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM1MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqn8MA0GCSqG
SIb3DQEBCwUAA4IBAQAG/CID9gNeWTHHPMBcK5U/dUfWgzXKcDRiy0TlWt7Le3J4
YE7RDK3LYJAfm0Agq24urZynpU3aW59KFSPdzqrgALtkcPTU7bOHnWCQpOHqg1kn
fgYz/jBxcnM6HAvAgnbrYRRCrZ+TIOQ8IP3esNreYWRSafLmShRHc3DXlRYmsVyH
80CgopQb25SQ4sJViS1bqKyk2cNd6k6gTPURLtshMMKI2DCqM4hSD7Jv3YTLh77P
AtPF1wEAoQ43o8lIW1DXs4gLWX/GbP7i6yFfdBTWzaiws4nemuRsGcbW+HF7O4oK
RU6vnkjeaAb3IZwuMguboPEIdRg++woELrU8y7tU
-----END CERTIFICATE-----
Generated at Wed May 13 10:54:55 2026 by rpki-client