Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa
File:                     3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (raw, json)
Hash identifier:          HhMQb9YzE/WymXnw89UuAOEea6YaW7URZtF77Mn8PZk=
Subject key identifier:   10:25:C0:DC:63:03:E1:A6:66:D4:67:E0:B0:5C:05:2C:93:69:DC:2E
Certificate issuer:       /CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Certificate serial:       297A1D91754910C294A72BB9AB87A2AE3DC9A188
Authority key identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa
Signing time:             Sun 03 May 2026 02:58:43 +0000
ROA not before:           Sun 03 May 2026 02:53:43 +0000
ROA not after:            Sun 02 May 2027 02:58:43 +0000
asID:                     38143
IP address blocks:        202.169.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
                          rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7a:1d:91:75:49:10:c2:94:a7:2b:b9:ab:87:a2:ae:3d:c9:a1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
        Validity
            Not Before: May  3 02:53:43 2026 GMT
            Not After : May  2 02:58:43 2027 GMT
        Subject: CN=1025C0DC6303E1A666D467E0B05C052C9369DC2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:79:b6:16:89:4b:c1:e7:45:c9:ad:95:c7:
                    96:fe:d4:09:00:b8:b4:75:37:aa:4e:3b:4b:5f:e1:
                    5c:41:b0:72:0d:a3:ec:99:b5:d0:fe:18:78:88:04:
                    6c:37:9b:b6:6e:af:97:92:76:97:1b:d0:0c:1b:e9:
                    01:a7:10:29:82:35:60:ab:67:79:c0:96:3e:35:ef:
                    50:52:3f:49:a8:88:8d:2d:a7:df:cc:8b:1d:d1:1a:
                    6f:cc:94:dd:a5:17:54:24:14:90:2a:04:39:d5:b3:
                    fe:11:62:8d:83:fd:a5:2a:9f:44:e0:1c:e8:a9:8b:
                    32:d6:b2:e0:c3:00:83:0b:86:97:cd:84:a9:e4:1c:
                    05:33:45:a6:3e:c7:e3:32:13:ad:08:87:63:44:5c:
                    64:13:42:f3:36:81:27:04:01:a3:80:8a:38:42:e9:
                    51:48:d2:eb:a5:bc:3c:52:76:08:fd:88:6a:a3:58:
                    76:36:0d:7c:8b:0e:de:60:ca:73:00:26:ab:67:05:
                    63:84:fc:a0:e6:c7:1f:e4:e3:d4:47:5c:aa:cf:6a:
                    7c:d1:e0:23:82:55:2f:aa:36:e8:ce:6b:90:69:0b:
                    5b:e8:46:09:47:94:4d:a7:eb:63:ca:a3:2e:78:fd:
                    16:d4:27:96:73:22:32:31:da:68:0a:46:93:61:a7:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:25:C0:DC:63:03:E1:A6:66:D4:67:E0:B0:5C:05:2C:93:69:DC:2E
            X509v3 Authority Key Identifier:
                keyid:93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:15:72:82:0e:31:10:12:29:54:6d:08:40:63:16:b3:88:57:
         a3:30:19:33:46:62:68:f1:83:40:c3:6a:67:75:3f:53:43:c2:
         cc:cc:93:74:a5:3a:69:65:cc:97:ef:56:d1:a0:b1:2b:69:2b:
         0c:e0:84:3e:64:8f:b1:ba:2f:65:03:b3:46:92:e8:14:08:5f:
         9b:5f:47:f1:dd:ee:a2:c2:d1:83:48:31:35:de:a1:cf:bf:e6:
         7c:00:8d:a9:c2:a7:bb:9e:51:8e:26:24:f0:50:d9:ff:ce:40:
         35:e4:1e:53:72:97:5c:d0:b8:6d:8a:fd:f2:6d:e7:11:59:a1:
         e3:f1:be:78:3a:5f:a1:11:84:79:e0:7b:c6:9b:90:22:16:c4:
         9e:ed:18:90:a7:28:f3:2f:6e:a8:f9:50:02:4d:ae:6e:99:31:
         4b:52:34:43:ff:a1:1b:1c:ec:a3:f1:ef:b3:bb:a0:59:5a:25:
         27:e9:5f:27:6e:45:4b:67:e8:24:5f:c3:55:20:4d:d5:ca:a9:
         43:aa:83:c6:a5:6b:a9:2c:24:cb:b2:9f:54:d1:8c:61:af:b3:
         bb:4c:fb:b9:38:ba:94:8d:54:de:dc:d2:98:e3:ad:84:7f:f6:
         bd:5d:ac:be:ee:e9:46:86:fe:ad:40:4e:4c:a4:f3:b3:67:66:
         4c:a8:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:03 2026 by rpki-client