Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3230332e3132382e36342e302f31392d3234203d3e203138313033.roa
File:                     3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (raw, json)
Hash identifier:          eBoaZqyr6WlSbN/AJF6RgzCQyG+1zBmzaFfb/7fN5dY=
Subject key identifier:   37:48:0D:35:BB:67:AE:10:D3:EB:A5:FC:9F:1E:D7:FE:02:F7:92:F3
Certificate issuer:       /CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6
Certificate serial:       1694EFA071B2FB540CA213CFE839EE73071ADBA2
Authority key identifier: CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3230332e3132382e36342e302f31392d3234203d3e203138313033.roa
Signing time:             Sun 03 May 2026 03:00:20 +0000
ROA not before:           Sun 03 May 2026 02:55:20 +0000
ROA not after:            Sun 02 May 2027 03:00:20 +0000
asID:                     18103
IP address blocks:        203.128.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl
                          rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:94:ef:a0:71:b2:fb:54:0c:a2:13:cf:e8:39:ee:73:07:1a:db:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6
        Validity
            Not Before: May  3 02:55:20 2026 GMT
            Not After : May  2 03:00:20 2027 GMT
        Subject: CN=37480D35BB67AE10D3EBA5FC9F1ED7FE02F792F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e1:c5:a5:da:fa:45:72:c3:5e:c7:23:fe:99:
                    99:9d:7a:32:80:db:33:0a:74:85:25:86:94:90:29:
                    84:72:85:f5:22:05:7e:31:66:76:35:f4:1e:af:07:
                    16:0f:ee:67:ad:a0:56:0f:3f:3b:8c:8c:83:ee:6a:
                    e0:05:87:c3:5b:ea:68:71:90:b0:47:23:fe:d2:72:
                    01:4e:07:7e:83:58:b4:1e:78:58:15:d3:28:dd:80:
                    40:79:fe:b3:22:8e:37:14:6a:13:39:f1:48:6e:16:
                    ea:1c:df:31:b9:29:14:78:5f:c6:1e:59:a2:d2:2a:
                    b1:f1:18:51:4a:fd:95:ad:6b:e4:4a:af:c0:69:4f:
                    e4:79:9c:0c:bf:81:e4:89:ab:d2:5c:87:89:27:39:
                    58:ec:2e:ce:7d:4a:6e:f2:61:fb:a2:87:7e:c4:7d:
                    36:9c:02:50:a3:7b:f0:cf:54:8e:75:7b:1a:46:1d:
                    3f:1b:d5:d3:2e:79:90:c3:dd:e1:eb:45:c4:51:1d:
                    67:26:aa:37:74:e0:78:cb:41:c5:1d:7c:c7:f8:ef:
                    27:6b:13:34:38:fa:f3:98:7e:fd:da:2e:12:40:3c:
                    09:87:9c:8d:8f:48:26:77:6c:75:9f:1c:cd:1a:e7:
                    bb:c8:f4:cd:df:a0:fe:60:07:a5:38:75:c7:cd:02:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:48:0D:35:BB:67:AE:10:D3:EB:A5:FC:9F:1E:D7:FE:02:F7:92:F3
            X509v3 Authority Key Identifier:
                keyid:CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3230332e3132382e36342e302f31392d3234203d3e203138313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.128.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:35:13:66:30:bd:f9:2f:a5:52:26:d2:2c:df:3f:3b:79:53:
         f3:68:06:31:36:50:9e:64:50:bf:31:63:7e:ef:55:fc:e7:96:
         1e:19:88:d8:10:b6:14:90:2a:36:31:b2:8d:a1:5c:53:9f:3c:
         64:33:22:e4:1b:ed:fe:b8:42:98:64:5f:13:79:a5:53:44:96:
         5b:5a:34:84:6c:86:26:d4:1d:ba:8e:cf:7d:a5:1a:96:e9:b0:
         6c:89:b9:dc:5c:6d:15:f9:1b:42:b8:a9:87:eb:14:ec:dc:07:
         3c:c6:be:b3:0c:0c:bf:3d:bc:64:10:50:55:19:9e:62:d8:82:
         ea:60:57:b3:de:a6:a2:40:49:ba:9e:e8:8e:24:88:98:04:32:
         1a:9d:d9:9d:20:8d:dc:b6:89:57:5d:7e:8f:75:20:19:85:70:
         b6:ef:38:ea:7e:75:9b:63:6c:95:cc:40:bf:e4:84:b8:2b:24:
         c3:ea:04:ef:0b:e5:8f:9f:56:a0:89:b0:e4:24:57:c9:5b:a6:
         fa:9d:ea:88:b6:27:22:72:65:c8:89:c6:65:19:9b:a0:ed:f4:
         79:53:45:25:a1:8b:1a:62:f3:25:9f:df:90:de:68:9e:6a:75:
         c7:19:b2:46:1b:fb:7c:9b:d9:a5:60:08:70:cc:2f:f9:56:fe:
         a4:a0:3d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:08 2026 by rpki-client