Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3230332e3230312e35302e302f32332d3234203d3e203138313033.roa
File:                     3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (raw, json)
Hash identifier:          hnbLn0WCQW7tjxDDomIPOhXC1r7ltYUmnmJCJUDX+Hs=
Subject key identifier:   C2:2F:D9:36:2B:97:29:AC:BA:71:E3:E5:C9:CD:F2:35:11:57:A3:9E
Certificate issuer:       /CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6
Certificate serial:       2379B0DE55C28FE4228A5A265C2E3948AD0CB764
Authority key identifier: CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3230332e3230312e35302e302f32332d3234203d3e203138313033.roa
Signing time:             Sun 03 May 2026 03:00:21 +0000
ROA not before:           Sun 03 May 2026 02:55:21 +0000
ROA not after:            Sun 02 May 2027 03:00:21 +0000
asID:                     18103
IP address blocks:        203.201.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl
                          rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:79:b0:de:55:c2:8f:e4:22:8a:5a:26:5c:2e:39:48:ad:0c:b7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6
        Validity
            Not Before: May  3 02:55:21 2026 GMT
            Not After : May  2 03:00:21 2027 GMT
        Subject: CN=C22FD9362B9729ACBA71E3E5C9CDF2351157A39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:42:b2:34:8d:df:be:a6:5a:6d:55:64:3a:60:
                    9f:cf:95:8b:b4:3c:a9:3b:85:7e:bd:d6:6b:1f:7e:
                    c9:19:99:10:08:47:72:ca:0b:df:3d:7f:67:78:8c:
                    92:4d:f2:78:7e:96:ec:b9:69:1f:96:fe:2d:78:bd:
                    d8:f0:a8:ca:4f:a1:dc:a6:80:e6:48:b2:ce:f6:e9:
                    1b:2f:f6:f7:14:49:3d:0d:17:93:60:86:78:75:4f:
                    63:0e:f0:c8:8c:4a:3d:ff:3c:b7:2e:52:fc:15:3a:
                    10:a3:28:4e:43:f2:1d:ff:19:bb:a4:42:78:80:fa:
                    d4:b1:8b:1a:34:2d:92:ab:54:06:f5:a6:34:06:1a:
                    24:93:bf:d3:38:07:52:84:40:96:7f:49:40:46:33:
                    e1:ea:d2:d1:de:63:b0:48:e6:f0:e4:84:bd:59:8b:
                    e0:f9:ec:55:eb:ff:b2:12:60:4d:13:ef:fb:98:e1:
                    81:f1:88:b2:e2:85:7a:34:16:00:39:60:bd:91:93:
                    39:d5:07:6b:d9:14:a5:a7:74:23:27:33:62:4b:e2:
                    51:85:20:8d:fc:51:59:d6:d6:31:f9:22:ba:51:66:
                    1a:fd:1b:1f:0f:5c:f0:6f:26:b3:e5:24:85:46:0a:
                    56:9d:d1:3c:25:68:9f:f2:34:a6:90:c4:70:21:2c:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2F:D9:36:2B:97:29:AC:BA:71:E3:E5:C9:CD:F2:35:11:57:A3:9E
            X509v3 Authority Key Identifier:
                keyid:CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3230332e3230312e35302e302f32332d3234203d3e203138313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:ea:4f:d3:58:3d:2d:51:ca:8c:67:ca:df:96:8b:01:c7:
         2a:b9:5d:7c:20:52:f7:ab:8f:e2:c2:29:53:8f:f3:6c:dd:27:
         a4:65:11:cb:94:6f:2b:10:b4:a2:e9:2b:e6:2c:af:f9:cb:97:
         b6:9e:55:a9:28:51:0f:3c:53:6b:19:1f:8c:3e:2f:9e:3e:4c:
         0c:76:d9:5d:7e:53:9c:9b:97:4c:ac:c2:72:9f:b8:35:2f:b3:
         5a:ae:47:6a:3d:b2:58:38:e8:32:b3:78:47:87:17:5b:39:05:
         7f:42:53:30:f6:e4:ba:b3:c6:1c:44:f7:04:b3:75:d0:f5:b2:
         70:62:3d:ba:fe:2d:23:5f:65:df:24:29:6a:61:32:f3:53:42:
         23:ab:e6:61:02:f4:2e:c1:9a:b3:fa:75:80:4b:2b:12:34:25:
         0c:bb:4a:5f:53:bb:bf:db:45:25:96:a7:4f:aa:f6:ec:ee:26:
         d0:ce:b3:58:3b:74:1e:9d:cd:89:63:b0:31:7b:19:89:65:46:
         48:64:26:e9:56:f9:5e:ea:a3:e8:88:9b:e2:a7:53:ce:71:02:
         65:0c:e1:ce:83:10:9a:65:8a:b7:54:fb:0b:9e:46:34:7e:34:
         ee:63:1c:b9:bd:8e:09:e6:ae:21:02:aa:08:69:83:b0:2c:96:
         82:c8:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:14:04 2026 by rpki-client