Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          8v/AkNThw1q6SndEvHMEQO6HLCc7ZLY9OXWWoN9aRzI=
Subject key identifier:   1F:1A:AD:5D:4C:70:0E:A1:BD:17:F4:6B:4F:14:9B:7D:70:19:AE:24
Certificate issuer:       /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial:       3F2F5AEE64F0717EFAFE77D272BA0DFB4567D60E
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa
Signing time:             Sun 03 May 2026 03:03:48 +0000
ROA not before:           Sun 03 May 2026 02:58:48 +0000
ROA not after:            Sun 02 May 2027 03:03:48 +0000
asID:                     18059
IP address blocks:        202.78.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
                          rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2f:5a:ee:64:f0:71:7e:fa:fe:77:d2:72:ba:0d:fb:45:67:d6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67239F5E47D123019D26807163E6542441401507
        Validity
            Not Before: May  3 02:58:48 2026 GMT
            Not After : May  2 03:03:48 2027 GMT
        Subject: CN=1F1AAD5D4C700EA1BD17F46B4F149B7D7019AE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:42:65:96:93:97:3f:ee:88:4f:2f:83:33:
                    06:7b:f2:64:b6:bc:f1:48:61:6e:bd:2f:ab:7c:d8:
                    97:2b:7e:63:88:70:04:ad:d1:92:cc:38:ab:b8:f2:
                    d4:9b:49:29:3c:85:a7:77:30:fc:e3:8c:d4:cf:e6:
                    de:ae:df:90:76:5b:4d:2c:dc:21:2f:a5:06:53:d2:
                    01:2b:ed:cb:e9:f9:6b:5e:4e:5c:89:05:26:3d:b8:
                    21:cf:f6:43:7a:38:05:d6:39:44:21:ac:c2:0a:35:
                    86:88:69:42:cf:2b:ba:5c:34:18:74:14:8e:97:2c:
                    52:16:64:52:33:3a:4e:a7:b8:9f:fe:a7:4a:62:b9:
                    b8:ee:56:df:a0:f6:1e:dc:b5:ca:43:b4:07:67:b9:
                    a7:ad:60:a1:e9:2a:d5:2d:45:ab:59:3c:72:6f:51:
                    08:de:12:9c:2d:81:6e:ee:98:78:08:39:e9:7c:ce:
                    17:9c:c6:5e:1b:43:2a:b6:a4:ae:99:23:64:a2:08:
                    36:66:cc:44:4e:c3:e6:c9:68:22:d6:5e:8f:97:5d:
                    e9:4d:f4:e3:fc:8f:ad:f6:4e:2a:59:50:2c:95:9b:
                    25:bc:77:9b:52:01:88:ce:a6:06:de:0b:11:37:a6:
                    92:19:67:23:ea:8b:89:46:68:fb:f5:9a:23:97:72:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1A:AD:5D:4C:70:0E:A1:BD:17:F4:6B:4F:14:9B:7D:70:19:AE:24
            X509v3 Authority Key Identifier:
                keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5c:48:42:64:b3:19:f2:cb:63:55:d4:8f:0c:09:28:f7:e3:
         e6:9a:00:23:04:f3:a7:c2:aa:0a:da:98:c0:f4:73:a8:b2:82:
         8f:2a:01:57:95:76:2e:95:06:21:76:df:bb:c8:8e:16:6c:c5:
         12:e4:11:d7:15:f5:a4:6d:20:f8:5b:db:df:ae:1f:74:47:d4:
         fe:d4:bc:c0:f2:eb:a9:b3:bf:bb:ee:6c:72:f4:24:d2:f5:60:
         af:ed:ff:a7:4d:28:ed:82:a8:3e:62:bc:c9:93:ce:a3:cb:65:
         7f:87:59:a4:2d:63:ba:80:12:6d:01:40:21:9b:da:22:d7:29:
         f7:04:99:e6:f7:67:17:55:c0:7e:cd:6c:67:87:46:2c:10:7f:
         e6:fa:96:8f:a8:27:97:93:99:7b:73:cc:f6:9d:34:22:9a:29:
         d6:42:a5:22:b5:1e:3b:04:5f:c8:72:99:04:b4:bc:db:ca:0d:
         99:4e:cc:4f:05:08:55:b6:c9:23:ad:8f:37:b3:8c:60:52:e5:
         2e:3e:8c:ac:af:fe:48:45:1d:47:c6:a5:7e:83:50:97:f7:cb:
         e7:76:e0:a2:4c:02:9c:4c:06:3a:08:fd:10:f6:4b:2e:c9:45:
         25:ad:82:00:29:a7:62:38:9f:f0:49:42:b5:4c:7c:2f:4d:18:
         90:93:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:53 2026 by rpki-client