Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
File:                     3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa (raw, json)
Hash identifier:          QQR0qXT73Ove2fGy0Mtcf+JzjFm3fYpB5qgDaSt6D/c=
Subject key identifier:   48:5A:19:7D:BA:08:E7:B1:E6:0C:B6:88:7A:3F:78:57:81:F5:4B:0F
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       20F112081DEBC0C314164379E986EC5CE9DB4F0D
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:21 +0000
ROA not before:           Sun 03 May 2026 02:59:21 +0000
ROA not after:            Sun 02 May 2027 03:04:21 +0000
asID:                     133798
IP address blocks:        203.128.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f1:12:08:1d:eb:c0:c3:14:16:43:79:e9:86:ec:5c:e9:db:4f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:21 2026 GMT
            Not After : May  2 03:04:21 2027 GMT
        Subject: CN=485A197DBA08E7B1E60CB6887A3F785781F54B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:ad:ad:09:89:a1:87:fb:11:f9:ae:de:03:
                    d7:99:56:b8:04:72:04:b2:35:f1:01:3e:bb:7e:a7:
                    9b:f8:9d:c8:5e:0a:08:0d:e8:9a:d3:33:32:7b:40:
                    ff:02:a4:b1:34:97:25:61:43:00:51:0e:e2:e7:9d:
                    a1:5a:7f:31:8d:e1:5d:db:74:83:1b:6f:23:26:2c:
                    b6:c7:f1:35:8d:62:5b:ac:14:0e:ca:ec:e2:e6:86:
                    ea:4e:fc:73:a9:5d:88:98:0f:2c:16:c7:b3:18:b4:
                    ce:31:98:f2:e9:8a:93:c3:99:5c:d0:ac:b1:f8:d7:
                    34:45:b3:18:77:ef:6f:a3:ea:a0:16:f5:c1:a4:56:
                    7e:c4:4d:dd:2c:4d:c7:a5:23:96:41:29:b3:fe:eb:
                    23:cd:4f:38:b7:04:e3:e0:61:f0:62:5a:e1:48:9d:
                    58:b7:d7:ce:3d:64:9c:5c:8a:0b:b2:b1:66:8e:b7:
                    99:55:09:00:03:c8:9f:1e:0e:38:18:5f:2a:ef:d1:
                    6f:ce:30:ec:3f:da:71:ea:d2:6a:ac:34:ab:65:82:
                    76:12:90:39:96:38:4f:3d:43:d5:73:c1:e4:16:a4:
                    dd:4a:a7:1d:c3:9f:2f:20:99:71:c2:40:ff:74:65:
                    6f:84:cf:36:1c:aa:73:39:b9:36:4f:16:d8:e5:3c:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5A:19:7D:BA:08:E7:B1:E6:0C:B6:88:7A:3F:78:57:81:F5:4B:0F
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.128.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:bf:c4:e3:4b:90:c3:6d:63:31:f8:88:35:f7:59:ae:0f:
         92:23:85:3f:90:d0:b5:67:0b:5b:1c:0d:2e:55:c5:e3:45:d5:
         b7:8a:e2:f4:c0:b2:bd:99:e0:81:cd:d1:11:e8:d4:3f:1d:a8:
         99:76:4a:3b:4a:4b:97:b8:a9:8a:52:26:86:de:9c:45:f6:a8:
         da:c4:b3:06:4c:4c:b3:b3:8f:76:ab:e0:86:34:71:02:9f:00:
         ac:5f:7c:d4:46:e7:66:72:94:b2:d3:21:ca:f0:ca:0e:e6:ed:
         b7:bc:b3:6d:fd:14:51:81:f9:22:35:5f:f1:d0:ee:45:37:9b:
         d3:51:7c:58:a2:cd:55:f3:5f:7b:e4:6c:fc:63:c1:b2:cd:34:
         39:fb:75:b0:04:bc:87:40:c0:d9:27:de:67:a9:ce:2e:d3:4f:
         7c:86:e5:12:3f:84:a4:d6:cb:a5:3a:ef:0d:c6:f0:c7:cd:98:
         80:33:0d:a9:ea:52:76:2a:f1:c8:b2:92:42:ae:b6:5e:1b:5b:
         3b:28:54:11:51:af:d7:3b:47:6c:a1:c8:b7:0e:1e:36:cf:61:
         2e:dd:cc:59:13:4e:c9:29:27:63:6c:45:64:d1:21:2d:7c:55:
         92:a5:e7:44:35:1a:b6:4e:2e:4a:86:0d:16:6b:0d:af:59:5c:
         1b:94:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:53 2026 by rpki-client