Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234392e302f32342d3234203d3e20313333373938.roa
File:                     3230332e3132382e3234392e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier:          VlwK0UNoiszFQ/79ac1EVXtVnGQq2AGb71C1tKR/mSo=
Subject key identifier:   22:6F:32:DA:3A:95:E5:DE:15:D2:F2:16:7A:A7:AE:68:95:D6:CE:21
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       76D31BAFE9583E400C2912C84A8BA61442CFECE7
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234392e302f32342d3234203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:13 +0000
ROA not before:           Sun 03 May 2026 02:59:13 +0000
ROA not after:            Sun 02 May 2027 03:04:13 +0000
asID:                     133798
IP address blocks:        203.128.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d3:1b:af:e9:58:3e:40:0c:29:12:c8:4a:8b:a6:14:42:cf:ec:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:13 2026 GMT
            Not After : May  2 03:04:13 2027 GMT
        Subject: CN=226F32DA3A95E5DE15D2F2167AA7AE6895D6CE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:19:af:02:0f:49:e5:ec:07:69:65:69:6a:
                    b3:53:06:68:33:3a:20:ec:b6:da:27:7d:ff:4a:15:
                    a2:15:80:f3:e7:b3:e9:a1:e3:46:f1:88:bd:07:f0:
                    f4:17:e3:a7:e2:39:76:3c:1f:a8:a0:3e:89:f6:e3:
                    a4:2c:82:e9:46:bb:0f:d6:58:eb:96:09:99:79:21:
                    fa:a9:46:b9:c0:a6:e0:33:57:19:27:16:93:de:4f:
                    58:f4:b9:9b:67:31:c9:04:97:87:40:a2:1f:b8:05:
                    46:6b:63:97:ff:a3:33:8b:67:da:38:42:99:42:e4:
                    81:98:ce:c7:cd:86:9d:6e:0f:42:b9:97:67:a9:87:
                    c5:70:70:b4:a2:63:cd:dc:f7:3c:8e:73:ea:e5:4b:
                    b9:bf:c4:32:ca:a5:53:7d:01:2a:08:30:f0:a4:59:
                    92:cd:c5:9d:98:59:a6:58:2f:12:df:44:d0:9e:a1:
                    b3:9d:cd:0d:3f:33:9b:34:bc:22:d6:d2:59:7b:8d:
                    d0:d0:1f:dc:fc:e0:a9:92:89:58:7c:55:f7:0a:63:
                    99:4a:7a:3d:c6:4c:19:2d:47:ce:c7:7c:f3:54:a2:
                    c5:31:dd:68:a9:f5:c0:8d:f5:ae:79:86:f8:dc:d4:
                    a9:2d:be:28:8b:fe:b5:4e:25:f2:e6:7a:47:b2:33:
                    8e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6F:32:DA:3A:95:E5:DE:15:D2:F2:16:7A:A7:AE:68:95:D6:CE:21
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234392e302f32342d3234203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.128.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:58:58:38:a0:58:ad:cc:b3:42:64:da:a8:f1:ad:40:d0:f0:
         8a:44:7d:a4:ae:54:b5:56:d8:04:be:64:e8:04:b3:c4:3d:b3:
         70:0f:02:07:7f:87:13:04:aa:cd:88:75:4a:7a:6b:b1:52:b0:
         e9:98:78:63:3e:d5:0f:19:98:82:58:a4:7b:5c:51:49:58:4d:
         8c:e3:1d:6d:53:53:88:6f:ee:5b:eb:6b:f4:46:4a:eb:28:37:
         f8:46:da:da:1e:74:67:7b:b8:f3:c9:50:1a:ab:cb:6e:f3:42:
         f0:65:05:ab:5c:17:70:87:54:a1:de:94:e1:33:c5:d5:45:83:
         7a:76:48:48:6c:19:62:28:98:41:9c:b4:90:35:cd:87:34:31:
         d5:2e:42:86:22:55:63:cb:b5:b9:14:12:de:6c:65:c2:ac:f4:
         a3:e1:15:ee:04:29:7a:b4:fc:0b:69:36:75:d0:98:8a:c7:db:
         f2:26:46:80:02:c4:75:46:51:ef:6b:d5:c0:f7:aa:7b:0e:75:
         f9:f3:f6:8b:d8:f5:0d:ee:d7:a1:3f:f7:ef:8d:10:07:31:57:
         ff:5b:dd:8f:d3:7c:0e:63:a9:8b:26:be:94:6f:c2:de:bb:97:
         dc:d5:ad:00:ff:ce:7e:98:6a:f5:03:35:d0:94:5e:28:f5:2a:
         22:40:3b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:31 2026 by rpki-client