Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa
File:                     3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa (raw, json)
Hash identifier:          e7mQPN3Z6KC/Ik9Qm59+I1SvLwjeilQ2SD4cxlIQDBE=
Subject key identifier:   54:04:81:4E:26:7E:92:C0:F7:2A:8E:DF:DD:2A:CF:B7:74:13:E7:CF
Certificate issuer:       /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial:       6343ED599A1A56F4F1A4ED14D732536578FD7E34
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa
Signing time:             Sun 03 May 2026 03:05:15 +0000
ROA not before:           Sun 03 May 2026 03:00:15 +0000
ROA not after:            Sun 02 May 2027 03:05:15 +0000
asID:                     38156
IP address blocks:        203.190.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
                          rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:43:ed:59:9a:1a:56:f4:f1:a4:ed:14:d7:32:53:65:78:fd:7e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
        Validity
            Not Before: May  3 03:00:15 2026 GMT
            Not After : May  2 03:05:15 2027 GMT
        Subject: CN=5404814E267E92C0F72A8EDFDD2ACFB77413E7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:df:74:f6:0b:c5:2f:80:65:dc:f0:f9:c9:
                    f5:0f:d1:69:ba:4e:4e:f7:40:49:3b:99:60:3b:6d:
                    52:7f:69:93:18:1f:1b:11:9f:7c:c9:32:fc:97:8e:
                    3e:e5:c2:49:28:e5:e0:60:66:d4:8c:c3:b7:7d:c7:
                    8d:9c:a0:a0:cd:02:39:d7:21:19:06:88:f0:77:49:
                    6c:fe:6a:ed:be:2d:56:63:d4:44:b0:cf:ed:e1:16:
                    b8:a9:07:13:c5:8f:ad:d4:bb:5e:66:e6:1b:02:b1:
                    9b:3b:79:75:dc:7f:55:b9:0b:89:d0:ae:ed:6c:ff:
                    24:35:a2:ac:ca:41:50:a0:08:11:62:5d:49:7f:12:
                    59:10:19:12:6e:e4:06:04:11:c9:69:d7:ce:6d:7b:
                    71:21:b4:a9:a3:4b:d3:36:9d:d6:0d:55:c6:41:ea:
                    c7:a3:2d:8c:de:65:57:43:f6:ef:7b:ba:3d:4e:53:
                    9f:64:ca:d5:c1:33:cd:fb:42:92:74:af:c5:97:0d:
                    61:c4:7a:04:d5:e9:3d:a9:b1:5f:fe:3e:ed:aa:cc:
                    4f:38:2d:a1:9c:c2:da:83:38:09:db:c8:ad:0d:e5:
                    aa:ab:98:cd:bc:83:e3:cb:7b:6f:02:8c:d2:18:24:
                    b0:25:ef:a9:b7:41:6f:b0:c8:2a:72:c2:a5:18:c5:
                    d4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:04:81:4E:26:7E:92:C0:F7:2A:8E:DF:DD:2A:CF:B7:74:13:E7:CF
            X509v3 Authority Key Identifier:
                keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.190.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:69:26:33:db:d5:f2:49:f6:72:79:f0:2d:a0:ed:12:18:86:
         bb:ec:38:a7:f1:43:51:a2:e0:11:50:0a:b6:49:93:1b:a2:d2:
         cb:a4:3b:aa:49:8c:f1:80:ac:7d:f0:59:55:f4:ad:2e:6d:56:
         51:a7:bf:aa:47:0a:02:24:d5:82:05:4d:41:db:5d:43:51:6b:
         ee:51:c3:70:0e:68:c5:b3:a8:c4:09:2e:5a:13:86:9e:64:17:
         d1:0a:29:c8:a0:5e:20:80:22:62:47:20:0b:55:93:79:e7:75:
         91:05:60:66:64:bb:39:4e:f7:c5:cb:d7:e5:38:f0:c1:65:a2:
         84:97:8a:ba:f6:87:da:21:73:2f:90:c2:f6:3d:52:8c:e5:8f:
         5c:57:29:7e:68:61:b6:3d:c5:a1:17:1e:9b:dc:d0:cd:d3:0b:
         97:52:e2:13:33:41:93:1a:6b:9a:0e:70:8c:f2:00:57:35:39:
         dc:b4:93:57:c3:b9:0d:2b:f5:24:ec:72:14:ac:b6:68:98:22:
         7f:6e:f9:12:69:11:85:32:b6:6e:cc:24:55:68:dd:39:8e:35:
         b4:9e:f0:32:b6:9c:21:be:bb:43:b5:60:d6:9b:98:c2:39:85:
         50:d4:e9:a0:0e:41:6c:d0:f6:a1:c5:38:12:d6:88:b0:5e:92:
         ef:9f:0f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:36 2026 by rpki-client