Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38352e302f32342d3234203d3e203435323839.roa
File:                     3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (raw, json)
Hash identifier:          9uJvmK0FEVjdzGyh4dQe6BsAkTDpNstIPHLao/5zXyU=
Subject key identifier:   AC:55:57:72:96:5B:F0:90:E3:4A:3E:DE:4A:D5:79:F3:84:D3:C0:36
Certificate issuer:       /CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
Certificate serial:       36FC3B9D1FF3DDECAB606EB263D1ADFA49829155
Authority key identifier: 6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38352e302f32342d3234203d3e203435323839.roa
Signing time:             Sun 03 May 2026 03:07:19 +0000
ROA not before:           Sun 03 May 2026 03:02:19 +0000
ROA not after:            Sun 02 May 2027 03:07:19 +0000
asID:                     45289
IP address blocks:        203.148.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl
                          rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fc:3b:9d:1f:f3:dd:ec:ab:60:6e:b2:63:d1:ad:fa:49:82:91:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
        Validity
            Not Before: May  3 03:02:19 2026 GMT
            Not After : May  2 03:07:19 2027 GMT
        Subject: CN=AC555772965BF090E34A3EDE4AD579F384D3C036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:15:47:bb:e4:77:5d:0b:1c:67:d2:d7:d1:
                    15:68:3e:24:bf:a9:aa:38:04:47:8c:c6:b0:07:fd:
                    de:2f:46:27:30:ec:ea:8c:f1:48:04:c2:76:fc:c0:
                    e1:54:7b:8c:63:3d:cd:cc:c9:65:cd:1f:dd:8e:84:
                    a2:2d:4f:be:29:8e:b9:be:13:b7:35:c5:de:b5:58:
                    9f:09:3b:03:2d:04:3b:d7:92:68:7b:9f:85:6e:aa:
                    a3:ae:29:06:52:1f:61:38:ba:9e:42:9b:34:38:99:
                    f9:b4:2f:b4:44:c9:07:8f:68:53:5c:32:50:93:44:
                    2d:97:77:df:7b:f4:c0:64:0c:06:1c:1f:f0:e7:49:
                    9c:1a:df:e5:34:9b:7c:b4:97:e8:bc:9f:50:cb:4e:
                    36:c7:af:8a:fd:33:fd:af:b0:17:c2:bb:f0:1f:e2:
                    4f:03:11:2e:da:c1:42:c7:df:71:23:39:e3:44:b0:
                    8b:96:2a:6d:c9:27:1c:8b:d5:74:9d:ac:81:d3:a7:
                    42:49:7c:05:18:4f:46:c3:aa:f8:92:01:94:cf:9f:
                    ca:59:1c:d1:8d:5c:d2:04:c0:7e:7c:fe:43:13:95:
                    e1:b1:0c:71:75:5a:69:a2:66:33:06:6f:16:e0:b8:
                    ea:72:81:b5:41:d1:4f:2e:d4:39:32:13:1f:58:c2:
                    18:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:55:57:72:96:5B:F0:90:E3:4A:3E:DE:4A:D5:79:F3:84:D3:C0:36
            X509v3 Authority Key Identifier:
                keyid:6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38352e302f32342d3234203d3e203435323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.148.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:fb:dc:40:8b:92:47:9e:42:b4:4e:4f:7b:1d:0a:8e:b2:d5:
         65:35:8d:3b:9a:82:b8:83:d6:0a:8b:a5:08:e2:bb:73:42:9a:
         3b:a5:33:1f:62:fd:f6:fd:20:c3:fb:ce:7a:ea:e5:bc:4a:0d:
         00:b9:53:1a:8b:2e:2d:57:d3:ef:c2:75:79:93:c6:e2:45:6c:
         79:1e:23:8f:68:57:be:a9:eb:4e:03:79:84:02:44:99:89:d5:
         7b:29:56:51:d4:d8:dd:54:3d:0c:fd:05:c2:a0:27:d8:9e:0c:
         c6:9e:32:3d:0b:95:27:89:6b:08:2b:e8:99:27:1a:59:fd:19:
         86:38:3b:b5:df:45:99:6d:46:de:31:f3:8a:a4:5e:1d:bd:1d:
         3a:5a:0a:00:d4:a4:c7:79:19:da:a8:fc:d1:c4:68:4c:c5:8d:
         a9:6c:fa:92:59:e6:d6:ca:6f:8e:9c:58:4c:74:cd:32:70:47:
         8f:bf:ad:38:06:3c:9b:38:e8:ad:c4:2b:bc:35:32:d2:c5:8b:
         07:5d:7e:c8:75:f7:53:21:74:0c:61:58:4b:71:4c:6d:fb:59:
         a4:29:4f:47:90:14:a7:8a:74:e8:8b:8d:f6:11:4c:84:fd:01:
         ec:bd:c0:e6:41:98:90:37:a4:6e:ce:b0:b7:97:33:d4:22:6c:
         29:45:15:41
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNvw7nR/z3eyrYG6yY9Gt+kmCkVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY4RUUyNTVFMjIxNkZFM0VDOTkzNjdDRkJDQzlBODU2
M0YyQzBFOTAeFw0yNjA1MDMwMzAyMTlaFw0yNzA1MDIwMzA3MTlaMDMxMTAvBgNV
BAMTKEFDNTU1NzcyOTY1QkYwOTBFMzRBM0VERTRBRDU3OUYzODREM0MwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTaxVHu+R3XQscZ9LX0RVoPiS/
qao4BEeMxrAH/d4vRicw7OqM8UgEwnb8wOFUe4xjPc3MyWXNH92OhKItT74pjrm+
E7c1xd61WJ8JOwMtBDvXkmh7n4VuqqOuKQZSH2E4up5CmzQ4mfm0L7REyQePaFNc
MlCTRC2Xd9979MBkDAYcH/DnSZwa3+U0m3y0l+i8n1DLTjbHr4r9M/2vsBfCu/Af
4k8DES7awULH33EjOeNEsIuWKm3JJxyL1XSdrIHTp0JJfAUYT0bDqviSAZTPn8pZ
HNGNXNIEwH58/kMTleGxDHF1WmmiZjMGbxbguOpygbVB0U8u1DkyEx9YwhipAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUrFVXcpZb8JDjSj7eStV584TTwDYwHwYDVR0j
BBgwFoAUb47iVeIhb+PsmTZ8+8yahWPywOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2NiY2MwMGQtY2U3OS00MjE2LWE2MmItZTNkNTBjYzc5NDQyLzAvNkY4RUUyNTVF
MjIxNkZFM0VDOTkzNjdDRkJDQzlBODU2M0YyQzBFOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RjhFRTI1NUUyMjE2RkUzRUM5OTM2N0NGQkNDOUE4NTYzRjJD
MEU5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBkLWNlNzktNDIxNi1h
NjJiLWUzZDUwY2M3OTQ0Mi8wLzMyMzAzMzJlMzEzNDM4MmUzODM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuUVTANBgkqhkiG
9w0BAQsFAAOCAQEAofvcQIuSR55CtE5Pex0KjrLVZTWNO5qCuIPWCoulCOK7c0Ka
O6UzH2L99v0gw/vOeurlvEoNALlTGosuLVfT78J1eZPG4kVseR4jj2hXvqnrTgN5
hAJEmYnVeylWUdTY3VQ9DP0FwqAn2J4Mxp4yPQuVJ4lrCCvomScaWf0Zhjg7td9F
mW1G3jHziqReHb0dOloKANSkx3kZ2qj80cRoTMWNqWz6klnm1spvjpxYTHTNMnBH
j7+tOAY8mzjorcQrvDUy0sWLB11+yHX3UyF0DGFYS3FMbftZpClPR5AUp4p06IuN
9hFMhP0B7L3A5kGYkDekbs6wt5cz1CJsKUUVQQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:15:39 2026 by rpki-client