Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa
File:                     3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (raw, json)
Hash identifier:          xfswO543iSh9SG/x27NWXDQKULYEPhHMqzXL1c7JMEI=
Subject key identifier:   76:67:A3:C9:02:4A:B9:C7:FF:22:D8:AF:61:F3:BF:4A:FE:E0:5A:09
Certificate issuer:       /CN=40064999DEC3F3BD85C4F883982B58D76246EE84
Certificate serial:       612F695BC834121F6EF7FB78A1DF91CAA2235554
Authority key identifier: 40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa
Signing time:             Sun 03 May 2026 03:08:15 +0000
ROA not before:           Sun 03 May 2026 03:03:15 +0000
ROA not after:            Sun 02 May 2027 03:08:15 +0000
asID:                     46050
IP address blocks:        203.161.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl
                          rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2f:69:5b:c8:34:12:1f:6e:f7:fb:78:a1:df:91:ca:a2:23:55:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40064999DEC3F3BD85C4F883982B58D76246EE84
        Validity
            Not Before: May  3 03:03:15 2026 GMT
            Not After : May  2 03:08:15 2027 GMT
        Subject: CN=7667A3C9024AB9C7FF22D8AF61F3BF4AFEE05A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1b:71:94:7f:c7:33:b6:f8:b4:37:ea:d5:05:
                    1d:cf:46:d4:f3:f3:db:48:68:77:99:50:03:c4:83:
                    41:9d:67:2b:27:fd:17:ce:1f:87:fa:bf:9b:48:bd:
                    76:41:72:24:b0:5a:bb:9b:bb:ab:3f:13:1e:22:95:
                    b0:25:44:74:cc:e7:2a:c6:ff:6b:4e:b5:0d:5e:bd:
                    c7:cd:ad:13:ac:b8:c9:b3:ee:c3:f1:ad:0b:7b:ac:
                    49:7c:1e:7c:64:76:3e:41:03:5a:5c:da:7b:fd:2c:
                    35:0d:1c:62:b7:bf:84:d2:3f:b1:f8:ec:eb:bd:b4:
                    1f:e1:b1:ce:2d:c9:5c:7e:3d:69:48:6f:10:f3:c3:
                    34:21:68:cd:92:88:55:50:2a:cf:11:b3:a9:65:f8:
                    d9:58:42:62:6f:dc:3e:ff:91:96:a2:18:55:b8:0d:
                    00:5d:a7:31:f7:0b:ec:71:d8:46:6a:66:24:60:37:
                    98:39:11:ba:e2:f5:b5:b0:7e:99:42:5e:8e:3d:b1:
                    de:01:f5:f7:6a:39:95:59:1b:85:4f:b3:43:69:03:
                    b9:69:26:3d:13:e9:a2:d9:28:de:a0:30:40:fe:e3:
                    3a:1a:0c:df:00:39:93:cc:51:aa:ae:2d:73:e9:6e:
                    2f:1e:60:ef:0f:f4:81:ab:27:81:a9:f0:87:1e:30:
                    3f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:67:A3:C9:02:4A:B9:C7:FF:22:D8:AF:61:F3:BF:4A:FE:E0:5A:09
            X509v3 Authority Key Identifier:
                keyid:40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:ca:00:91:df:e1:9b:83:07:25:16:f2:b7:c8:3b:da:ac:
         92:c7:f0:af:3e:2f:a8:df:b2:88:6f:2e:c5:a1:62:7b:20:92:
         42:63:25:fd:bd:5a:ac:c2:08:dd:b0:b6:de:81:cf:1c:00:74:
         ef:94:ec:1f:3d:97:75:03:bc:09:d6:68:f4:dc:7c:b8:e8:f6:
         5a:a3:73:43:32:3d:39:a3:3f:6d:7d:67:a3:bb:26:40:eb:57:
         14:97:de:98:dd:9c:f3:ef:bb:9b:ec:7d:bd:f0:45:46:93:15:
         4f:cf:4e:11:9c:e0:17:c4:1f:59:77:7e:ea:a1:01:ae:de:9a:
         68:4a:e7:be:b1:e3:af:80:9f:c4:49:2e:b7:09:c2:d4:a7:02:
         34:68:d1:45:22:0f:1a:0f:60:fc:6d:4b:60:c2:29:27:35:6b:
         d8:44:88:cc:27:07:c3:f6:15:c3:c1:57:a4:a7:b3:ab:b8:d9:
         5e:4a:85:75:41:41:cb:0d:b5:d3:1f:01:52:96:12:ce:71:d5:
         99:fd:44:ae:a1:de:de:42:fd:76:ca:2b:70:48:cc:3a:fb:ea:
         51:0b:59:8a:ac:5f:45:a7:af:08:4a:65:2e:d0:a9:92:34:e2:
         26:16:f2:d0:ce:56:4b:2c:40:fa:76:af:4b:86:85:25:98:dd:
         a2:f2:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:23 2026 by rpki-client