Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32312d3231203d3e203234353235.roa
File:                     3230332e3135332e32342e302f32312d3231203d3e203234353235.roa (raw, json)
Hash identifier:          eLYlLjMjM5ToMvm7QPqivwwB5j/aZs0y89c/Umqgzjg=
Subject key identifier:   F6:02:85:19:4B:AC:7B:01:91:8E:8A:12:1C:B3:FD:C1:C0:58:A5:D7
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       72EF67A9F0F7CC8B37CC01468EAC772552D41B20
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32312d3231203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:56 +0000
ROA not before:           Sun 03 May 2026 03:03:56 +0000
ROA not after:            Sun 02 May 2027 03:08:56 +0000
asID:                     24525
IP address blocks:        203.153.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ef:67:a9:f0:f7:cc:8b:37:cc:01:46:8e:ac:77:25:52:d4:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:56 2026 GMT
            Not After : May  2 03:08:56 2027 GMT
        Subject: CN=F60285194BAC7B01918E8A121CB3FDC1C058A5D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:72:08:60:49:49:c1:bd:1a:fe:b7:d7:8e:
                    da:d7:69:04:7c:95:a8:70:71:b6:cc:7c:54:42:eb:
                    e5:43:49:6d:71:a9:07:eb:61:50:81:6f:6f:26:69:
                    2b:50:12:b3:6a:fb:5a:65:ab:10:ab:86:1f:c5:66:
                    21:8a:4e:cb:26:1d:22:22:cc:60:40:56:86:6f:6c:
                    26:98:aa:c8:a9:55:af:77:b7:0e:74:d3:7c:d3:53:
                    b4:62:ad:ed:f3:e7:c9:6a:a6:b4:e8:f9:4b:7b:8f:
                    42:5a:10:69:7b:c7:97:5d:d8:87:e2:bf:5a:13:2f:
                    f5:ac:6f:25:58:44:a6:3b:8b:f1:f1:61:ef:c8:b4:
                    2b:e9:06:61:1f:b9:d8:ee:45:1b:14:1e:57:a7:fc:
                    7c:f2:78:d8:d6:c0:d3:04:1b:fd:ce:32:e4:db:27:
                    cd:7d:29:45:03:27:ea:d6:b5:83:f7:36:08:15:71:
                    d1:08:bb:36:f8:c2:3d:8f:46:6e:aa:0e:b3:81:fe:
                    28:4c:de:87:f9:fc:25:d2:1d:29:9b:23:4f:5c:ba:
                    41:94:79:2d:0f:e8:b6:81:c9:30:1d:85:35:6a:68:
                    e5:19:48:e6:44:89:16:77:08:a1:77:a7:9a:17:6b:
                    ed:cc:fb:4c:e5:fc:c2:a6:0e:d5:ac:16:ef:df:b5:
                    e0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:02:85:19:4B:AC:7B:01:91:8E:8A:12:1C:B3:FD:C1:C0:58:A5:D7
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32312d3231203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:48:89:ae:93:67:23:53:2a:a0:27:b0:af:bc:df:2f:18:b8:
         31:c5:75:a5:15:6d:d6:b4:a3:ca:9d:42:79:c3:19:1e:3f:a0:
         e2:8b:72:b5:9d:29:23:35:5f:bb:00:d8:e4:75:13:ae:e7:e3:
         c0:52:e8:6b:0e:66:2b:3a:db:c2:19:3a:84:24:01:8c:91:da:
         17:5d:7e:82:ba:e5:f4:74:22:af:b1:27:25:1a:4d:a9:61:33:
         c6:f0:84:a5:83:a8:89:fe:34:49:6b:d1:ef:eb:f2:f8:5d:b8:
         8a:6d:d7:74:1e:89:a5:e6:61:c0:0f:ea:45:66:e3:e7:57:d0:
         37:88:37:90:22:27:85:59:e8:bb:eb:c4:2b:5f:9d:9d:a1:60:
         41:50:80:7e:d2:10:a5:06:4b:55:78:4c:d0:0f:fd:2c:24:eb:
         9b:36:00:ab:aa:62:9d:fa:ed:57:6e:67:ab:cf:77:a2:a6:22:
         a1:7f:f7:7e:50:6e:11:ae:37:8f:ba:43:2c:22:50:f1:ae:4a:
         3a:95:c4:90:d1:46:5c:10:74:60:45:a1:a7:47:1c:86:b8:c0:
         16:c6:2a:ad:6a:ba:f7:6d:8d:26:e9:8f:97:d9:38:5c:86:e3:
         dc:44:98:1f:e5:30:a2:b0:0a:d3:c2:00:d4:ee:85:5f:5e:53:
         4c:9a:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:53 2026 by rpki-client