Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235342e302f32342d3234203d3e203435333235.roa
File:                     3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=
Subject key identifier:   35:6E:F8:57:E1:B9:A4:03:A2:13:6A:25:7B:05:43:E0:20:F3:AC:79
Certificate issuer:       /CN=D35962E8F839460DC5283C472D81ADB87BBD3992
Certificate serial:       18988806E848CBE78549E88F67B2CC1FE7DDE8FC
Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235342e302f32342d3234203d3e203435333235.roa
Signing time:             Sun 03 May 2026 03:11:58 +0000
ROA not before:           Sun 03 May 2026 03:06:58 +0000
ROA not after:            Sun 02 May 2027 03:11:58 +0000
asID:                     45325
IP address blocks:        203.30.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl
                          rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:98:88:06:e8:48:cb:e7:85:49:e8:8f:67:b2:cc:1f:e7:dd:e8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992
        Validity
            Not Before: May  3 03:06:58 2026 GMT
            Not After : May  2 03:11:58 2027 GMT
        Subject: CN=356EF857E1B9A403A2136A257B0543E020F3AC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:aa:32:3a:3d:0f:1b:93:00:ba:04:e0:57:
                    0a:51:4e:c3:e7:c5:4a:a7:65:49:da:ea:b8:24:ba:
                    3a:42:88:7c:26:37:15:3e:22:21:4e:25:ae:cd:21:
                    cc:99:55:d1:57:69:76:f3:74:2e:f3:02:83:a3:30:
                    7d:08:90:f6:c9:f5:0b:1a:1e:b2:3b:3e:9e:12:1e:
                    e3:e1:f9:ac:44:31:38:ec:19:29:f4:c2:04:d3:0f:
                    f8:be:27:b0:d9:eb:6e:71:84:07:9f:90:39:ba:16:
                    f9:a9:b2:f9:f7:2d:d6:bb:6e:23:68:53:7e:65:51:
                    d6:f9:2a:be:15:ce:09:31:e0:3e:2b:b4:b6:83:f8:
                    18:6f:34:7c:d5:a7:5d:f5:8d:bf:b2:26:ae:01:bc:
                    4d:b6:c8:9f:55:9f:cf:54:29:42:83:5a:4c:49:17:
                    7b:19:59:20:91:ee:f8:c9:47:ed:97:cd:3f:e2:e8:
                    5e:f5:f6:60:55:8c:a3:0b:a6:ce:80:0f:d7:08:99:
                    f7:ad:90:5b:38:21:e3:d5:7e:65:94:7b:06:7f:c3:
                    87:66:54:0d:12:d9:ac:02:bb:92:ce:9b:eb:45:13:
                    5b:c4:1f:fd:4f:d7:c4:1c:85:a6:de:ca:3b:f5:9e:
                    29:69:da:ce:8b:0c:96:a1:5a:0f:4f:90:8a:b7:0c:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6E:F8:57:E1:B9:A4:03:A2:13:6A:25:7B:05:43:E0:20:F3:AC:79
            X509v3 Authority Key Identifier:
                keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235342e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:dc:26:76:34:9f:cc:79:8b:f3:dd:9f:6a:5b:20:21:41:82:
         2e:44:b9:e3:37:d9:21:c4:db:59:e3:ce:9d:b4:48:3c:b4:14:
         67:72:1c:83:f3:6d:48:c9:2f:ba:5d:ec:ce:65:a3:94:47:cd:
         96:57:c0:37:0d:c8:22:25:02:dc:70:b3:49:36:42:ac:0e:ed:
         3f:ca:3e:9d:65:d1:de:b2:bd:e0:1f:21:ae:9f:da:9a:11:04:
         8c:4f:c2:d4:23:95:07:3f:f9:5e:55:95:be:d7:1a:7a:a7:da:
         46:e3:39:85:09:09:71:81:53:76:10:41:4a:fc:84:06:87:56:
         29:f4:ad:36:5b:34:56:65:b0:a2:62:35:99:08:e0:9f:0a:20:
         5a:7f:8f:41:ed:f9:26:4b:8a:2d:6a:ca:cf:cc:7a:ca:28:54:
         e4:48:ba:22:9d:fb:43:6f:ba:24:09:b4:36:d6:29:04:40:a0:
         7e:63:c9:ec:5b:b6:9a:5d:b3:77:61:87:3a:ed:14:b5:35:e4:
         0e:94:3f:1f:3f:40:ee:6a:2d:99:d2:55:7e:7d:c0:c9:18:29:
         db:5e:31:a5:8e:3b:06:76:45:be:13:4e:86:43:1f:5e:28:e9:
         64:30:66:f4:b5:3e:4b:9a:f9:00:a6:ee:63:fa:3e:df:ee:6a:
         76:21:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:45 2026 by rpki-client