Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235352e302f32342d3234203d3e203435333235.roa
File:                     3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=
Subject key identifier:   30:66:7D:68:62:70:2F:31:00:05:AF:F2:B3:61:18:45:5A:FA:E8:B2
Certificate issuer:       /CN=D35962E8F839460DC5283C472D81ADB87BBD3992
Certificate serial:       547206734CF5496335058A1576828D74EFAD5C5B
Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235352e302f32342d3234203d3e203435333235.roa
Signing time:             Sun 03 May 2026 03:12:00 +0000
ROA not before:           Sun 03 May 2026 03:07:00 +0000
ROA not after:            Sun 02 May 2027 03:12:00 +0000
asID:                     45325
IP address blocks:        203.30.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl
                          rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:72:06:73:4c:f5:49:63:35:05:8a:15:76:82:8d:74:ef:ad:5c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992
        Validity
            Not Before: May  3 03:07:00 2026 GMT
            Not After : May  2 03:12:00 2027 GMT
        Subject: CN=30667D6862702F310005AFF2B36118455AFAE8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:c8:24:eb:50:3a:14:14:1d:db:ee:29:7a:
                    a8:b1:71:f9:4b:79:a3:88:fb:8b:40:5b:80:87:15:
                    b2:75:94:47:10:b2:ac:cd:b9:5a:0b:9b:18:87:28:
                    fd:b8:46:5b:0a:92:76:6c:51:b3:1d:15:8e:e9:b5:
                    df:52:f0:a3:37:30:c1:a1:2c:08:a1:44:1a:54:54:
                    e9:bc:50:89:1b:ad:dc:14:f8:24:68:3e:4c:5a:48:
                    9a:79:7e:c8:fe:4f:37:de:4e:37:88:8d:79:f0:ae:
                    4c:0b:b7:66:0d:f5:3d:f2:0d:83:26:a7:69:0c:f1:
                    89:23:52:d4:d1:49:ad:e4:c3:79:bd:cd:18:cf:fc:
                    8e:6b:61:23:5d:1f:42:e7:10:f0:6d:d4:7f:e8:f8:
                    db:04:0b:39:3a:f9:44:cd:ec:00:f0:5a:78:1d:2e:
                    00:11:51:ff:e0:e4:03:d3:e9:40:3b:38:f1:cd:91:
                    d8:f9:90:0e:8c:ee:42:08:c4:55:3a:0d:23:88:d6:
                    16:ba:aa:37:a3:ec:f4:f8:b3:a7:94:56:c5:c6:7a:
                    6d:ec:1d:17:7a:3d:08:dd:34:53:9c:b3:bd:e6:f5:
                    89:f1:42:78:40:a0:e6:6d:bb:20:b0:c4:73:0c:1b:
                    e2:9a:ba:48:df:8b:0f:ad:d5:89:d1:cd:e3:54:4f:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:66:7D:68:62:70:2F:31:00:05:AF:F2:B3:61:18:45:5A:FA:E8:B2
            X509v3 Authority Key Identifier:
                keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235352e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:fe:97:23:fa:23:4c:dc:9b:b2:8b:e2:8f:1b:10:47:56:c1:
         3b:9e:6a:e3:25:b4:d4:b7:4d:8d:fb:1d:9a:ee:11:58:1f:df:
         be:04:e7:3b:76:9d:1c:16:a1:00:fc:da:ee:43:9b:52:22:c0:
         3a:af:94:aa:de:00:23:ad:30:c3:e8:80:28:39:c7:ef:0e:25:
         ec:85:6b:74:36:aa:d0:22:fa:10:55:57:98:60:06:f6:e7:a9:
         1f:6b:51:46:8d:96:7c:4b:0f:c5:66:5c:72:f6:87:56:94:8f:
         91:76:b5:05:f7:bd:e6:1e:06:65:e9:dc:4a:68:a1:01:a8:7e:
         b3:0c:bb:93:ff:88:31:08:dc:15:47:c0:96:e6:73:8f:18:ca:
         96:9e:ac:5b:aa:58:9e:28:93:34:24:34:84:d5:ce:ff:f8:70:
         ca:86:78:9d:39:47:0a:c2:e1:47:41:ac:80:6c:c8:ae:97:1b:
         91:b8:18:91:cb:ec:f7:82:e9:ab:95:3e:40:7a:b7:be:f5:9a:
         a6:7a:95:07:66:55:9f:a2:50:e8:e2:a7:d4:67:91:38:5f:e1:
         35:ae:f3:8c:51:70:8d:5d:21:39:44:8b:c0:34:91:1e:25:5a:
         9a:f2:15:3e:46:ac:df:15:de:81:47:de:6a:50:0a:6b:83:de:
         81:bf:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:47 2026 by rpki-client