Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa
File:                     3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (raw, json)
Hash identifier:          thp9e79q4pO0KAuvlYoAaJIJd+/sNGpgdctK2HpTH70=
Subject key identifier:   3D:A6:49:1E:1F:12:38:1A:4A:23:2B:7F:35:3C:DC:23:DD:DE:72:8E
Certificate issuer:       /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28
Certificate serial:       5D05EFCA786CB4A9BCDFAA0905991A9E12D6569A
Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa
Signing time:             Sun 03 May 2026 03:13:46 +0000
ROA not before:           Sun 03 May 2026 03:08:46 +0000
ROA not after:            Sun 02 May 2027 03:13:46 +0000
asID:                     9340
IP address blocks:        202.153.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl
                          rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:05:ef:ca:78:6c:b4:a9:bc:df:aa:09:05:99:1a:9e:12:d6:56:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28
        Validity
            Not Before: May  3 03:08:46 2026 GMT
            Not After : May  2 03:13:46 2027 GMT
        Subject: CN=3DA6491E1F12381A4A232B7F353CDC23DDDE728E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:ba:b8:67:f8:b7:20:ce:3a:2d:bf:1b:ee:
                    8c:5a:14:40:b5:61:01:5c:3f:ce:b9:10:84:98:7d:
                    ae:a0:2a:44:4c:8d:49:8c:00:73:fd:b0:73:40:f0:
                    21:c9:f1:dc:75:1c:93:8c:64:bb:c0:75:13:d7:c2:
                    a0:e6:2e:71:a2:d4:42:b3:ee:34:1a:bb:7c:30:85:
                    58:11:28:fa:a7:71:fc:4b:67:b7:0b:ac:58:6a:25:
                    6f:48:21:9c:1e:56:30:21:ef:f4:15:3f:c4:a3:86:
                    18:72:93:fd:e5:1f:fc:e0:ae:8f:2d:ac:8c:d3:97:
                    6e:a8:29:3b:ec:c1:74:04:8e:c4:32:4e:44:0d:3a:
                    78:39:d1:7a:e0:e3:bc:c8:87:2e:77:5d:4f:df:81:
                    5d:42:35:c6:f3:06:04:3b:7a:37:aa:01:81:73:8e:
                    be:bc:a4:e5:1c:9e:09:36:4b:15:bc:b4:21:db:7e:
                    57:e3:a4:ea:a9:e8:91:c2:3c:66:2c:ac:58:93:87:
                    55:e6:c7:f3:08:7c:4c:a0:c9:2a:5d:85:33:26:18:
                    5c:02:ab:92:29:51:6b:c5:b1:a2:ef:ee:a3:63:37:
                    85:c9:16:b0:c3:b5:db:69:8b:6d:f5:80:59:23:f4:
                    18:4a:85:64:6c:12:86:3c:f0:c0:7b:26:e2:17:53:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:49:1E:1F:12:38:1A:4A:23:2B:7F:35:3C:DC:23:DD:DE:72:8E
            X509v3 Authority Key Identifier:
                keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.153.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:9d:c4:00:b7:fc:79:9b:12:a2:d4:b5:e9:e4:7e:15:7c:
         18:60:a9:26:e9:57:6b:7f:ee:6d:21:f3:75:64:71:6d:81:24:
         f8:08:0d:71:96:c9:61:57:e9:bd:a7:37:40:a1:39:51:66:94:
         16:bf:a8:b9:9e:f5:18:0f:e2:29:ac:2b:f3:a4:82:6b:ce:30:
         b4:99:2a:9f:3c:6d:66:87:11:82:24:39:db:2a:ff:8f:bb:6f:
         0f:12:7a:1b:08:a9:99:14:93:c8:1b:b3:5b:c2:7d:83:0c:7d:
         fa:a1:d1:fe:64:ac:e1:20:50:32:21:1b:1e:01:9d:63:02:04:
         28:65:f3:a6:dc:7b:c0:37:7c:6c:47:7a:e4:8a:58:f8:ea:b3:
         69:97:ca:71:1e:48:8b:e3:49:ba:7e:17:8b:f6:84:8e:67:42:
         d4:4d:07:bc:68:7f:9b:6a:77:b0:55:ca:9f:0e:9e:6c:2a:f2:
         80:cf:18:85:fc:07:47:ff:b2:b7:c9:cf:d5:92:3f:bb:46:a6:
         d4:ca:23:f3:b0:db:fd:9a:99:7a:b7:dd:05:90:08:91:e6:75:
         b0:4b:d0:44:44:24:d3:ef:d9:67:be:06:45:1d:8d:ec:c4:bd:
         68:66:e9:35:d1:86:9a:01:09:53:ed:63:9e:37:4a:bd:ba:bb:
         15:47:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:59 2026 by rpki-client