Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e39362e302f31392d3234203d3e2039333430.roa
File:                     3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (raw, json)
Hash identifier:          wQj10i6uxR8PMgl15oZaZmKj6Dkq8me1CXWhGz38VZw=
Subject key identifier:   C5:8B:F0:66:6F:2F:0C:73:E1:81:AB:B5:B3:D9:9C:69:2A:72:9B:47
Certificate issuer:       /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28
Certificate serial:       4B31763758641ED30E5DB10AF67A4DBD792C1C32
Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e39362e302f31392d3234203d3e2039333430.roa
Signing time:             Sun 03 May 2026 03:13:47 +0000
ROA not before:           Sun 03 May 2026 03:08:47 +0000
ROA not after:            Sun 02 May 2027 03:13:47 +0000
asID:                     9340
IP address blocks:        202.159.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl
                          rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:31:76:37:58:64:1e:d3:0e:5d:b1:0a:f6:7a:4d:bd:79:2c:1c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28
        Validity
            Not Before: May  3 03:08:47 2026 GMT
            Not After : May  2 03:13:47 2027 GMT
        Subject: CN=C58BF0666F2F0C73E181ABB5B3D99C692A729B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:1a:de:45:79:09:10:ed:44:18:83:bf:1f:
                    5f:8f:e3:48:61:7a:dd:20:a2:48:61:38:8b:8c:bd:
                    50:db:f6:2b:cd:e7:d0:12:28:38:a0:53:4f:fb:00:
                    eb:6b:ad:ff:5b:18:4c:ad:ee:95:55:35:ab:f8:dc:
                    87:9f:28:ea:95:b9:d5:18:72:5f:6e:32:25:28:24:
                    12:41:72:82:b8:d0:20:dc:2c:26:d1:ee:f5:ee:69:
                    62:b4:22:8b:63:0e:95:2c:b6:d1:e3:f9:78:61:dd:
                    6c:53:d5:57:be:a6:92:36:e9:97:76:3b:f4:b8:a2:
                    ee:4e:20:8c:c6:9b:87:7b:b1:89:fd:35:e7:20:9b:
                    10:72:8f:00:6e:96:f8:8b:cb:8d:8f:c1:ec:e8:5f:
                    4b:20:53:db:13:78:59:bc:09:b1:2d:e9:1b:86:b1:
                    0c:04:f2:4e:a7:a8:ea:3b:1f:1d:a7:ce:ab:05:14:
                    00:64:b9:a6:18:ea:99:bd:87:e4:45:b2:fe:45:29:
                    f3:10:9e:4c:10:de:67:2d:61:d7:d9:f0:3e:46:57:
                    75:58:4d:df:af:17:31:8a:ac:68:be:62:a0:e2:49:
                    c8:fa:5a:0b:2c:71:66:69:a7:67:7f:75:e7:30:36:
                    12:16:93:40:37:e3:a7:55:f4:9e:8c:8d:a9:81:40:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8B:F0:66:6F:2F:0C:73:E1:81:AB:B5:B3:D9:9C:69:2A:72:9B:47
            X509v3 Authority Key Identifier:
                keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e39362e302f31392d3234203d3e2039333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.159.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:b6:a7:23:f0:ba:2f:1e:a3:16:43:cd:9c:b8:1d:0c:91:46:
         7d:a1:71:3f:1b:5d:31:7c:06:b6:cb:1a:2e:39:04:6a:ed:c5:
         d0:eb:5e:63:37:d3:40:01:fd:49:f3:3c:8a:2f:c4:38:46:b6:
         64:e6:d2:c2:18:c2:77:d0:a4:b4:e6:0b:36:fd:b3:b4:6b:2b:
         33:04:cc:7f:fe:18:69:22:38:19:b8:5c:d9:29:ad:a7:5e:6c:
         47:30:83:1d:16:60:e8:a6:be:23:ed:a9:f6:64:ac:0b:80:3b:
         9e:5b:64:07:d0:d4:13:fd:7f:9a:eb:99:d8:b2:14:bc:00:aa:
         67:ae:09:f4:2c:03:90:95:ec:2e:5a:ec:af:e8:df:eb:ca:e6:
         70:5b:45:f7:63:84:d8:bd:d7:72:fb:cc:3d:6a:f6:fb:1b:c5:
         33:a8:a9:09:1d:74:71:30:b7:d1:51:80:bd:cb:99:be:2b:b4:
         35:3f:69:e2:3f:9b:6c:1a:a7:b5:4d:2f:3d:13:7a:4e:21:62:
         ac:ef:b0:5b:c6:e2:1c:d9:0e:c9:a2:63:b1:eb:8a:36:cc:cf:
         7b:0d:c5:8c:71:11:d8:e3:5a:84:4a:11:65:22:75:70:c8:6b:
         8a:5e:f0:1c:1a:b3:c7:3b:be:85:5b:f4:24:95:32:a1:e9:35:
         05:d2:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:42 2026 by rpki-client