Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa
File:                     3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (raw, json)
Hash identifier:          RtiNL89mZIuYDEcSArtPnCGvIgkScdacFIZTXeu2tc4=
Subject key identifier:   5E:F8:C5:23:97:5A:91:9A:B2:37:0B:F1:A8:94:FB:E5:5B:1C:77:6B
Certificate issuer:       /CN=16DCF707B920485289157A95351565941B6A8930
Certificate serial:       6EEA3344EC983F39CDAE735E97EB0966792A670F
Authority key identifier: 16:DC:F7:07:B9:20:48:52:89:15:7A:95:35:15:65:94:1B:6A:89:30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa
Signing time:             Sun 03 May 2026 03:14:31 +0000
ROA not before:           Sun 03 May 2026 03:09:31 +0000
ROA not after:            Sun 02 May 2027 03:14:31 +0000
asID:                     45295
IP address blocks:        203.145.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.crl
                          rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ea:33:44:ec:98:3f:39:cd:ae:73:5e:97:eb:09:66:79:2a:67:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16DCF707B920485289157A95351565941B6A8930
        Validity
            Not Before: May  3 03:09:31 2026 GMT
            Not After : May  2 03:14:31 2027 GMT
        Subject: CN=5EF8C523975A919AB2370BF1A894FBE55B1C776B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:37:50:58:cc:ac:b6:3e:7e:67:7b:37:3f:
                    fb:2a:04:30:ac:b6:24:1d:21:23:a5:64:33:26:05:
                    8e:27:c7:6b:59:cc:13:df:03:06:0d:03:ef:f0:b4:
                    f1:f8:09:a6:9c:df:3a:33:14:5f:cc:19:09:14:e3:
                    ec:65:a3:b9:48:6c:fa:cf:0b:47:42:f4:04:da:ad:
                    7a:3a:b8:ec:a4:cd:b4:8a:2b:4e:f4:a2:0a:20:fb:
                    16:2b:1d:5b:09:2b:c8:d9:35:19:8e:d9:09:c4:8a:
                    8d:fe:2c:8f:54:1a:5f:1f:7d:b5:d4:62:e3:d7:b2:
                    df:db:2b:12:61:20:fc:b8:62:15:ad:b0:70:ce:96:
                    d2:55:28:78:f9:6e:23:9c:f2:ba:34:f8:05:cd:47:
                    c8:59:26:eb:e0:8f:04:76:f9:74:89:7c:6a:2b:67:
                    3c:05:46:60:49:18:d8:f1:32:72:36:56:00:46:c5:
                    ce:76:3b:23:6f:52:d3:ef:c7:b9:6c:1e:56:3d:ec:
                    56:6e:39:64:96:d4:59:22:55:ee:c2:0a:95:6a:1b:
                    a3:eb:7b:78:a2:77:f1:49:2d:46:73:8c:28:5a:4d:
                    e1:db:c1:e4:d7:2d:2d:17:0f:c3:48:f1:15:73:f7:
                    f4:54:85:b0:76:e5:ab:88:3a:15:6b:2c:ba:62:79:
                    4b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F8:C5:23:97:5A:91:9A:B2:37:0B:F1:A8:94:FB:E5:5B:1C:77:6B
            X509v3 Authority Key Identifier:
                keyid:16:DC:F7:07:B9:20:48:52:89:15:7A:95:35:15:65:94:1B:6A:89:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:2d:bd:3d:63:85:cc:b6:ed:5c:54:a9:c4:51:f5:fe:4e:69:
         1b:59:2c:1b:97:3c:be:15:a3:ec:c3:e6:4b:d5:eb:32:cf:5b:
         9f:3c:8b:7f:0f:49:d8:ed:3b:76:74:86:53:e0:ba:d8:de:c2:
         ac:88:f9:b2:9c:ae:d8:36:a7:56:06:f7:1f:2a:ec:76:22:85:
         42:48:fa:c5:e9:7c:11:37:a9:41:60:cb:ab:56:5d:69:73:10:
         49:78:dd:7a:f1:67:5b:95:07:d0:e6:e3:ae:58:f8:10:5d:0a:
         a4:b5:8c:1b:8a:15:10:f9:6e:6e:d3:60:9b:1f:e2:4e:84:60:
         70:5d:a2:ee:9d:32:05:f9:5b:57:50:a8:1b:c4:f0:f7:74:f9:
         1c:19:fd:0b:ae:87:df:f6:db:7f:b0:fe:77:4d:c5:0b:34:47:
         38:c9:1d:95:85:62:e4:74:74:d2:5f:21:c6:20:63:13:26:15:
         bc:2c:27:38:47:e9:b0:1a:31:f9:89:d7:8d:77:6e:67:58:d2:
         04:fe:1f:d8:d1:46:af:c9:8d:58:16:38:c4:a1:8a:00:7e:0f:
         f1:99:6c:d3:c1:6f:a7:11:5d:55:0f:12:b0:b1:7b:ae:94:61:
         58:ab:f7:3d:04:e8:09:11:5d:2c:79:86:b0:33:2e:0b:3d:53:
         58:9f:bf:1b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbuozROyYPznNrnNel+sJZnkqZw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZEQ0Y3MDdCOTIwNDg1Mjg5MTU3QTk1MzUxNTY1OTQx
QjZBODkzMDAeFw0yNjA1MDMwMzA5MzFaFw0yNzA1MDIwMzE0MzFaMDMxMTAvBgNV
BAMTKDVFRjhDNTIzOTc1QTkxOUFCMjM3MEJGMUE4OTRGQkU1NUIxQzc3NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLjdQWMystj5+Z3s3P/sqBDCs
tiQdISOlZDMmBY4nx2tZzBPfAwYNA+/wtPH4Caac3zozFF/MGQkU4+xlo7lIbPrP
C0dC9ATarXo6uOykzbSKK070ogog+xYrHVsJK8jZNRmO2QnEio3+LI9UGl8ffbXU
YuPXst/bKxJhIPy4YhWtsHDOltJVKHj5biOc8ro0+AXNR8hZJuvgjwR2+XSJfGor
ZzwFRmBJGNjxMnI2VgBGxc52OyNvUtPvx7lsHlY97FZuOWSW1FkiVe7CCpVqG6Pr
e3iid/FJLUZzjChaTeHbweTXLS0XD8NI8RVz9/RUhbB25auIOhVrLLpieUs9AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUXvjFI5dakZqyNwvxqJT75Vscd2swHwYDVR0j
BBgwFoAUFtz3B7kgSFKJFXqVNRVllBtqiTAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTdkOWY3NDUtZmFhNC00OGNlLTgzYjEtMGJkZTMzYzI0NDdmLzAvMTZEQ0Y3MDdC
OTIwNDg1Mjg5MTU3QTk1MzUxNTY1OTQxQjZBODkzMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNkRDRjcwN0I5MjA0ODUyODkxNTdBOTUzNTE1NjU5NDFCNkE4
OTMwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U3ZDlmNzQ1LWZhYTQtNDhjZS04
M2IxLTBiZGUzM2MyNDQ3Zi8wLzMyMzAzMzJlMzEzNDM1MmUzNjMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcuRPDANBgkqhkiG
9w0BAQsFAAOCAQEAsy29PWOFzLbtXFSpxFH1/k5pG1ksG5c8vhWj7MPmS9XrMs9b
nzyLfw9J2O07dnSGU+C62N7CrIj5spyu2DanVgb3HyrsdiKFQkj6xel8ETepQWDL
q1ZdaXMQSXjdevFnW5UH0Objrlj4EF0KpLWMG4oVEPlubtNgmx/iToRgcF2i7p0y
BflbV1CoG8Tw93T5HBn9C66H3/bbf7D+d03FCzRHOMkdlYVi5HR00l8hxiBjEyYV
vCwnOEfpsBox+YnXjXduZ1jSBP4f2NFGr8mNWBY4xKGKAH4P8Zls08FvpxFdVQ8S
sLF7rpRhWKv3PQToCRFdLHmGsDMuCz1TWJ+/Gw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:48:10 2026 by rpki-client