Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa
File:                     3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (raw, json)
Hash identifier:          ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=
Subject key identifier:   E8:B8:CD:CE:05:19:39:49:24:41:52:33:01:62:39:E6:C2:D1:C8:84
Certificate issuer:       /CN=4242BEFAB7FD9E772FB16847C540331384EE1024
Certificate serial:       04A73BA837EB6CEAFCB4F867B0335442F4D91FE1
Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa
Signing time:             Sun 03 May 2026 03:15:28 +0000
ROA not before:           Sun 03 May 2026 03:10:28 +0000
ROA not after:            Sun 02 May 2027 03:15:28 +0000
asID:                     9875
IP address blocks:        202.182.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl
                          rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a7:3b:a8:37:eb:6c:ea:fc:b4:f8:67:b0:33:54:42:f4:d9:1f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024
        Validity
            Not Before: May  3 03:10:28 2026 GMT
            Not After : May  2 03:15:28 2027 GMT
        Subject: CN=E8B8CDCE0519394924415233016239E6C2D1C884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e3:59:ca:7a:a2:84:d3:14:a0:8b:bb:2e:d2:
                    fe:9c:be:2a:1f:40:de:9c:a8:63:eb:36:2b:c8:44:
                    aa:af:4b:ff:ed:e1:27:c5:a3:43:b7:23:88:16:7a:
                    c6:d2:e7:19:78:64:51:95:8c:84:c4:85:07:a7:87:
                    6b:68:95:85:50:f6:58:cc:4c:85:7f:6f:6b:9a:14:
                    e0:f8:89:0e:0d:30:41:d5:81:09:26:51:a4:41:0f:
                    67:3a:04:b2:23:4a:19:3c:c9:5f:b2:cd:44:f3:02:
                    76:eb:91:e7:93:44:f9:b3:08:f7:a4:45:e5:2e:d3:
                    63:52:0f:f6:ca:eb:a5:61:7e:19:b4:7d:91:16:1f:
                    b9:84:7a:8e:84:02:1c:a2:e3:a8:43:17:09:a8:d2:
                    dc:bb:86:48:ca:48:8e:1c:5e:63:33:49:4a:fc:7c:
                    b3:bf:25:e7:75:f8:d2:1e:a7:cc:1c:79:fe:11:c2:
                    5e:4c:a3:65:43:88:c6:a8:68:bd:46:30:94:66:e6:
                    a7:f9:25:9b:ac:44:0a:4e:bc:9e:1f:b8:5c:6b:74:
                    d4:44:bf:87:ff:cc:f7:1d:17:11:1b:8f:1d:69:d9:
                    9b:6a:b0:ba:2d:59:56:26:13:96:de:40:28:ef:f3:
                    ee:7e:ed:7e:9d:e8:51:98:6e:46:f5:4e:0a:83:8c:
                    f0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B8:CD:CE:05:19:39:49:24:41:52:33:01:62:39:E6:C2:D1:C8:84
            X509v3 Authority Key Identifier:
                keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.182.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:55:70:de:30:1d:8a:a5:0f:ff:ca:ed:cf:f0:a5:e1:4f:0f:
         26:0a:2c:30:7a:dd:00:6c:fb:6e:dc:ab:78:bc:87:5a:53:64:
         5b:8f:97:7e:96:95:97:a8:2c:11:4d:4c:dd:bc:e2:6a:88:8f:
         8f:40:94:59:17:93:37:68:f8:62:1f:b6:3b:61:b1:0c:14:0e:
         dc:bf:fc:94:2e:b5:df:c5:c6:e9:e2:5f:d9:13:d6:f0:6e:19:
         d0:30:89:65:c2:1f:97:99:0b:cc:78:f5:ef:99:97:db:d0:a9:
         35:9f:6d:c1:b8:43:74:a5:34:33:0e:4f:c9:22:b9:c6:3c:26:
         3a:6c:46:b5:97:15:ea:4f:49:ef:5e:ea:8e:36:33:8f:65:1a:
         d0:ca:d2:83:d4:cc:aa:18:68:84:fc:53:9c:96:9e:4a:c5:be:
         96:f5:d4:ce:9c:fb:45:4e:ea:e9:16:3c:56:0c:9f:19:20:9a:
         fd:0d:87:fc:03:bd:f5:dc:05:0e:7c:56:03:37:c1:c0:2c:4a:
         5f:8e:e7:67:4f:cc:b2:65:d6:af:78:75:89:35:29:b5:91:38:
         76:36:cd:67:23:d4:06:be:36:25:a9:9b:34:aa:39:e9:21:98:
         9f:b1:c6:79:fd:e5:5b:f5:60:48:49:6d:26:31:d0:ec:21:8b:
         65:7d:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:35 2026 by rpki-client