Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa
File:                     3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (raw, json)
Hash identifier:          5cRboxzFOLvbyc9aSM3Coqx837mIFEIAXFoJ+a6/PqQ=
Subject key identifier:   EA:14:83:EB:07:04:B0:FF:5C:EC:67:7C:33:4B:D8:1E:36:2B:A5:1F
Certificate issuer:       /CN=4242BEFAB7FD9E772FB16847C540331384EE1024
Certificate serial:       4EB109E3E62428AE805F9D601B4CE6F02DB826C8
Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa
Signing time:             Sun 03 May 2026 03:15:32 +0000
ROA not before:           Sun 03 May 2026 03:10:32 +0000
ROA not after:            Sun 02 May 2027 03:15:32 +0000
asID:                     58478
IP address blocks:        202.182.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl
                          rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b1:09:e3:e6:24:28:ae:80:5f:9d:60:1b:4c:e6:f0:2d:b8:26:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024
        Validity
            Not Before: May  3 03:10:32 2026 GMT
            Not After : May  2 03:15:32 2027 GMT
        Subject: CN=EA1483EB0704B0FF5CEC677C334BD81E362BA51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:1b:1b:85:51:67:b6:8f:12:fe:d4:31:43:
                    a6:4f:55:17:da:2c:0a:d9:d0:3c:46:66:8f:8c:43:
                    c0:98:28:ec:93:90:51:ac:c0:38:8e:a5:76:8e:59:
                    43:68:87:df:49:4f:06:1b:88:ea:eb:fc:4b:5a:32:
                    da:5e:cd:a5:fd:52:8c:c4:54:69:df:de:39:a7:e6:
                    b3:cb:e7:0b:6e:14:cf:51:89:85:94:d6:1e:db:ef:
                    2a:d9:f6:81:9c:f5:3b:38:eb:49:1d:c4:ef:18:62:
                    71:61:43:39:40:74:0a:e7:fb:31:8c:78:20:cb:fc:
                    7d:3b:d6:4c:c5:fe:31:b6:94:d5:b8:be:c4:f7:82:
                    18:58:b4:a9:30:57:d6:26:dd:b5:b2:b9:0a:93:c6:
                    bb:c8:31:77:a6:4c:87:74:80:43:2c:98:1c:61:9a:
                    b3:7d:f8:38:d1:7b:5c:32:86:4a:b1:b2:51:38:17:
                    1a:6d:9a:6a:fb:b7:b9:39:52:4d:3c:38:90:74:b2:
                    48:6f:f1:28:9a:a1:19:bf:b8:3d:0e:5d:b8:cc:3c:
                    20:13:fb:b9:5f:ab:5f:09:c5:84:6e:64:aa:55:b0:
                    e7:af:5c:57:eb:62:16:04:0c:c1:07:ad:46:02:d1:
                    a8:d4:6d:53:32:5b:34:ee:77:3b:29:1f:21:56:55:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:14:83:EB:07:04:B0:FF:5C:EC:67:7C:33:4B:D8:1E:36:2B:A5:1F
            X509v3 Authority Key Identifier:
                keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.182.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:84:ef:80:8c:23:98:53:30:f9:ee:bc:44:7c:01:40:d5:
         d6:86:84:23:7f:c0:3b:02:8c:47:2b:5b:05:cb:27:15:62:6c:
         18:96:af:40:a9:5a:ec:ee:3b:3a:a6:e2:b1:e5:54:e0:30:43:
         c6:5e:4c:33:3f:0a:40:dc:46:11:62:a2:1e:3c:dc:0d:bf:5f:
         05:e3:15:d5:57:91:ed:be:bb:80:47:e9:d7:3f:b5:2a:e0:d9:
         16:a5:96:8a:a2:c1:9a:12:7a:8c:e1:7f:d4:e3:f6:da:4c:eb:
         98:5d:b9:31:67:99:ea:13:c8:9c:89:72:28:33:89:24:06:74:
         1c:ea:37:5e:9b:8c:07:26:0f:b7:f2:ab:8e:b3:57:52:65:72:
         c6:76:32:13:4f:24:53:48:f9:92:5d:7e:7e:a8:7f:69:99:ae:
         d2:e9:f2:af:5e:e0:98:9c:fa:0b:7e:0a:08:49:a3:6c:2c:be:
         7e:e8:9f:10:dd:fa:19:8a:6f:50:8f:6b:fe:14:0d:41:b5:7e:
         0c:40:f5:9a:27:56:1e:6f:b3:18:bb:00:42:67:1b:76:6a:7f:
         00:ef:43:2d:3d:39:b4:cd:30:0b:2b:da:cc:4b:18:07:27:ae:
         d6:41:01:31:32:e3:4e:99:31:50:6b:2a:d3:20:9e:07:41:93:
         f6:f8:5a:13
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTrEJ4+YkKK6AX51gG0zm8C24JsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4
NEVFMTAyNDAeFw0yNjA1MDMwMzEwMzJaFw0yNzA1MDIwMzE1MzJaMDMxMTAvBgNV
BAMTKEVBMTQ4M0VCMDcwNEIwRkY1Q0VDNjc3QzMzNEJEODFFMzYyQkE1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFhsbhVFnto8S/tQxQ6ZPVRfa
LArZ0DxGZo+MQ8CYKOyTkFGswDiOpXaOWUNoh99JTwYbiOrr/EtaMtpezaX9UozE
VGnf3jmn5rPL5wtuFM9RiYWU1h7b7yrZ9oGc9Ts460kdxO8YYnFhQzlAdArn+zGM
eCDL/H071kzF/jG2lNW4vsT3ghhYtKkwV9Ym3bWyuQqTxrvIMXemTId0gEMsmBxh
mrN9+DjRe1wyhkqxslE4Fxptmmr7t7k5Uk08OJB0skhv8SiaoRm/uD0OXbjMPCAT
+7lfq18JxYRuZKpVsOevXFfrYhYEDMEHrUYC0ajUbVMyWzTudzspHyFWVVTnAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6hSD6wcEsP9c7Gd8M0vYHjYrpR8wHwYDVR0j
BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC
N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx
MDI0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i
ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMjJlMzEzODMyMmUzMTM3MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyraxMA0GCSqG
SIb3DQEBCwUAA4IBAQB5sITvgIwjmFMw+e68RHwBQNXWhoQjf8A7AoxHK1sFyycV
YmwYlq9AqVrs7js6puKx5VTgMEPGXkwzPwpA3EYRYqIePNwNv18F4xXVV5HtvruA
R+nXP7Uq4NkWpZaKosGaEnqM4X/U4/baTOuYXbkxZ5nqE8iciXIoM4kkBnQc6jde
m4wHJg+38quOs1dSZXLGdjITTyRTSPmSXX5+qH9pma7S6fKvXuCYnPoLfgoISaNs
LL5+6J8Q3foZim9Qj2v+FA1BtX4MQPWaJ1Yeb7MYuwBCZxt2an8A70MtPTm0zTAL
K9rMSxgHJ67WQQExMuNOmTFQayrTIJ4HQZP2+FoT
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:08 2026 by rpki-client