Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa
File:                     3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (raw, json)
Hash identifier:          Ht0VezJ4KIWCDr66hCxSQYWb1Dq0K65XBemGOv1TcQc=
Subject key identifier:   49:2D:61:D1:51:AB:DA:1C:AF:D9:1A:1B:12:0F:61:99:9E:63:0F:91
Certificate issuer:       /CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
Certificate serial:       4EA1D7213C23A3E1082B54424BBB586E7C830798
Authority key identifier: 0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa
Signing time:             Sun 03 May 2026 03:16:12 +0000
ROA not before:           Sun 03 May 2026 03:11:12 +0000
ROA not after:            Sun 02 May 2027 03:16:12 +0000
asID:                     131775
IP address blocks:        202.74.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl
                          rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a1:d7:21:3c:23:a3:e1:08:2b:54:42:4b:bb:58:6e:7c:83:07:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
        Validity
            Not Before: May  3 03:11:12 2026 GMT
            Not After : May  2 03:16:12 2027 GMT
        Subject: CN=492D61D151ABDA1CAFD91A1B120F61999E630F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:9d:df:a7:fb:82:ef:eb:e2:9c:54:2c:6c:
                    4a:a6:32:e7:50:00:90:f7:ec:d7:22:12:85:1b:38:
                    d4:ac:be:87:13:71:2b:f7:11:d5:82:40:a3:aa:89:
                    4a:26:bc:74:ae:3a:9b:b9:cf:1b:c7:20:96:b6:f6:
                    0e:49:18:0c:b9:9f:97:f3:bf:c7:53:5f:92:42:dd:
                    a6:9a:76:7d:32:2c:6a:02:18:6d:33:13:27:48:64:
                    2f:b9:d5:38:14:38:9f:33:8e:72:a1:8d:b7:5a:ec:
                    52:8e:40:d4:b1:4b:c8:f3:16:1d:eb:77:f2:e7:7a:
                    02:60:5c:06:f7:1a:c5:49:4c:c2:f2:36:16:7c:74:
                    25:53:b9:36:ba:61:bf:f6:f4:e6:66:3a:7c:58:70:
                    43:79:68:80:87:76:2c:89:b1:f0:ca:ed:74:f7:c8:
                    d7:23:3e:53:9e:ad:de:ec:ea:65:e7:69:97:f3:fc:
                    3a:4b:a5:88:2b:90:d0:94:5e:ba:a9:f6:eb:5b:d3:
                    2e:13:b5:fb:cf:99:2b:39:62:c9:c5:5d:a8:ff:00:
                    18:aa:42:6a:75:5f:8a:99:c9:34:f9:3d:33:ba:7a:
                    6d:28:8a:c2:90:67:55:f2:70:eb:f8:a4:41:42:3d:
                    c3:39:01:6e:17:2f:39:1d:61:0b:4d:58:bc:39:0a:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2D:61:D1:51:AB:DA:1C:AF:D9:1A:1B:12:0F:61:99:9E:63:0F:91
            X509v3 Authority Key Identifier:
                keyid:0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:68:33:2d:8a:6f:5f:0e:f7:39:f5:a1:bc:0a:c8:dc:a6:4e:
         42:45:18:b6:1c:2d:d9:6e:16:ae:da:4f:25:2b:23:56:91:34:
         a5:ff:d0:f8:17:75:39:c5:36:2d:07:e6:1e:9b:62:7e:06:ed:
         d6:39:97:5e:29:b1:2b:81:29:ce:2b:6c:b9:c7:a6:fd:d0:a5:
         ea:ac:83:03:e6:ab:ec:99:b1:8f:0b:a3:1a:dd:8c:07:9f:f4:
         4a:ea:66:2b:b7:69:b7:e5:36:1f:97:1b:73:e6:1b:06:30:ad:
         57:de:bd:be:b2:6c:ed:03:23:d4:76:0d:df:4b:48:bf:b6:b5:
         72:31:a5:8a:9c:48:8d:2c:68:47:90:e5:d2:dc:06:8f:7b:8a:
         9d:57:40:b7:20:23:9e:65:54:40:31:d9:3e:a8:bd:08:dc:f9:
         2c:da:0c:e5:b3:c3:98:15:71:15:5a:84:e3:16:af:55:39:0d:
         33:c5:82:af:3f:79:4b:ff:96:e7:73:04:8f:a9:f8:cd:71:3b:
         34:1b:b5:f5:a5:e6:bd:d4:53:e6:d8:16:a7:c9:95:33:96:6d:
         0b:4f:ff:4d:58:7c:3e:42:d3:c3:3d:88:8c:95:32:ea:2e:eb:
         93:5a:9d:19:b3:31:8f:29:aa:5e:54:6b:9a:93:51:0f:6c:7e:
         68:7f:a9:a4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTqHXITwjo+EIK1RCS7tYbnyDB5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJDQkFGOEREMEI2MzkxRTcxNUIwMTM2M0Q3QzlCQTJE
NTVFM0E2QjAeFw0yNjA1MDMwMzExMTJaFw0yNzA1MDIwMzE2MTJaMDMxMTAvBgNV
BAMTKDQ5MkQ2MUQxNTFBQkRBMUNBRkQ5MUExQjEyMEY2MTk5OUU2MzBGOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hJ3fp/uC7+vinFQsbEqmMudQ
AJD37NciEoUbONSsvocTcSv3EdWCQKOqiUomvHSuOpu5zxvHIJa29g5JGAy5n5fz
v8dTX5JC3aaadn0yLGoCGG0zEydIZC+51TgUOJ8zjnKhjbda7FKOQNSxS8jzFh3r
d/LnegJgXAb3GsVJTMLyNhZ8dCVTuTa6Yb/29OZmOnxYcEN5aICHdiyJsfDK7XT3
yNcjPlOerd7s6mXnaZfz/DpLpYgrkNCUXrqp9utb0y4TtfvPmSs5YsnFXaj/ABiq
Qmp1X4qZyTT5PTO6em0oisKQZ1XycOv4pEFCPcM5AW4XLzkdYQtNWLw5CkX9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSS1h0VGr2hyv2RobEg9hmZ5jD5EwHwYDVR0j
BBgwFoAUC8uvjdC2OR5xWwE2PXybotVeOmswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWViOThjZWQtYWYxOC00YmZmLWFkNzEtNzNkMmIwYzlkOGE5LzAvMEJDQkFGOERE
MEI2MzkxRTcxNUIwMTM2M0Q3QzlCQTJENTVFM0E2Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQkNCQUY4REQwQjYzOTFFNzE1QjAxMzYzRDdDOUJBMkQ1NUUz
QTZCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VlYjk4Y2VkLWFmMTgtNGJmZi1h
ZDcxLTczZDJiMGM5ZDhhOS8wLzMyMzAzMjJlMzczNDJlMzIzMzM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzMxMzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBykruMA0GCSqG
SIb3DQEBCwUAA4IBAQAwaDMtim9fDvc59aG8Csjcpk5CRRi2HC3Zbhau2k8lKyNW
kTSl/9D4F3U5xTYtB+Yem2J+Bu3WOZdeKbErgSnOK2y5x6b90KXqrIMD5qvsmbGP
C6Ma3YwHn/RK6mYrt2m35TYflxtz5hsGMK1X3r2+smztAyPUdg3fS0i/trVyMaWK
nEiNLGhHkOXS3AaPe4qdV0C3ICOeZVRAMdk+qL0I3Pks2gzls8OYFXEVWoTjFq9V
OQ0zxYKvP3lL/5bncwSPqfjNcTs0G7X1pea91FPm2BanyZUzlm0LT/9NWHw+QtPD
PYiMlTLqLuuTWp0ZszGPKapeVGuak1EPbH5of6mk
-----END CERTIFICATE-----
Generated at Wed May 13 02:18:58 2026 by rpki-client