Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa
File:                     3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          A4kpcsQqVoWwVBNEfjq/CynxKvKVE62mleHwZXUsKos=
Subject key identifier:   E5:B4:6B:9C:44:BE:C7:7A:97:D2:49:77:F6:7C:1E:6F:45:96:EA:88
Certificate issuer:       /CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
Certificate serial:       148D9797A29D8657C514A9B32B866CF1980DC95B
Authority key identifier: 0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa
Signing time:             Sun 03 May 2026 03:16:13 +0000
ROA not before:           Sun 03 May 2026 03:11:13 +0000
ROA not after:            Sun 02 May 2027 03:16:13 +0000
asID:                     131775
IP address blocks:        202.74.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl
                          rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8d:97:97:a2:9d:86:57:c5:14:a9:b3:2b:86:6c:f1:98:0d:c9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
        Validity
            Not Before: May  3 03:11:13 2026 GMT
            Not After : May  2 03:16:13 2027 GMT
        Subject: CN=E5B46B9C44BEC77A97D24977F67C1E6F4596EA88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:1b:7a:89:df:7d:cc:3f:e3:ee:18:c4:34:
                    5f:c2:50:ed:22:d8:d6:53:f1:b5:be:08:7e:82:1d:
                    83:ac:f4:38:50:b2:cd:b5:5e:53:a4:5f:34:92:23:
                    5e:f8:2f:51:4a:f4:5d:f3:81:70:8e:24:94:31:78:
                    0a:76:c3:bb:af:c8:f7:8d:dd:7d:94:5f:4a:32:9b:
                    bf:f6:4b:c6:4e:55:0b:e3:d0:1a:09:2f:58:34:52:
                    dc:b7:c0:61:eb:4a:28:d6:4a:95:81:40:e2:07:8e:
                    f3:70:d5:a7:03:3b:86:9b:65:b4:91:95:84:2c:ad:
                    ca:64:8a:ff:8a:de:28:4c:67:3b:40:cf:a8:31:be:
                    a1:46:b7:49:75:f5:77:a5:19:08:58:35:c1:85:24:
                    ba:33:2c:e5:f8:eb:9b:c3:16:c0:79:40:e1:52:a8:
                    ca:f7:84:53:41:aa:07:18:ef:1f:06:2c:34:59:34:
                    89:6f:79:d3:fd:87:ab:e8:ef:8c:24:d7:ff:c6:36:
                    f2:6d:33:f4:22:03:27:8b:a8:a3:b4:7a:55:af:47:
                    77:32:97:24:6a:d5:64:7c:64:30:cc:a2:85:cc:0a:
                    cf:2c:cb:b8:c0:ac:77:69:b7:71:8a:1b:35:9c:0c:
                    5d:94:ce:12:6b:fc:ed:ea:df:34:43:47:0b:58:61:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B4:6B:9C:44:BE:C7:7A:97:D2:49:77:F6:7C:1E:6F:45:96:EA:88
            X509v3 Authority Key Identifier:
                keyid:0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:fc:1c:1c:5b:13:44:05:b3:15:f6:04:ec:5b:4f:c3:25:87:
         4e:6d:ef:7c:8c:46:b0:a3:07:cd:bb:02:79:f6:f0:3d:7f:a0:
         3a:c0:bd:87:ee:33:1e:f2:73:73:c7:0c:a1:c1:f9:36:13:0a:
         09:43:57:f0:4e:a2:6a:42:3b:c3:10:16:1b:35:e8:9a:3a:bd:
         7d:3c:a0:8e:62:c7:44:df:8d:ec:3d:8f:66:6e:2c:6f:10:45:
         07:d8:79:b9:4c:cb:e4:e9:ca:82:e5:89:b9:b5:ff:b0:24:53:
         58:1a:6c:6f:a4:7b:3a:05:2f:84:ef:f4:a9:cf:45:60:cc:e1:
         c7:c2:71:8b:51:d0:5d:5e:e3:97:e6:d2:f5:47:1e:dd:9f:b2:
         ba:36:26:fd:32:32:f6:f5:21:77:72:ac:cc:42:22:58:cd:41:
         3e:ad:8d:8f:11:24:36:51:3c:a8:47:54:a5:0c:0a:e8:46:25:
         b1:14:55:dd:ee:3c:1a:d0:f7:d3:35:0f:ee:37:25:c3:dd:1a:
         0f:82:2e:d5:ab:f0:2e:3b:b2:34:e8:8b:95:66:f9:e4:67:c4:
         8e:68:30:0e:79:44:ff:51:ae:fd:5a:51:8a:07:66:6a:70:fe:
         97:3f:8c:96:6b:9f:95:1f:0b:c7:27:14:9c:1c:68:29:53:46:
         8d:6d:2d:76
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFI2Xl6KdhlfFFKmzK4Zs8ZgNyVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJDQkFGOEREMEI2MzkxRTcxNUIwMTM2M0Q3QzlCQTJE
NTVFM0E2QjAeFw0yNjA1MDMwMzExMTNaFw0yNzA1MDIwMzE2MTNaMDMxMTAvBgNV
BAMTKEU1QjQ2QjlDNDRCRUM3N0E5N0QyNDk3N0Y2N0MxRTZGNDU5NkVBODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Bht6id99zD/j7hjENF/CUO0i
2NZT8bW+CH6CHYOs9DhQss21XlOkXzSSI174L1FK9F3zgXCOJJQxeAp2w7uvyPeN
3X2UX0oym7/2S8ZOVQvj0BoJL1g0Uty3wGHrSijWSpWBQOIHjvNw1acDO4abZbSR
lYQsrcpkiv+K3ihMZztAz6gxvqFGt0l19XelGQhYNcGFJLozLOX465vDFsB5QOFS
qMr3hFNBqgcY7x8GLDRZNIlvedP9h6vo74wk1//GNvJtM/QiAyeLqKO0elWvR3cy
lyRq1WR8ZDDMooXMCs8sy7jArHdpt3GKGzWcDF2UzhJr/O3q3zRDRwtYYVaBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU5bRrnES+x3qX0kl39nweb0WW6ogwHwYDVR0j
BBgwFoAUC8uvjdC2OR5xWwE2PXybotVeOmswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWViOThjZWQtYWYxOC00YmZmLWFkNzEtNzNkMmIwYzlkOGE5LzAvMEJDQkFGOERE
MEI2MzkxRTcxNUIwMTM2M0Q3QzlCQTJENTVFM0E2Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQkNCQUY4REQwQjYzOTFFNzE1QjAxMzYzRDdDOUJBMkQ1NUUz
QTZCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VlYjk4Y2VkLWFmMTgtNGJmZi1h
ZDcxLTczZDJiMGM5ZDhhOS8wLzMyMzAzMjJlMzczNDJlMzIzMzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAykrvMA0GCSqG
SIb3DQEBCwUAA4IBAQA5/BwcWxNEBbMV9gTsW0/DJYdObe98jEawowfNuwJ59vA9
f6A6wL2H7jMe8nNzxwyhwfk2EwoJQ1fwTqJqQjvDEBYbNeiaOr19PKCOYsdE343s
PY9mbixvEEUH2Hm5TMvk6cqC5Ym5tf+wJFNYGmxvpHs6BS+E7/Spz0VgzOHHwnGL
UdBdXuOX5tL1Rx7dn7K6Nib9MjL29SF3cqzMQiJYzUE+rY2PESQ2UTyoR1SlDAro
RiWxFFXd7jwa0PfTNQ/uNyXD3RoPgi7Vq/AuO7I06IuVZvnkZ8SOaDAOeUT/Ua79
WlGKB2ZqcP6XP4yWa5+VHwvHJxScHGgpU0aNbS12
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:33 2026 by rpki-client