Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31342e302f32342d3234203d3e203338373738.roa
File:                     3230322e3134382e31342e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          mSdoEaUmW+sBq++KL+mJrCNdIpXRWsiz5ZxBPSUhtxw=
Subject key identifier:   C9:C2:70:80:04:E8:3D:85:34:68:B0:B8:2C:13:BC:5F:6E:82:FF:F9
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       37288C21E0C59E862AD023CD62B2C5FF66489E65
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31342e302f32342d3234203d3e203338373738.roa
Signing time:             Sun 03 May 2026 03:17:18 +0000
ROA not before:           Sun 03 May 2026 03:12:18 +0000
ROA not after:            Sun 02 May 2027 03:17:18 +0000
asID:                     38778
IP address blocks:        202.148.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:28:8c:21:e0:c5:9e:86:2a:d0:23:cd:62:b2:c5:ff:66:48:9e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:18 2026 GMT
            Not After : May  2 03:17:18 2027 GMT
        Subject: CN=C9C2708004E83D853468B0B82C13BC5F6E82FFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:b7:1f:74:9e:fe:29:01:28:bf:f1:ef:59:
                    43:d7:99:8f:b8:14:8a:01:ef:7f:a0:6a:86:8e:2c:
                    eb:ce:28:f0:4a:a2:75:c5:d8:2a:41:53:e0:04:cf:
                    96:8b:be:91:ad:5a:5d:a0:22:be:f7:19:a3:74:e7:
                    ed:21:63:8d:54:34:95:d4:d2:8e:4b:c6:63:e7:c3:
                    fe:a6:22:4c:e6:9b:69:dd:cd:8c:30:be:21:e6:0f:
                    84:85:b9:66:94:75:ab:2b:91:fe:7f:a3:fc:7a:c1:
                    e5:f6:5f:4e:6d:ab:94:d8:30:e7:45:90:6a:52:9f:
                    ef:78:86:32:4e:7e:f4:dd:c6:e4:ce:f0:e6:3b:83:
                    b6:0c:38:30:55:05:47:2d:dc:b9:8c:27:34:3e:bc:
                    46:ad:4b:7d:9a:e9:c9:08:bd:60:af:c2:69:70:b0:
                    9b:e4:4f:35:d8:91:88:7c:c8:50:58:73:55:f2:02:
                    f2:0b:97:12:6a:84:05:3c:5a:01:2a:30:4c:f5:33:
                    b8:54:b4:cb:19:96:f2:5e:35:9f:d8:e3:18:15:a7:
                    4e:ed:68:dd:61:c1:31:87:d5:94:f9:61:d0:ea:25:
                    9d:4a:f0:2c:41:56:00:b1:01:17:73:85:63:ef:18:
                    f0:69:68:f3:65:f1:44:7a:71:21:63:75:6f:1d:07:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C2:70:80:04:E8:3D:85:34:68:B0:B8:2C:13:BC:5F:6E:82:FF:F9
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31342e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:5f:be:ff:89:f4:e6:1c:f6:bd:c3:1d:67:4d:be:3b:ac:1f:
         82:bc:e9:d1:e5:e5:bf:60:01:0b:3f:45:00:e1:60:3e:00:60:
         5e:1a:8d:73:94:76:9a:db:d0:14:b9:97:fa:70:57:d0:54:e6:
         39:31:92:09:90:90:af:eb:b2:02:6e:1a:81:85:28:b5:d7:e8:
         29:4a:dc:c6:5d:c9:0d:a6:d4:ec:6a:2c:1a:e7:4c:f2:89:46:
         83:46:ea:a6:f0:00:fe:0f:e4:11:b2:79:cc:b2:8c:b6:b2:01:
         f7:8e:91:a2:2e:b2:fb:c3:b8:3e:b9:dd:fe:3f:ca:08:78:b2:
         fd:f0:d1:d6:db:df:71:37:0e:19:10:9a:22:27:95:85:3a:58:
         f9:e2:c1:e4:5d:fe:3f:5b:d0:6e:54:9c:f3:2a:29:83:e0:03:
         e6:41:53:a1:79:10:7e:75:6d:9b:fd:a0:83:f4:45:24:3b:25:
         07:12:1d:e0:60:8a:3c:65:87:db:b9:e0:ae:a5:b0:8b:9f:40:
         5d:cb:e0:dc:c1:36:4d:fa:07:4c:0a:2d:79:bd:7a:b9:62:a2:
         9d:92:ca:44:26:6e:c1:b6:7a:43:0a:76:49:37:70:aa:07:05:
         bd:be:ee:58:e0:66:af:66:74:6c:2f:3e:87:45:a5:ea:55:d8:
         9b:e6:82:d5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNyiMIeDFnoYq0CPNYrLF/2ZInmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMThaFw0yNzA1MDIwMzE3MThaMDMxMTAvBgNV
BAMTKEM5QzI3MDgwMDRFODNEODUzNDY4QjBCODJDMTNCQzVGNkU4MkZGRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6bcfdJ7+KQEov/HvWUPXmY+4
FIoB73+gaoaOLOvOKPBKonXF2CpBU+AEz5aLvpGtWl2gIr73GaN05+0hY41UNJXU
0o5LxmPnw/6mIkzmm2ndzYwwviHmD4SFuWaUdasrkf5/o/x6weX2X05tq5TYMOdF
kGpSn+94hjJOfvTdxuTO8OY7g7YMODBVBUct3LmMJzQ+vEatS32a6ckIvWCvwmlw
sJvkTzXYkYh8yFBYc1XyAvILlxJqhAU8WgEqMEz1M7hUtMsZlvJeNZ/Y4xgVp07t
aN1hwTGH1ZT5YdDqJZ1K8CxBVgCxARdzhWPvGPBpaPNl8UR6cSFjdW8dB2ATAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUycJwgAToPYU0aLC4LBO8X26C//kwHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqUDjANBgkqhkiG
9w0BAQsFAAOCAQEAAV++/4n05hz2vcMdZ02+O6wfgrzp0eXlv2ABCz9FAOFgPgBg
XhqNc5R2mtvQFLmX+nBX0FTmOTGSCZCQr+uyAm4agYUotdfoKUrcxl3JDabU7Gos
GudM8olGg0bqpvAA/g/kEbJ5zLKMtrIB946Roi6y+8O4Prnd/j/KCHiy/fDR1tvf
cTcOGRCaIieVhTpY+eLB5F3+P1vQblSc8yopg+AD5kFToXkQfnVtm/2gg/RFJDsl
BxId4GCKPGWH27ngrqWwi59AXcvg3ME2TfoHTAoteb16uWKinZLKRCZuwbZ6Qwp2
STdwqgcFvb7uWOBmr2Z0bC8+h0Wl6lXYm+aC1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 01:45:05 2026 by rpki-client