Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31392e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e31392e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          0wiNuueekwE4cMj+v9aajzLQJbLi4Qfd2pHbAMWAFrE=
Subject key identifier:   68:2B:EC:6E:75:4F:C9:08:FE:AD:DA:42:10:8A:11:3A:F7:D5:B9:A5
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       44289A7F90369BA549BD339DECF255AA5D3379D7
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31392e302f32342d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:05 +0000
ROA not before:           Sun 03 May 2026 03:12:05 +0000
ROA not after:            Sun 02 May 2027 03:17:05 +0000
asID:                     9794
IP address blocks:        202.148.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:28:9a:7f:90:36:9b:a5:49:bd:33:9d:ec:f2:55:aa:5d:33:79:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:05 2026 GMT
            Not After : May  2 03:17:05 2027 GMT
        Subject: CN=682BEC6E754FC908FEADDA42108A113AF7D5B9A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:16:95:59:15:2a:88:95:7d:ca:2b:b0:f6:
                    76:d2:b0:1c:5a:7f:f5:1c:7a:91:b2:d6:57:c2:68:
                    8c:17:ea:88:39:6f:7e:ea:56:84:1c:5e:e3:61:70:
                    85:9b:ed:08:14:41:67:35:b0:a2:fc:90:38:30:68:
                    bf:9b:1c:ef:da:08:80:97:39:0b:90:6a:f5:6a:37:
                    d5:5b:66:de:67:b8:2a:3c:bb:4d:23:04:ee:39:33:
                    5f:c6:6a:78:3e:b3:f4:04:14:ce:1c:d6:96:0c:28:
                    ea:f4:e7:df:14:32:c0:6d:b9:fa:72:79:1e:5a:5c:
                    a8:12:b3:dd:8a:f4:f5:94:8b:44:0b:d5:8e:90:f2:
                    3a:e9:70:8a:85:46:96:7d:72:74:5f:20:b6:b7:e2:
                    48:74:18:99:0f:fc:f7:85:17:4b:34:c1:dd:99:72:
                    bc:de:63:f1:11:c1:f6:29:58:8d:d4:2f:0b:09:b0:
                    a7:4d:1a:f5:1c:fd:c2:3b:c5:ac:6e:08:c7:ea:a9:
                    84:34:4a:2d:80:cd:19:7c:93:fd:42:18:b6:41:dd:
                    67:09:d4:cf:76:16:67:ee:98:5d:12:d9:99:50:55:
                    3e:74:cf:29:d2:1d:a6:43:db:d0:ea:a9:7f:a8:e5:
                    d8:58:5a:db:cb:fb:af:8b:dc:cd:6f:73:37:63:dd:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2B:EC:6E:75:4F:C9:08:FE:AD:DA:42:10:8A:11:3A:F7:D5:B9:A5
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31392e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:32:ec:01:fe:cf:ec:78:8a:06:75:c1:8e:39:69:fc:4f:
         b9:25:96:25:6d:7c:8d:02:a0:9f:47:f6:ad:98:bd:fd:6d:1a:
         97:1d:35:30:b5:3c:bb:8f:e6:f5:7e:c2:34:e8:5d:d3:ad:8e:
         8f:0b:9f:67:55:08:48:9a:aa:ea:82:fc:e4:3a:22:15:ce:bb:
         26:2b:b5:0a:a3:7a:04:6d:5a:cb:e6:9b:f5:6e:2b:3a:27:3c:
         3a:9a:76:a7:e5:d8:a2:90:61:5b:bb:d6:b9:52:17:0f:5f:3c:
         b2:93:2d:7b:d0:1c:6a:55:0c:7b:38:84:b5:c6:ce:6e:ff:d0:
         44:93:b2:20:66:25:e0:5e:48:40:e7:1d:35:58:13:ea:df:3f:
         3c:ed:52:38:a1:e9:e7:06:b8:69:63:21:23:7f:d5:fa:8b:ac:
         d3:23:2b:e1:90:93:9d:2d:b8:ea:36:5d:56:b4:36:66:39:f3:
         25:ca:10:0f:b7:f5:96:76:7a:21:f9:7b:bd:ce:9b:30:01:27:
         ec:21:9e:88:ee:a5:1a:16:ec:b3:5b:66:d5:cf:ec:1a:46:42:
         68:d6:9d:ad:68:3d:12:6c:ab:78:1d:8f:1c:38:f0:1d:af:66:
         03:cf:e3:84:29:08:9c:e0:e0:d3:aa:54:82:0f:7d:d0:55:33:
         5a:3d:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:36 2026 by rpki-client