Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e33302e302f32332d3233203d3e203338373738.roa
File:                     3230322e3134382e33302e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier:          xEvr8s8rqjF6EI+oXmoTGv10aTY9v4wsntQaRl2E6Is=
Subject key identifier:   0E:60:DB:AA:D3:18:96:02:1F:14:8F:8F:49:A1:61:70:90:DB:51:8C
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       489F11652781FE935658299072AE5543CF9B2B25
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e33302e302f32332d3233203d3e203338373738.roa
Signing time:             Sun 03 May 2026 03:17:12 +0000
ROA not before:           Sun 03 May 2026 03:12:12 +0000
ROA not after:            Sun 02 May 2027 03:17:12 +0000
asID:                     38778
IP address blocks:        202.148.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9f:11:65:27:81:fe:93:56:58:29:90:72:ae:55:43:cf:9b:2b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:12 2026 GMT
            Not After : May  2 03:17:12 2027 GMT
        Subject: CN=0E60DBAAD31896021F148F8F49A1617090DB518C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:d2:39:f5:d8:cc:08:65:6d:2a:b6:b5:ba:
                    98:08:c0:9d:85:c0:82:b9:1f:02:04:8a:d9:3d:f8:
                    88:3a:79:73:88:c7:46:69:fa:a5:ba:52:4a:bc:56:
                    7f:ad:42:28:f4:66:bd:4d:3b:61:a7:1e:2a:b0:e2:
                    6f:ce:17:5d:70:d8:6f:28:e0:a7:78:a3:3c:f5:79:
                    6c:b1:a4:25:f2:76:bb:76:57:9e:25:c1:2e:4d:fc:
                    54:89:3b:5f:33:1f:5a:2d:35:da:ae:e3:a7:cf:9d:
                    f4:d4:8f:e0:5e:0c:02:be:c7:7e:79:af:d3:b2:e4:
                    11:9a:84:9a:31:50:d3:dd:61:b0:76:ee:f5:f9:50:
                    fa:38:c3:95:ca:92:f5:fd:90:86:9b:bd:28:6a:64:
                    aa:78:a6:05:48:23:1a:81:c8:ec:f0:b9:f9:b9:c8:
                    aa:06:29:bd:6a:1c:57:0d:75:d7:2a:55:05:da:d0:
                    ce:22:a8:1e:30:30:22:79:c1:ee:5f:3e:d1:6d:b9:
                    16:7b:24:fa:e8:4b:01:dc:77:e7:53:8a:0c:f9:74:
                    17:62:b5:ae:3a:51:72:87:a5:8a:5d:c4:be:00:f2:
                    a3:fe:da:f6:7f:65:24:cf:e2:31:6f:65:6e:85:4f:
                    17:57:b5:54:8c:6a:f6:69:f5:de:03:6e:0a:db:7f:
                    cd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:60:DB:AA:D3:18:96:02:1F:14:8F:8F:49:A1:61:70:90:DB:51:8C
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e33302e302f32332d3233203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:93:7b:fa:71:dc:ba:37:8d:9a:3c:bd:0f:a8:51:10:c1:
         47:41:8a:61:66:59:34:00:2a:4e:98:14:12:21:fa:e7:87:2f:
         37:9a:24:1a:cf:72:a2:7c:65:db:b1:92:3d:ad:a9:1a:ef:3f:
         d3:fb:c8:78:c9:cd:54:b3:9c:47:9f:fd:c5:70:d0:25:5e:94:
         a9:88:47:33:46:14:03:59:dc:83:ea:d5:07:a2:f4:50:ad:94:
         5e:01:6f:53:53:f3:1d:bf:8f:24:99:43:f3:0a:88:9c:03:ba:
         f8:e1:18:1d:de:d7:d9:d0:c5:76:cf:89:0a:08:2b:04:7a:37:
         2d:e3:87:ee:c8:c0:e7:f9:22:bd:93:0d:f1:01:e4:8f:eb:45:
         1a:6b:6a:f9:2f:63:d0:9a:9d:21:0e:bb:6d:bc:c5:b7:53:59:
         f1:83:2e:ce:99:6c:2d:29:41:ff:9e:bd:7d:6b:64:24:ed:12:
         7d:38:9f:79:e6:ac:cc:b8:31:f8:99:5d:e9:cd:b4:44:f4:6c:
         04:88:9e:7f:f4:b6:df:65:79:0e:05:90:12:3f:9f:69:a1:cb:
         aa:77:88:fa:8d:3e:d3:20:ce:77:67:a1:a9:e2:3b:c4:c9:ac:
         c3:fa:10:b6:b2:83:ea:a4:fa:d3:5a:3e:14:38:6a:30:11:90:
         2b:80:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:04 2026 by rpki-client