Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa
File:                     3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          NEoGfXQmVVGaL+eNWw8TNLoGMQBJyGP/40l7SQqi9YU=
Subject key identifier:   A4:F9:01:97:5B:93:A6:36:F4:8C:44:04:05:BA:61:58:D3:8C:0E:0E
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       69E907AC4E2332F86B00D1FD57E0F66FD6EC4521
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:02 +0000
ROA not before:           Sun 03 May 2026 03:12:02 +0000
ROA not after:            Sun 02 May 2027 03:17:02 +0000
asID:                     9794
IP address blocks:        203.201.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e9:07:ac:4e:23:32:f8:6b:00:d1:fd:57:e0:f6:6f:d6:ec:45:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:02 2026 GMT
            Not After : May  2 03:17:02 2027 GMT
        Subject: CN=A4F901975B93A636F48C440405BA6158D38C0E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:35:ca:c7:41:b6:c0:d7:8a:d1:b0:30:fd:75:
                    a8:9f:02:90:78:c2:ef:7a:39:f0:ef:d8:ca:b7:d2:
                    46:92:cc:96:6f:3d:95:c2:1c:ef:67:79:f8:fa:ea:
                    5a:1e:87:a4:bb:7a:81:5e:d9:ec:8f:8d:2b:6e:19:
                    88:14:e2:11:8b:32:bb:d9:18:77:64:6f:37:af:d6:
                    3c:44:75:49:63:2b:9b:b5:5e:02:d2:49:5d:54:ca:
                    d8:5e:5a:1a:3b:c5:cb:00:d1:6f:c0:50:b6:69:d4:
                    8c:6a:84:73:d9:97:75:df:7d:38:08:94:54:6c:69:
                    c0:b6:45:32:cc:e6:ae:00:82:d6:98:5c:a5:01:8b:
                    ce:3a:a5:81:ea:4a:8c:61:40:38:b9:d5:28:19:e9:
                    51:9f:3e:7f:8f:ef:71:d9:c4:54:a0:c3:95:1e:ac:
                    48:b4:04:7d:6a:14:69:be:fa:fb:8e:38:e1:3d:50:
                    eb:e5:86:3c:30:39:1d:02:df:e9:ab:1d:78:ef:b9:
                    28:31:61:b8:ec:e3:a1:05:39:d7:93:84:8c:f2:42:
                    dc:56:70:18:c0:60:f5:0f:ff:02:00:18:36:f9:d7:
                    66:a9:78:87:8c:fc:85:02:1b:93:3d:17:1b:37:9e:
                    78:8a:89:e2:b7:7e:69:67:60:16:7a:09:d6:1a:01:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F9:01:97:5B:93:A6:36:F4:8C:44:04:05:BA:61:58:D3:8C:0E:0E
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:fc:31:6b:0b:f0:5d:e8:be:15:52:49:85:32:f1:ca:76:06:
         a1:9e:47:dc:0f:23:11:97:9d:d0:28:2a:fe:55:9d:06:e2:cb:
         d0:c6:78:18:1c:11:82:e5:c3:22:55:27:cd:1a:9d:de:fe:7e:
         a3:0f:6d:6d:ca:0a:c4:6a:79:72:55:f5:5b:51:89:be:88:79:
         5f:56:9f:e8:ab:14:fe:a1:2c:dd:9d:fc:45:2d:82:ae:2e:77:
         aa:ce:a1:b7:7c:16:d2:ca:73:27:98:c2:5f:05:a2:df:6d:fe:
         19:c3:ce:a6:b8:a9:ed:73:88:21:10:60:27:7c:6e:b3:dc:59:
         0f:35:fb:f6:df:8f:4c:d8:c7:68:f0:c3:ea:e6:96:e2:71:72:
         01:8b:63:dd:5b:68:7d:c6:95:51:09:1d:33:71:30:dc:4a:81:
         71:9b:55:73:4f:8b:d5:69:3f:59:6d:f8:87:17:ec:de:05:cd:
         18:93:43:47:58:5c:93:ec:d8:3f:6d:38:91:aa:c0:b3:5f:e0:
         03:a8:58:5b:e3:7f:19:1c:82:98:5f:bb:7d:47:ae:37:a9:75:
         35:ef:97:27:f9:e7:5b:af:f2:74:e6:fb:95:3e:42:06:6e:33:
         72:b7:c1:37:da:41:c9:53:eb:f9:0c:50:06:37:32:d5:a6:7b:
         dd:cb:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:54 2026 by rpki-client