Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136362e302f32342d3234203d3e2039373934.roa
File:                     3230332e3230312e3136362e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          hu5zbIYyfN0IQbfkjvaTZqz7qUKwxnNaR+u8PZzlyRI=
Subject key identifier:   E6:70:F1:20:A6:E5:CF:94:33:6E:34:6D:22:A5:98:20:DB:B3:16:0B
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       6CDA5A6362EEDB52B4AEC6910686B7D54E38AAA4
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136362e302f32342d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:26 +0000
ROA not before:           Sun 03 May 2026 03:12:26 +0000
ROA not after:            Sun 02 May 2027 03:17:26 +0000
asID:                     9794
IP address blocks:        203.201.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:da:5a:63:62:ee:db:52:b4:ae:c6:91:06:86:b7:d5:4e:38:aa:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:26 2026 GMT
            Not After : May  2 03:17:26 2027 GMT
        Subject: CN=E670F120A6E5CF94336E346D22A59820DBB3160B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:c1:89:23:16:f4:e2:bd:80:92:90:c6:3a:
                    1e:9d:f3:8d:04:7f:c3:b5:64:93:58:57:1b:2d:48:
                    26:93:ad:a4:41:d8:03:cf:22:5b:56:d8:70:5d:6a:
                    f5:21:a7:cf:fb:2e:31:46:bd:2f:96:6a:ac:b4:66:
                    fd:cf:d4:b6:9a:a1:b5:58:2a:10:ec:7d:5a:99:29:
                    10:a3:a4:b6:28:54:94:c9:ec:99:25:2c:8b:c5:b0:
                    ee:44:a5:8a:66:ec:0e:3c:ea:5b:df:47:d2:90:30:
                    74:a8:02:6a:54:85:4d:5e:05:f8:c4:31:7c:53:9f:
                    e5:34:92:78:fe:47:09:52:9f:e1:22:25:da:55:9f:
                    57:4d:b6:3e:71:f9:8c:61:9d:3a:50:a3:24:f0:25:
                    c1:43:8d:48:04:d2:d8:21:04:8a:c7:c1:1b:50:eb:
                    16:6b:c2:d0:d0:47:7d:e3:78:3b:b6:cd:0c:d5:9f:
                    db:e0:e3:c6:af:44:c8:c0:61:52:92:e2:74:a9:74:
                    ee:e8:8b:46:e5:52:84:fe:1c:92:a7:f1:7b:14:f7:
                    62:63:ae:ed:94:bb:cb:5a:47:fc:99:1e:6c:31:9c:
                    3f:b7:f7:a6:21:98:83:66:ec:49:93:7c:80:29:de:
                    af:c8:5f:f9:48:ab:41:07:99:f0:f0:a9:c8:bb:0d:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:70:F1:20:A6:E5:CF:94:33:6E:34:6D:22:A5:98:20:DB:B3:16:0B
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136362e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:f8:9b:f6:3b:2b:d3:41:4a:09:01:09:74:de:82:27:c9:34:
         4f:66:27:55:1b:ee:66:66:3b:36:7a:ad:8e:f6:8f:f9:73:fe:
         f4:25:d7:29:1f:eb:58:70:3b:ef:4e:d2:c1:0c:86:bd:b6:2d:
         d3:8c:71:0c:f3:5a:65:dd:25:69:ae:a3:eb:9b:7b:eb:17:46:
         e6:5f:62:0c:18:55:6f:3c:55:fe:5e:4a:0e:9d:99:e0:8c:3e:
         91:19:8e:0f:79:54:0a:71:ef:4f:3c:9c:2e:18:e5:0b:5c:85:
         21:f0:71:f7:46:6a:f3:64:a8:d7:fe:7a:18:4b:f8:b4:5e:60:
         c8:cf:c0:6a:18:56:c3:2e:86:8a:de:1a:36:2a:02:1c:28:51:
         20:aa:8d:88:d0:21:c7:02:81:e0:1d:7d:36:d6:87:01:b8:5f:
         56:64:c5:4c:e0:98:dc:76:d5:13:1c:f7:f7:f4:93:74:88:9c:
         d9:7d:1b:f6:6d:ad:b7:b7:f3:76:c0:bc:73:eb:ef:bd:1b:a1:
         3d:a9:b1:0a:44:be:35:df:ed:b3:76:97:0b:ea:9c:06:3d:21:
         d1:9a:62:d2:ff:45:57:b9:72:1a:b9:7c:0a:99:84:0a:5f:6e:
         95:59:ea:e7:bd:27:15:83:a5:05:63:a4:4c:a7:83:31:6a:70:
         8b:f8:3d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:32 2026 by rpki-client