Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136392e302f32342d3234203d3e203338373738.roa
File:                     3230332e3230312e3136392e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          20TuWUM58sw/1KyidpTE9YVRxFoPbo4+Ns8+0+FdEVo=
Subject key identifier:   B4:B4:C4:1C:7D:6B:13:95:67:C3:33:E2:C3:EB:91:33:22:D1:08:40
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       119D3B4B7435839AB2B60170A57062C26FE89DDC
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136392e302f32342d3234203d3e203338373738.roa
Signing time:             Sun 03 May 2026 03:17:15 +0000
ROA not before:           Sun 03 May 2026 03:12:15 +0000
ROA not after:            Sun 02 May 2027 03:17:15 +0000
asID:                     38778
IP address blocks:        203.201.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9d:3b:4b:74:35:83:9a:b2:b6:01:70:a5:70:62:c2:6f:e8:9d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:15 2026 GMT
            Not After : May  2 03:17:15 2027 GMT
        Subject: CN=B4B4C41C7D6B139567C333E2C3EB913322D10840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:60:13:ba:05:0b:99:e3:21:24:67:13:b0:
                    a1:ac:ca:7d:ad:ae:8f:d3:97:23:eb:15:3f:10:a1:
                    d6:35:f3:b8:8a:ce:fd:7a:20:55:fb:64:31:fc:73:
                    f4:26:f5:b6:11:81:80:e1:6d:11:27:25:81:24:a1:
                    04:cf:c1:31:52:a5:8d:cf:88:f9:30:e8:b3:79:47:
                    b3:08:12:c1:8b:1b:3a:aa:e4:b4:c7:20:7f:e7:86:
                    a3:54:1f:cd:90:23:9e:9a:0e:04:9a:85:93:ba:a8:
                    3f:4b:02:3d:db:9b:8e:c7:a2:c2:4b:b4:16:00:06:
                    0f:cf:91:f8:e0:6a:91:ff:1b:90:39:1b:17:9b:06:
                    dd:f9:ac:6b:13:25:2c:f5:64:8e:9e:86:9d:95:e4:
                    ad:bb:90:00:63:e8:a4:db:fd:af:2d:27:90:07:fc:
                    92:1b:b1:80:4b:1d:10:55:bd:ec:6c:62:35:e7:5c:
                    c9:7b:4c:2f:cf:cf:33:77:39:3d:60:5b:a8:fd:59:
                    98:ea:fd:d3:15:f3:ec:33:c3:f2:42:da:73:df:99:
                    56:99:b8:95:f1:4d:18:77:83:43:c2:93:25:cd:f2:
                    27:4b:f9:3a:0b:44:2a:ce:64:19:b9:1a:73:74:46:
                    a7:9d:40:84:54:0e:eb:6f:a1:e7:30:3a:bb:4c:93:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B4:C4:1C:7D:6B:13:95:67:C3:33:E2:C3:EB:91:33:22:D1:08:40
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136392e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:2a:f6:be:33:28:5e:22:5b:e9:ce:4c:ae:fd:f9:84:da:e6:
         07:d8:34:fa:6d:7a:cc:7f:49:bc:e0:fa:9f:e4:45:1e:92:d6:
         44:00:46:c2:71:db:a7:8c:e2:c6:34:7a:81:b9:11:d2:d7:ce:
         40:46:3c:64:aa:aa:d2:8c:73:01:61:7f:fe:fc:26:a3:1c:ef:
         b7:d4:32:6c:50:d2:15:6b:a8:5a:ef:6c:cc:80:21:db:46:68:
         a3:2b:31:7c:2c:da:db:2f:e6:a0:7a:f3:ef:ca:f8:94:57:58:
         5d:e5:bb:db:b8:2e:f2:b8:87:03:0c:10:18:47:ba:19:1e:7e:
         95:db:c5:5f:55:0a:1d:9c:25:b0:c5:33:a4:8a:96:ea:e8:37:
         01:68:f9:69:65:40:e7:63:cc:f8:ef:09:b6:0c:ed:5e:e7:20:
         87:17:02:c1:5a:67:72:36:f1:4f:52:eb:de:6e:ea:bb:19:a4:
         37:cd:89:63:ac:53:ef:46:0c:d4:d7:83:85:d1:d8:00:08:f6:
         4b:f3:29:7f:4f:d3:30:38:08:54:98:46:b3:89:ca:73:c3:41:
         6b:5a:a9:77:ab:75:29:f3:c6:15:3c:56:40:a1:1c:a5:d6:fe:
         3c:d9:bb:b1:f2:0a:f5:e1:3f:37:b6:4a:a4:19:24:82:f5:37:
         c0:28:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:17 2026 by rpki-client