Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/3230322e38302e3131322e302f32302d3234203d3e203233363939.roa
File:                     3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (raw, json)
Hash identifier:          wEY2lF+B/+lmh7kliYB2g0xWo++JPQxi7UmnAblWHes=
Subject key identifier:   3D:17:47:FC:26:14:59:2F:23:36:4B:B8:91:37:6D:AC:38:63:D3:54
Certificate issuer:       /CN=0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F
Certificate serial:       017B8948C11B9ECB7B7DCD800506D4755D52F655
Authority key identifier: 0C:56:F3:DD:AD:22:0A:B9:DC:E7:B0:A6:96:ED:44:CE:77:BD:57:0F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/3230322e38302e3131322e302f32302d3234203d3e203233363939.roa
Signing time:             Sun 03 May 2026 03:17:29 +0000
ROA not before:           Sun 03 May 2026 03:12:29 +0000
ROA not after:            Sun 02 May 2027 03:17:29 +0000
asID:                     23699
IP address blocks:        202.80.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.crl
                          rsync://rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7b:89:48:c1:1b:9e:cb:7b:7d:cd:80:05:06:d4:75:5d:52:f6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F
        Validity
            Not Before: May  3 03:12:29 2026 GMT
            Not After : May  2 03:17:29 2027 GMT
        Subject: CN=3D1747FC2614592F23364BB891376DAC3863D354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:52:6b:3a:21:ae:db:0b:5a:c6:c4:88:83:
                    c5:dd:52:d5:be:48:19:e8:31:ca:9e:b5:92:7c:74:
                    26:fe:c4:9b:75:41:fd:8e:85:c4:fe:e1:ec:a8:93:
                    a2:5e:f4:f4:01:d0:b5:d2:c9:f1:3c:32:c4:a9:e3:
                    fb:7e:a8:47:07:c3:af:13:8e:9a:0e:8c:fa:2b:22:
                    d6:8a:c1:4c:9f:16:24:d1:ee:11:7d:f0:03:20:88:
                    4e:40:db:58:21:61:85:79:d2:ce:e1:8d:c9:15:16:
                    00:b8:56:0e:b2:94:fa:43:bb:bf:00:2b:ac:09:af:
                    65:b3:83:4e:fd:d2:08:91:86:29:d3:3b:ee:45:4f:
                    ea:bf:d6:a6:e6:6e:ad:31:d6:d8:83:94:48:77:46:
                    ab:ab:8f:69:21:06:40:52:3e:3f:d3:9e:75:0d:1d:
                    ac:15:b1:4e:d4:a0:e2:bf:fc:41:13:74:8c:83:70:
                    f4:a1:36:02:57:25:cf:8a:f6:55:3a:13:76:bf:91:
                    5d:c1:87:86:1d:af:a7:40:e9:e7:bc:e1:8f:74:67:
                    69:41:61:68:c0:4a:ce:b5:39:b9:14:09:6d:58:a4:
                    6c:bd:b3:5c:5e:56:51:93:4b:4a:8f:22:9d:45:36:
                    fe:2f:2a:db:77:43:34:60:9d:a2:56:9f:8d:fc:3c:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:17:47:FC:26:14:59:2F:23:36:4B:B8:91:37:6D:AC:38:63:D3:54
            X509v3 Authority Key Identifier:
                keyid:0C:56:F3:DD:AD:22:0A:B9:DC:E7:B0:A6:96:ED:44:CE:77:BD:57:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/3230322e38302e3131322e302f32302d3234203d3e203233363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:26:cb:24:16:83:81:77:73:50:34:f7:f2:4d:c2:ec:74:
         df:f4:5b:74:bb:3c:74:27:a0:be:2b:9a:72:40:5e:13:5f:4b:
         1e:db:c7:cf:a0:59:a7:89:69:69:13:5d:bc:84:b7:fd:e2:bf:
         2e:a4:db:e6:55:e3:b3:f5:af:00:e3:18:fe:2c:92:a3:25:70:
         c0:33:2a:7d:f5:41:54:61:e2:2d:1a:3f:c1:ec:77:6f:b3:0e:
         fd:06:83:07:39:7f:9e:72:83:1a:c1:4d:0c:9c:56:22:b9:5e:
         ce:31:93:7d:6e:a7:91:4e:09:a3:28:8d:15:b0:a4:9f:1b:3e:
         48:c8:15:e9:0b:c7:b5:b5:64:cc:57:a5:1b:73:24:55:6e:d8:
         ff:0a:fd:ef:5a:d9:62:a9:53:01:fe:0c:22:23:31:e2:a0:a9:
         c3:5b:2d:18:18:d2:ef:88:98:08:a4:18:ff:f4:30:1e:69:b0:
         ed:b4:e2:ad:f1:88:6c:ee:5f:91:d6:bb:93:aa:22:49:b1:06:
         a9:38:15:49:b4:42:24:f2:04:c1:c0:c1:9e:3a:23:e4:a1:c1:
         2e:f9:29:1d:87:d9:21:cb:01:3d:42:34:a8:fb:09:50:d7:d6:
         11:95:7d:34:6a:5a:b8:2a:ba:24:19:b0:2f:83:e9:b0:ee:e5:
         15:4e:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:43 2026 by rpki-client