Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3230332e3135332e39362e302f32302d3234203d3e203234323037.roa
File:                     3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (raw, json)
Hash identifier:          AhfkSgsUfVbnlwjYQF5FXALegxkl9ZVed7BF03/fBz8=
Subject key identifier:   DC:CB:C2:86:0E:C2:DE:E8:CE:B9:BE:E2:68:22:B6:AA:9D:E6:AA:97
Certificate issuer:       /CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2
Certificate serial:       5856C9B62172740E3974375956610BF19638F39E
Authority key identifier: D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3230332e3135332e39362e302f32302d3234203d3e203234323037.roa
Signing time:             Sun 03 May 2026 03:19:21 +0000
ROA not before:           Sun 03 May 2026 03:14:21 +0000
ROA not after:            Sun 02 May 2027 03:19:21 +0000
asID:                     24207
IP address blocks:        203.153.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl
                          rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:56:c9:b6:21:72:74:0e:39:74:37:59:56:61:0b:f1:96:38:f3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2
        Validity
            Not Before: May  3 03:14:21 2026 GMT
            Not After : May  2 03:19:21 2027 GMT
        Subject: CN=DCCBC2860EC2DEE8CEB9BEE26822B6AA9DE6AA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:f1:a4:75:e6:a6:7b:9f:a9:ea:e6:f1:60:
                    2d:76:db:f7:45:44:c2:c8:a9:c6:aa:85:21:38:e4:
                    08:5e:52:a9:a7:07:f2:f9:ba:90:8a:dc:14:0a:4c:
                    2f:ee:e9:10:3a:e6:90:f5:a1:01:8c:78:ee:2d:17:
                    4c:94:b7:e5:96:0e:ec:1b:65:b6:16:10:2a:37:e2:
                    67:d9:ba:e9:9c:4e:f8:13:a3:cb:af:77:3e:34:a9:
                    c8:28:5a:97:4c:bb:c5:da:fb:ed:18:2e:d6:5b:cc:
                    8d:1a:99:1e:4f:3c:0b:96:0b:b1:01:be:c6:07:b7:
                    a1:75:1b:e2:ff:3a:46:85:77:7b:1d:56:53:1f:76:
                    7f:19:31:d6:d7:61:bf:ce:8e:a9:84:99:e3:44:c0:
                    08:d9:e7:98:e8:ea:d1:81:56:7b:9c:eb:a3:b2:ba:
                    4e:37:fd:e2:38:bc:5d:c5:f2:82:d5:8f:46:b9:c2:
                    8c:d8:21:9b:b7:81:80:94:4a:32:42:07:18:59:58:
                    07:b2:be:10:45:33:8c:db:1d:7a:8c:95:ea:5f:5b:
                    70:af:0b:98:dc:53:91:cb:dd:e8:c6:41:79:46:2f:
                    78:59:cf:08:39:1a:5a:47:ec:ec:ff:57:bf:82:e0:
                    07:e3:0d:51:eb:b8:ca:0b:58:2b:9a:da:39:16:ae:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CB:C2:86:0E:C2:DE:E8:CE:B9:BE:E2:68:22:B6:AA:9D:E6:AA:97
            X509v3 Authority Key Identifier:
                keyid:D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3230332e3135332e39362e302f32302d3234203d3e203234323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:39:9b:30:4f:3f:51:3c:bf:5c:f0:27:18:e8:41:7e:b9:ea:
         6a:19:51:67:51:0b:f9:ff:02:52:3c:56:89:12:06:5f:96:30:
         f6:c0:24:8b:10:fd:99:62:53:a8:90:ef:53:10:7a:13:57:bb:
         66:4b:92:ae:3d:db:0a:75:04:b9:89:34:16:ef:e6:22:be:fb:
         e6:62:5e:a3:e5:74:2d:00:7a:93:42:2e:f2:eb:5e:77:a0:76:
         ec:46:32:0f:68:20:39:1c:c7:a4:61:4a:0c:fc:61:33:4b:2f:
         10:e3:b6:19:d5:64:6b:75:6a:f5:0e:ed:7b:f0:cc:86:b3:b1:
         a8:16:86:4a:1a:bc:66:12:28:84:8d:44:f6:9f:c6:db:97:14:
         bd:7f:98:bb:db:22:9d:41:4d:5d:f7:aa:3c:43:9e:07:a9:1a:
         8d:35:35:bb:a2:d4:8c:61:30:00:4f:50:7c:d1:e9:f3:2a:dc:
         34:fe:a0:5b:51:d6:4e:d7:70:91:36:5b:5f:04:80:98:ce:9c:
         d4:3e:e1:51:a7:82:54:29:ca:4b:ff:69:ec:f3:e1:74:3b:50:
         76:3b:e1:ea:5f:5e:87:80:7a:77:ff:0c:57:3b:81:90:83:39:
         35:70:e7:07:11:69:90:c2:01:21:5d:a4:35:b7:8b:ac:65:03:
         e1:7f:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:35 2026 by rpki-client