Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3132382e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          JR5H0hn3DWJHrXV20lfY1slEZAl4SEHjqDKtqBHNcqI=
Subject key identifier:   51:ED:A8:1E:02:DA:C8:07:A5:C0:B0:92:AC:FA:F4:D1:EB:8F:06:D6
Certificate issuer:       /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial:       52DBF54F4D40A1888EA3FFECBDEF9D47C5F6162B
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3132382e302f32342d3234203d3e2034333832.roa
Signing time:             Sun 03 May 2026 02:16:21 +0000
ROA not before:           Sun 03 May 2026 02:11:21 +0000
ROA not after:            Sun 02 May 2027 02:16:21 +0000
asID:                     4382
IP address blocks:        202.93.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
                          rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 14:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:db:f5:4f:4d:40:a1:88:8e:a3:ff:ec:bd:ef:9d:47:c5:f6:16:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
        Validity
            Not Before: May  3 02:11:21 2026 GMT
            Not After : May  2 02:16:21 2027 GMT
        Subject: CN=51EDA81E02DAC807A5C0B092ACFAF4D1EB8F06D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:80:c2:22:ed:27:8c:e4:e3:e6:f7:e4:64:
                    c0:1f:f3:f9:d1:ef:aa:0c:b8:8e:e7:5f:82:1e:03:
                    90:e6:2f:a3:aa:56:46:02:b6:42:eb:7e:66:35:ed:
                    7c:d4:6b:71:68:51:b9:89:37:49:ef:15:38:a2:22:
                    9c:fa:95:83:4c:c0:70:02:88:c8:bd:30:25:9b:52:
                    88:b0:c1:73:c2:7c:67:d9:51:95:c4:d7:9c:89:47:
                    e4:19:c8:de:d3:92:6e:d9:f6:8a:1c:a3:a5:48:d7:
                    e0:f3:a1:23:aa:32:92:60:28:e8:fc:55:9e:f0:2c:
                    ca:40:a7:aa:70:be:7a:74:ed:92:a9:fc:10:75:14:
                    13:fe:49:08:09:3a:be:42:10:10:00:66:a3:98:f0:
                    12:cc:c2:f7:29:fa:9d:fc:91:5b:b0:7a:79:ed:70:
                    ba:69:c5:fd:67:4f:fd:4a:59:9b:a1:87:59:79:03:
                    ce:25:00:2f:a0:7e:da:28:b5:7d:75:89:4e:9e:19:
                    9d:d6:69:30:87:7e:9e:51:b8:a1:4f:32:17:12:d8:
                    27:10:90:41:f4:e3:2e:53:a2:40:1e:41:07:c4:a3:
                    94:14:70:2f:d7:9f:23:71:6c:4d:2c:97:46:0e:52:
                    0d:06:d5:8a:de:89:73:ed:e2:79:81:7b:a0:be:7e:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:ED:A8:1E:02:DA:C8:07:A5:C0:B0:92:AC:FA:F4:D1:EB:8F:06:D6
            X509v3 Authority Key Identifier:
                keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3132382e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:14:b0:c3:04:ba:f6:d8:ec:bc:f3:2c:2c:db:05:f7:01:c3:
         a3:35:67:4e:21:f2:80:a0:b8:3c:0e:05:30:0c:9f:c1:b1:be:
         54:ab:a6:ce:e0:1a:6d:e2:99:d5:05:f9:43:8b:a6:ce:73:ac:
         5d:97:61:b3:ce:f6:4c:17:5d:8c:6b:e1:86:da:62:ea:89:a2:
         2c:ad:56:1c:7d:a0:ce:d5:20:00:05:1c:5c:b0:60:9e:d4:56:
         da:64:8d:52:03:3e:7e:e4:5d:66:c4:68:f8:7c:17:cb:5b:52:
         f9:d6:5f:b3:4f:6c:e3:0d:82:7e:68:98:ee:d0:d4:ae:d8:cc:
         27:3a:09:b7:24:02:51:ec:c9:87:9f:03:ab:36:1b:e6:d0:01:
         18:bb:fd:0f:49:6d:1a:42:66:e9:53:26:5e:cb:27:12:35:56:
         61:5e:ca:91:05:16:4f:a0:22:e4:5e:06:0c:e2:e5:64:cf:ed:
         ca:53:ed:df:32:a2:74:49:8a:68:a3:a0:0e:05:ff:b2:e0:31:
         48:64:1a:b0:5a:3d:4c:22:83:41:05:04:5b:f4:77:dd:5a:56:
         cc:64:d9:6d:00:be:99:8c:37:3c:b9:96:23:79:e1:2b:bf:f9:
         73:ec:1a:08:86:29:8c:64:d3:dd:69:0c:15:ff:fa:e9:74:4e:
         dc:74:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:16:51 2026 by rpki-client