Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133302e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          MQr9cSgps4LHbGDJz9c4lbY3OsWW8+f0/YtOH610fL8=
Subject key identifier:   87:5E:69:0D:86:7B:04:70:FC:A4:A6:B0:51:98:6E:A3:61:06:CB:24
Certificate issuer:       /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial:       572D43A8DF10D885E4BB5B2E6401A751DFA1BA8E
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133302e302f32342d3234203d3e2034333832.roa
Signing time:             Sun 03 May 2026 02:16:18 +0000
ROA not before:           Sun 03 May 2026 02:11:18 +0000
ROA not after:            Sun 02 May 2027 02:16:18 +0000
asID:                     4382
IP address blocks:        202.93.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
                          rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 14:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2d:43:a8:df:10:d8:85:e4:bb:5b:2e:64:01:a7:51:df:a1:ba:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
        Validity
            Not Before: May  3 02:11:18 2026 GMT
            Not After : May  2 02:16:18 2027 GMT
        Subject: CN=875E690D867B0470FCA4A6B051986EA36106CB24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:df:bf:24:31:7d:0e:7c:23:ab:f4:d7:36:
                    c1:8f:ea:e9:c7:8d:a8:37:c4:47:16:7d:7e:71:1a:
                    e6:59:50:50:f4:ad:5a:fe:48:ee:16:0a:6e:94:11:
                    af:2d:18:a1:28:9b:c6:86:a7:98:8d:31:cd:9a:79:
                    8e:fe:88:c4:e5:86:f3:7b:25:d4:30:8f:7e:dd:59:
                    b6:ae:22:7c:5c:86:02:f1:db:2d:43:a9:c5:08:98:
                    36:62:51:8b:34:46:ca:ee:6b:d4:b3:2a:b1:02:4d:
                    ec:a3:4f:5e:45:c2:0d:4f:35:96:6b:d2:8b:c2:14:
                    f2:59:81:dc:b5:4d:c7:bc:b5:80:01:06:8f:8b:61:
                    7a:e1:e3:30:48:76:25:a0:b7:ea:57:0a:2b:57:ed:
                    45:1b:50:4a:bd:df:92:8a:8d:4c:14:91:0f:ce:ee:
                    8e:78:32:69:0c:8b:cf:ed:63:ef:4b:1a:16:9d:6c:
                    5d:be:4e:32:c6:ca:5a:6d:82:cc:45:83:e5:1c:63:
                    40:13:3c:7e:84:94:cb:b2:d8:7a:1c:07:4b:73:ee:
                    47:a1:5f:3d:71:7a:05:25:f4:5c:5e:36:a4:9c:f8:
                    ad:86:d9:82:13:17:f8:a1:04:56:9b:eb:73:cc:02:
                    78:f8:1c:83:f2:43:5d:0d:88:c3:4b:4d:c6:71:4c:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5E:69:0D:86:7B:04:70:FC:A4:A6:B0:51:98:6E:A3:61:06:CB:24
            X509v3 Authority Key Identifier:
                keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133302e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:9e:4c:70:e9:a2:98:28:00:49:39:01:26:68:bf:47:0d:2e:
         5f:21:e2:91:f4:f0:b3:ab:1d:29:b3:81:4a:30:0e:46:28:e9:
         44:8c:7e:81:17:21:00:79:9c:1e:71:64:40:3d:82:51:b4:6f:
         bd:37:54:88:db:2b:f9:74:8c:f5:fe:d5:7a:2b:10:fc:ca:33:
         26:66:81:3b:60:c5:42:65:f7:62:c7:69:35:5d:95:ad:95:47:
         e9:49:8b:dc:82:17:01:ba:20:62:f3:19:6f:e4:63:dd:89:c2:
         5f:cc:c6:95:dc:83:45:1b:e9:51:b8:da:e4:41:df:1c:4c:12:
         92:18:7f:2a:6d:21:7d:12:5a:cf:fa:08:57:ea:f7:59:99:87:
         d5:39:6b:7d:17:f9:76:9c:c2:d2:46:31:f2:88:53:09:34:1e:
         84:0f:93:7a:c8:8a:1e:aa:b9:10:b8:7b:79:62:e9:e7:e3:6f:
         2e:68:2b:a9:80:18:d0:34:4f:59:5d:6b:4c:95:23:48:5a:2c:
         77:39:3f:35:be:98:61:d3:b3:8c:2d:23:74:ca:5a:75:78:68:
         77:35:fb:58:af:63:06:1c:2e:dd:cf:d4:27:ac:6e:b2:4e:3a:
         e1:06:02:fd:05:6d:05:04:7c:ab:6f:3b:fc:e3:30:b4:38:00:
         98:bb:fd:56
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUVy1DqN8Q2IXku1suZAGnUd+huo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4
QTRFRTQwNDAeFw0yNjA1MDMwMjExMThaFw0yNzA1MDIwMjE2MThaMDMxMTAvBgNV
BAMTKDg3NUU2OTBEODY3QjA0NzBGQ0E0QTZCMDUxOTg2RUEzNjEwNkNCMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdxt+/JDF9Dnwjq/TXNsGP6unH
jag3xEcWfX5xGuZZUFD0rVr+SO4WCm6UEa8tGKEom8aGp5iNMc2aeY7+iMTlhvN7
JdQwj37dWbauInxchgLx2y1DqcUImDZiUYs0Rsrua9SzKrECTeyjT15Fwg1PNZZr
0ovCFPJZgdy1Tce8tYABBo+LYXrh4zBIdiWgt+pXCitX7UUbUEq935KKjUwUkQ/O
7o54MmkMi8/tY+9LGhadbF2+TjLGylptgsxFg+UcY0ATPH6ElMuy2HocB0tz7keh
Xz1xegUl9FxeNqSc+K2G2YITF/ihBFab63PMAnj4HIPyQ10NiMNLTcZxTCMdAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUh15pDYZ7BHD8pKawUZhuo2EGyyQwHwYDVR0j
BBgwFoAUJSg3yhRLPufbJD68sMEPgYpO5AQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTg2YjM4ODktNjk2Ni00NWVmLTkwNzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0Ex
NDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4QTRFRTQwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNTI4MzdDQTE0NEIzRUU3REIyNDNFQkNCMEMxMEY4MThBNEVF
NDA0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05
MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYIwDQYJKoZIhvcN
AQELBQADggEBAI+eTHDpopgoAEk5ASZov0cNLl8h4pH08LOrHSmzgUowDkYo6USM
foEXIQB5nB5xZEA9glG0b703VIjbK/l0jPX+1XorEPzKMyZmgTtgxUJl92LHaTVd
la2VR+lJi9yCFwG6IGLzGW/kY92Jwl/MxpXcg0Ub6VG42uRB3xxMEpIYfyptIX0S
Ws/6CFfq91mZh9U5a30X+XacwtJGMfKIUwk0HoQPk3rIih6quRC4e3li6efjby5o
K6mAGNA0T1lda0yVI0haLHc5PzW+mGHTs4wtI3TKWnV4aHc1+1ivYwYcLt3P1Ces
brJOOuEGAv0FbQUEfKtvO/zjMLQ4AJi7/VY=
-----END CERTIFICATE-----
Generated at Fri May 8 03:17:24 2026 by rpki-client