Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133332e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          oJFtmwsSoFHyiQKa+hhNclMhUfKj2vrKOCFlonKmBY8=
Subject key identifier:   F4:37:C1:4E:05:12:9F:00:FC:02:5F:CA:81:DF:BD:A8:11:F4:01:8A
Certificate issuer:       /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial:       2E2FF2D8F4350D5373948C870934937D3F467507
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133332e302f32342d3234203d3e2034333832.roa
Signing time:             Sun 03 May 2026 02:16:13 +0000
ROA not before:           Sun 03 May 2026 02:11:13 +0000
ROA not after:            Sun 02 May 2027 02:16:13 +0000
asID:                     4382
IP address blocks:        202.93.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
                          rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 14:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2f:f2:d8:f4:35:0d:53:73:94:8c:87:09:34:93:7d:3f:46:75:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
        Validity
            Not Before: May  3 02:11:13 2026 GMT
            Not After : May  2 02:16:13 2027 GMT
        Subject: CN=F437C14E05129F00FC025FCA81DFBDA811F4018A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:df:de:ef:90:2c:1d:3f:db:66:fe:c5:c7:
                    30:97:29:bc:f9:5c:1d:18:69:17:8b:c3:60:ac:51:
                    4e:88:04:06:12:7b:ea:e9:07:75:0a:c5:ea:d1:9a:
                    22:03:be:31:b4:43:1b:1a:89:f0:2a:84:c3:fe:09:
                    f1:84:c6:8e:9f:6c:ee:d2:54:f0:07:04:ad:ba:b0:
                    ee:ba:1b:b1:9f:c6:cb:64:24:f1:91:27:29:d4:37:
                    27:c0:ea:7e:e2:b5:13:40:50:ca:f1:39:e4:8c:2a:
                    d7:64:b9:c5:8d:98:95:95:51:32:1f:f3:c8:cc:c4:
                    d2:a7:4b:26:61:e2:ce:e7:e7:17:89:cf:dc:5c:8e:
                    ab:e7:40:db:c0:2b:3c:00:05:a1:e3:58:13:e3:a5:
                    28:d9:3b:82:15:a0:d7:b9:2a:36:7c:7f:5c:2b:98:
                    7f:d7:eb:7b:88:0c:e0:af:56:d6:a0:5a:49:55:23:
                    69:1f:47:9f:d2:e5:62:30:14:9f:04:4d:79:5b:2e:
                    f5:ce:68:75:bf:9a:b7:6a:cb:6f:ce:b7:85:05:ad:
                    36:1a:86:d6:11:90:a2:d3:ea:82:b4:75:d5:62:c3:
                    f4:b3:1f:0a:4a:71:2f:6d:bd:16:d9:47:d8:0d:eb:
                    ab:39:7e:b3:83:a6:8b:c6:38:52:5b:ee:78:8c:b5:
                    bb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:37:C1:4E:05:12:9F:00:FC:02:5F:CA:81:DF:BD:A8:11:F4:01:8A
            X509v3 Authority Key Identifier:
                keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133332e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:3e:93:98:86:c6:8a:c4:ae:f1:ed:39:d2:85:3f:b3:c0:
         b8:50:c5:0a:96:cf:50:74:a7:5d:dc:f0:76:ab:cd:dd:92:0b:
         e0:0c:12:7d:28:4c:8f:f9:48:8a:e8:82:70:51:47:64:b9:3e:
         1f:64:27:f7:1c:8c:3f:4b:e3:c3:d8:14:11:55:f5:49:3e:13:
         6a:c1:2b:cb:e0:69:f4:d0:03:42:f8:1e:ca:c0:cc:1a:48:90:
         81:73:07:5b:81:f7:a5:25:d2:99:cd:c8:a9:dd:d2:66:74:91:
         39:da:6f:18:64:54:a4:f7:79:ab:00:c0:35:df:1c:3d:e8:60:
         ee:90:35:f6:c8:3f:1c:f7:1b:e8:91:9e:de:46:fe:1b:d9:f2:
         dc:f4:2c:68:a5:13:42:67:d3:16:96:c6:bb:17:c9:c9:00:d8:
         82:6d:cc:5b:93:46:a6:00:42:ab:c5:47:52:c8:79:cc:51:47:
         18:25:04:12:9e:9c:7d:04:4c:6b:90:27:e3:43:ef:ff:09:01:
         18:2d:54:fd:1e:e2:dd:43:93:19:8e:ee:5f:81:a7:8e:55:f0:
         de:6a:73:1a:d7:38:52:11:46:07:f6:0b:e4:99:11:ff:0c:bc:
         c3:56:9b:67:a5:e6:af:93:60:ea:09:fd:c3:bf:7d:bc:c7:91:
         57:8f:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:17:22 2026 by rpki-client