Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          +ksoHoQYPmnvJLnhpxWFWjlrA5368fIleRTPmBuQhGA=
Subject key identifier:   D0:09:77:6F:AD:94:30:DB:6C:48:C3:CF:C3:CA:A8:9F:0E:0E:11:7D
Certificate issuer:       /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial:       44964438AA9C03BC01E49594B85EE4EE37162279
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa
Signing time:             Sun 03 May 2026 02:16:15 +0000
ROA not before:           Sun 03 May 2026 02:11:15 +0000
ROA not after:            Sun 02 May 2027 02:16:15 +0000
asID:                     4382
IP address blocks:        202.93.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
                          rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 14:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:96:44:38:aa:9c:03:bc:01:e4:95:94:b8:5e:e4:ee:37:16:22:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
        Validity
            Not Before: May  3 02:11:15 2026 GMT
            Not After : May  2 02:16:15 2027 GMT
        Subject: CN=D009776FAD9430DB6C48C3CFC3CAA89F0E0E117D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:58:d6:49:cb:06:01:31:2f:2f:04:be:c3:
                    e3:62:ed:bc:9b:4d:09:79:d3:22:11:db:3f:61:80:
                    6a:e3:34:ab:fe:46:9e:9f:9b:38:43:22:af:c3:77:
                    67:1d:31:91:6a:9c:c7:c2:4c:44:43:50:af:61:00:
                    81:19:32:8b:3e:1d:87:d0:02:1c:9b:ec:bc:ad:9a:
                    e9:b7:b0:e0:d7:6d:1c:2e:c2:79:14:18:e2:75:a1:
                    18:4a:e0:2a:14:23:ea:9f:90:83:72:43:4a:d2:cd:
                    96:d2:a9:0d:c4:10:38:67:53:00:e9:2c:dc:44:47:
                    d7:05:20:1d:e2:80:56:ad:ab:c2:66:07:3b:be:81:
                    cb:18:cf:50:fa:d7:87:e2:3a:a4:3f:f0:26:76:32:
                    a7:86:d5:67:ce:1b:f0:c9:d4:0e:95:8b:ca:90:2f:
                    cb:4d:54:1f:74:c4:3a:1b:94:ad:54:92:8d:46:84:
                    3c:58:ef:7d:cb:7d:f8:7d:f6:20:6c:09:5b:be:22:
                    8f:e1:e0:1e:c3:c8:d6:70:52:6f:c5:22:26:27:cf:
                    b1:fb:27:20:c4:00:91:af:b5:7f:b6:fe:2b:c3:05:
                    d6:a0:30:ef:77:5d:ff:67:11:5f:6d:9d:95:83:ca:
                    5c:e7:25:3e:60:1b:92:cf:66:bf:11:2a:96:f7:ac:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:09:77:6F:AD:94:30:DB:6C:48:C3:CF:C3:CA:A8:9F:0E:0E:11:7D
            X509v3 Authority Key Identifier:
                keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:08:1b:23:b8:5f:de:62:ce:10:88:75:4f:ae:e2:97:af:11:
         8d:57:85:6f:cc:3b:8d:55:e9:bb:f0:84:38:d9:d7:13:e8:a1:
         e3:f1:43:dd:36:2a:9a:4d:a8:c9:08:ee:12:69:cd:96:2d:56:
         7e:1e:78:ff:34:a6:f5:72:76:9d:3c:41:16:fd:6d:da:fe:b6:
         31:6b:fb:80:c7:24:12:c2:cb:30:4c:84:94:ab:60:4d:32:df:
         e9:a8:ef:6c:c9:db:f6:ee:b3:80:e6:8c:3e:25:53:3e:ed:5d:
         cd:68:82:63:a5:b2:2e:c3:c0:47:69:90:2b:f9:cc:61:ca:eb:
         0e:5d:68:1f:c3:cb:f6:e0:45:77:41:7f:8a:b5:1a:75:e0:11:
         44:98:c6:7a:83:d4:1e:e5:0a:09:eb:84:5d:09:ea:bd:d8:0d:
         63:d4:3b:fe:17:59:fb:e8:f2:90:64:79:b7:4b:1c:38:32:50:
         36:7c:13:20:32:19:0c:ef:bf:12:33:b0:36:b1:79:c9:71:6d:
         9f:85:b6:34:6d:cb:3c:3b:9c:60:51:e6:17:ce:bb:36:3f:6c:
         70:c3:10:b7:a3:43:49:0a:cd:45:f5:fd:ef:94:56:ea:c1:1a:
         61:53:38:24:76:8e:aa:22:37:51:80:aa:e9:13:f9:bd:36:af:
         56:b2:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:16:50 2026 by rpki-client