Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134312e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          WBBveR8OOQyEDRNcy74ITNE5Qj9H1E1tJp48zRmuwlY=
Subject key identifier:   45:A4:06:1A:13:9A:A9:69:4E:21:68:D9:D7:50:F1:3C:9A:9A:79:65
Certificate issuer:       /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial:       04758231273CE9C9040B29C98F70F9D75260EC74
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134312e302f32342d3234203d3e2034333832.roa
Signing time:             Sun 03 May 2026 02:16:17 +0000
ROA not before:           Sun 03 May 2026 02:11:17 +0000
ROA not after:            Sun 02 May 2027 02:16:17 +0000
asID:                     4382
IP address blocks:        202.93.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
                          rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 14:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:75:82:31:27:3c:e9:c9:04:0b:29:c9:8f:70:f9:d7:52:60:ec:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
        Validity
            Not Before: May  3 02:11:17 2026 GMT
            Not After : May  2 02:16:17 2027 GMT
        Subject: CN=45A4061A139AA9694E2168D9D750F13C9A9A7965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:c4:94:ed:7e:c5:16:ee:e7:db:b9:d6:e4:
                    cc:64:23:98:72:f0:49:b0:3d:39:8b:71:ac:0a:db:
                    63:59:d2:9d:36:35:19:38:bb:43:d9:5d:24:15:ed:
                    f0:d4:73:83:07:37:6e:6d:17:f1:b1:d2:ae:8e:86:
                    3f:3a:41:83:e1:7c:4e:38:72:e1:67:54:cd:bc:d6:
                    48:e6:d0:00:58:3f:f2:fe:6d:9b:61:dd:49:fd:04:
                    41:2d:25:6b:5f:d2:a9:d4:d9:b6:95:0f:54:92:4b:
                    b5:1a:47:6f:68:aa:42:b0:3a:ca:80:bd:3f:d4:31:
                    1c:95:4e:43:cd:3e:2e:e1:ad:e7:cd:0c:d1:8f:1b:
                    e6:2c:c3:2e:74:6c:24:ce:fd:4f:8b:08:03:08:44:
                    39:ab:ee:2e:eb:74:f1:5c:df:59:6b:b5:ef:e2:2c:
                    40:f9:dd:92:d0:37:54:58:b8:6d:59:f4:5b:8f:61:
                    de:87:c0:f1:8b:e7:32:f5:a1:e3:e2:6b:40:53:a9:
                    b3:af:fb:42:c6:8a:22:41:3f:9e:2c:16:4c:ed:dc:
                    c3:95:44:e4:65:da:51:58:6d:85:5e:7e:c1:42:9b:
                    3d:58:34:5a:8d:ef:2a:de:82:7a:a2:0b:28:1c:ac:
                    e4:b8:39:4d:db:01:78:c2:ac:3e:1a:93:03:51:91:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A4:06:1A:13:9A:A9:69:4E:21:68:D9:D7:50:F1:3C:9A:9A:79:65
            X509v3 Authority Key Identifier:
                keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134312e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:fe:32:24:60:0c:98:58:1d:8b:62:a7:6d:e1:1d:4f:06:
         d3:4c:d1:f9:fc:f8:b2:18:71:48:97:e2:f2:3d:0b:3e:05:58:
         cc:9f:7e:d8:a9:33:05:d2:ab:7b:85:04:1d:0a:0e:72:70:af:
         11:55:35:b1:56:42:e0:22:ef:87:25:56:20:fe:3f:2e:55:1e:
         fd:8c:b3:11:9c:1b:a2:f6:99:18:59:dd:2d:33:e3:f2:fa:18:
         58:bb:f5:57:69:79:cb:66:06:99:cf:69:5d:61:e6:4c:11:19:
         39:d0:e8:59:3b:6e:e6:4c:fd:3c:6c:c3:e7:0b:65:05:d3:89:
         4b:6e:c2:a8:d4:52:a3:49:72:3e:1b:a5:57:63:08:ad:d4:bc:
         7d:b0:06:ce:62:f4:13:09:f3:5a:37:1e:fe:ad:43:71:ea:fb:
         d8:da:8d:53:96:2b:26:81:73:1e:9b:43:f2:e0:54:8e:ac:13:
         75:e3:4e:47:52:96:30:c4:c5:0c:27:03:8e:d8:0b:4a:80:87:
         c7:3b:52:4f:30:03:e6:11:89:a8:e8:35:7d:3f:2d:10:ce:0c:
         58:88:f8:44:e7:d5:2f:e4:f8:f3:4b:45:77:b6:28:c4:ea:a3:
         53:9d:f3:23:9c:d7:62:90:68:3c:7c:89:6b:4f:76:3a:ee:2a:
         99:f7:41:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:16:24 2026 by rpki-client