Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134322e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          1GOi0KPMqFlJFa1xPEu/J6WGo/8YFfXReaWdo3rhMrk=
Subject key identifier:   65:7C:26:3C:F8:1F:49:62:A3:AB:5B:64:4F:31:A5:F4:B2:10:67:2F
Certificate issuer:       /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial:       B83160D83ACD0035A6A203A5907E6FF39EB88D
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134322e302f32342d3234203d3e2034333832.roa
Signing time:             Sun 03 May 2026 02:16:14 +0000
ROA not before:           Sun 03 May 2026 02:11:14 +0000
ROA not after:            Sun 02 May 2027 02:16:14 +0000
asID:                     4382
IP address blocks:        202.93.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
                          rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 14:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b8:31:60:d8:3a:cd:00:35:a6:a2:03:a5:90:7e:6f:f3:9e:b8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
        Validity
            Not Before: May  3 02:11:14 2026 GMT
            Not After : May  2 02:16:14 2027 GMT
        Subject: CN=657C263CF81F4962A3AB5B644F31A5F4B210672F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:d9:ef:35:d4:62:2e:cd:00:c8:8a:f7:33:
                    be:8f:25:28:6c:10:a4:81:2c:75:c7:37:3d:1c:e0:
                    7b:d4:1d:95:b1:14:34:80:5b:8e:77:b9:6a:cc:dd:
                    40:ed:d4:57:6c:eb:36:f9:53:34:fd:cc:7d:ad:ea:
                    47:41:cd:97:51:ff:03:30:6d:33:27:2f:74:df:7f:
                    9d:e0:5f:0d:a5:d0:29:19:51:3d:12:79:f7:48:0c:
                    c5:f4:7c:28:be:ba:c0:e9:42:52:f3:e1:70:4b:c8:
                    bc:51:ae:b0:aa:18:da:e1:bf:6c:34:10:6c:d3:fb:
                    47:31:fd:b6:d1:af:dd:68:43:0d:30:7b:e9:8e:71:
                    2a:e7:bb:07:74:26:20:04:8f:e5:4d:c9:9c:4b:c2:
                    66:ef:55:2c:b6:fb:c3:d9:dd:ec:92:57:17:0e:10:
                    a9:a0:9c:8c:63:ca:39:36:d7:d8:c7:bd:99:87:56:
                    fc:85:08:de:fb:2f:8b:00:fe:7b:c9:e8:d7:94:33:
                    16:68:60:f6:b7:6d:44:ff:5f:5e:4f:f7:8f:c9:cd:
                    ad:ef:61:a6:59:54:d6:0a:a1:a3:99:d9:a2:d3:97:
                    ec:a7:6b:64:23:dd:cb:a2:e4:97:df:ac:82:fa:e7:
                    2e:ca:62:2c:4e:1d:58:51:d5:d6:a8:44:c6:63:ec:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7C:26:3C:F8:1F:49:62:A3:AB:5B:64:4F:31:A5:F4:B2:10:67:2F
            X509v3 Authority Key Identifier:
                keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134322e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:eb:f0:25:20:41:dc:ad:d5:fb:65:55:47:96:df:d5:98:0d:
         4c:dd:d5:76:a8:ce:9d:57:d0:ee:0d:96:c5:be:60:87:d4:59:
         85:3f:96:b9:79:5d:d7:cd:3d:66:aa:c9:7e:79:b2:ab:c9:c7:
         91:13:2c:de:cc:b3:2d:ec:95:f8:94:10:3d:43:4d:a2:c8:f3:
         32:14:d9:ae:cf:65:15:1a:77:50:97:06:ad:48:4e:bc:c5:95:
         43:3b:c3:69:a7:aa:fe:e4:89:b2:7f:04:42:a3:c4:c2:5c:91:
         6e:c3:ee:7f:31:12:1f:0a:92:50:44:e4:0d:c1:92:cb:ef:b0:
         dc:2d:7d:be:ef:b3:35:1a:68:a4:16:3c:55:fa:b3:76:c8:23:
         ad:e0:41:9f:54:78:44:cd:74:9b:cb:26:b2:d6:44:0c:c7:6b:
         ac:31:fb:d0:a2:d9:81:60:00:78:b4:00:d7:30:68:95:48:7a:
         ea:5f:7e:69:4c:aa:43:ec:83:40:f9:4c:87:b2:ee:79:7f:7b:
         24:25:c8:51:da:79:83:81:4d:42:00:a7:72:42:b3:7a:56:de:
         df:d0:26:2a:45:cf:07:1c:f1:83:55:8d:64:80:29:d0:60:70:
         7e:9e:e5:69:5d:c4:77:de:0c:29:45:ec:8c:7f:01:70:95:36:
         f9:84:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:16:50 2026 by rpki-client