Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230332e3137362e3137382e302f32342d3234203d3e203338373538.roa
File:                     3230332e3137362e3137382e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          SYYpnq9isr1dStJrgtVd25Z2b1dMLPHgHXzqPemGAqw=
Subject key identifier:   F3:D8:5B:97:34:1E:66:35:9B:6F:6E:D4:CD:1B:B3:CB:AF:37:87:0A
Certificate issuer:       /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial:       1969B774AD0B90C78D4B9C2A552D30629414F8D7
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230332e3137362e3137382e302f32342d3234203d3e203338373538.roa
Signing time:             Mon 05 Oct 2026 04:44:51 +0000
ROA not before:           Mon 05 Oct 2026 04:39:51 +0000
ROA not after:            Mon 04 Oct 2027 04:44:51 +0000
asID:                     38758
IP address blocks:        203.176.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:b7:74:ad:0b:90:c7:8d:4b:9c:2a:55:2d:30:62:94:14:f8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
        Validity
            Not Before: Oct  5 04:39:51 2026 GMT
            Not After : Oct  4 04:44:51 2027 GMT
        Subject: CN=F3D85B97341E66359B6F6ED4CD1BB3CBAF37870A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:75:fe:e8:1c:7c:14:df:65:d8:3f:24:f5:
                    bf:c1:1f:00:a5:b0:eb:30:d0:dd:af:a9:25:ba:76:
                    96:6f:80:fb:97:20:53:a0:84:3a:9f:d5:0a:cf:02:
                    61:9c:a1:21:e5:b2:7e:06:82:e5:20:d4:8d:4e:09:
                    5c:1a:d2:cf:48:8a:aa:57:31:01:fe:64:25:5a:a8:
                    bf:6c:c2:d5:56:fc:a5:de:c4:c5:d8:77:51:0e:28:
                    6e:d7:90:97:db:40:ca:1b:1b:4b:3d:08:43:aa:bf:
                    2a:5b:7a:80:72:07:d5:38:fd:18:d9:12:ff:29:91:
                    e9:1e:99:0b:be:86:0e:2f:8b:c6:e6:d7:ff:89:de:
                    53:b9:73:f7:29:14:97:2b:b1:6f:b0:78:48:18:f6:
                    cc:22:7f:e1:ac:19:fd:65:74:81:79:c9:cd:73:a9:
                    3b:9c:b1:ef:1f:ba:eb:da:64:b6:3c:d4:9a:35:74:
                    df:61:58:ae:42:84:cd:38:ec:96:99:7a:ee:56:3c:
                    03:04:0f:62:62:7a:c0:01:6b:dd:c1:95:44:60:83:
                    c0:21:a0:3a:aa:ce:e2:61:37:7c:0d:52:94:a8:c0:
                    b8:d5:4a:40:27:c3:0e:91:8a:68:2e:dc:01:48:af:
                    bd:6f:45:a3:34:d2:6e:e3:d5:1a:a1:72:06:c0:10:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D8:5B:97:34:1E:66:35:9B:6F:6E:D4:CD:1B:B3:CB:AF:37:87:0A
            X509v3 Authority Key Identifier:
                keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230332e3137362e3137382e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:36:99:d7:72:49:c9:59:bc:a8:4d:7f:b3:52:36:08:42:52:
         51:57:8c:52:7b:7d:05:f3:0a:e2:b9:75:df:03:22:43:eb:b5:
         47:84:0a:f0:64:86:f7:a1:52:6a:7d:d2:f1:6d:76:da:7b:b6:
         86:85:f1:2e:8c:1a:47:cf:04:f8:14:9f:f2:50:04:63:99:f5:
         15:75:5b:03:0d:1d:a2:32:6c:13:63:15:47:27:af:0e:23:e6:
         c4:48:97:cd:11:05:8e:fe:b3:df:17:c1:f0:dd:a3:ea:7a:ae:
         2a:38:cd:b2:0d:44:5c:d2:9a:8b:2c:84:0a:79:01:9d:f4:4d:
         ac:0e:e0:98:99:b7:dd:00:c1:29:e9:7b:b6:58:ca:be:ea:45:
         b8:d1:cf:3c:b3:6f:52:e9:07:84:a9:57:60:62:2c:1b:1c:b2:
         fd:f5:a9:4d:f2:ec:c5:e1:8a:3e:b8:48:a6:aa:41:49:85:a3:
         e2:c0:b9:6d:b9:89:9a:21:a6:d7:15:ad:8d:9a:25:2d:35:3f:
         b9:a3:cf:98:6e:05:1c:69:33:08:20:c7:37:33:98:a2:6c:0f:
         84:e3:d3:61:b9:a2:cb:8e:20:81:2f:ad:88:e4:86:99:f2:c9:
         98:e3:a9:5a:71:b8:41:7a:6a:94:4e:3e:18:92:3a:9c:02:05:
         14:3f:65:c8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGWm3dK0LkMeNS5wqVS0wYpQU+NcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5
MjFDQjBFNzAeFw0yNjEwMDUwNDM5NTFaFw0yNzEwMDQwNDQ0NTFaMDMxMTAvBgNV
BAMTKEYzRDg1Qjk3MzQxRTY2MzU5QjZGNkVENENEMUJCM0NCQUYzNzg3MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxn3X+6Bx8FN9l2D8k9b/BHwCl
sOsw0N2vqSW6dpZvgPuXIFOghDqf1QrPAmGcoSHlsn4GguUg1I1OCVwa0s9IiqpX
MQH+ZCVaqL9swtVW/KXexMXYd1EOKG7XkJfbQMobG0s9CEOqvypbeoByB9U4/RjZ
Ev8pkekemQu+hg4vi8bm1/+J3lO5c/cpFJcrsW+weEgY9swif+GsGf1ldIF5yc1z
qTucse8fuuvaZLY81Jo1dN9hWK5ChM047JaZeu5WPAMED2JiesABa93BlURgg8Ah
oDqqzuJhN3wNUpSowLjVSkAnww6Rimgu3AFIr71vRaM00m7j1RqhcgbAED4bAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU89hblzQeZjWbb27UzRuzy683hwowHwYDVR0j
BBgwFoAUuKGnhQ/kYGZFzbmTYT8DJpIcsOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWI0ZTE5NWUtMTJkZS00YzNjLTkzZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUw
RkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5MjFDQjBFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COEExQTc4NTBGRTQ2MDY2NDVDREI5OTM2MTNGMDMyNjkyMUNC
MEU3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05
M2U1LTUyMmVlNTQwMThkNi8wLzMyMzAzMzJlMzEzNzM2MmUzMTM3MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy7CyMA0GCSqG
SIb3DQEBCwUAA4IBAQB1NpnXcknJWbyoTX+zUjYIQlJRV4xSe30F8wriuXXfAyJD
67VHhArwZIb3oVJqfdLxbXbae7aGhfEujBpHzwT4FJ/yUARjmfUVdVsDDR2iMmwT
YxVHJ68OI+bESJfNEQWO/rPfF8Hw3aPqeq4qOM2yDURc0pqLLIQKeQGd9E2sDuCY
mbfdAMEp6Xu2WMq+6kW40c88s29S6QeEqVdgYiwbHLL99alN8uzF4Yo+uEimqkFJ
haPiwLltuYmaIabXFa2NmiUtNT+5o8+YbgUcaTMIIMc3M5iibA+E49NhuaLLjiCB
L62I5IaZ8smY46lacbhBemqUTj4YkjqcAgUUP2XI
-----END CERTIFICATE-----
Generated at Sun Oct 25 08:00:40 2026 by rpki-client