Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa
File:                     3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa (raw, json)
Hash identifier:          I8jB4rxWNrSmzkVbe4RoHG3IRbpZZey9vmU9TE/LTXs=
Subject key identifier:   18:21:D7:FB:B1:18:7F:3E:5F:F5:13:11:E6:4E:26:16:D8:D7:ED:02
Certificate issuer:       /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial:       674C248870D5DA47342D094AE10CF5238ECD0BB8
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa
Signing time:             Sun 03 May 2026 02:36:11 +0000
ROA not before:           Sun 03 May 2026 02:31:11 +0000
ROA not after:            Sun 02 May 2027 02:36:11 +0000
asID:                     136121
IP address blocks:        202.154.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
                          rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 11:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:24:88:70:d5:da:47:34:2d:09:4a:e1:0c:f5:23:8e:cd:0b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
        Validity
            Not Before: May  3 02:31:11 2026 GMT
            Not After : May  2 02:36:11 2027 GMT
        Subject: CN=1821D7FBB1187F3E5FF51311E64E2616D8D7ED02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:96:74:f8:83:5e:af:91:4b:18:aa:77:06:
                    62:db:4e:74:93:4d:08:84:42:b9:54:7a:d2:ad:ee:
                    53:d5:6a:38:f7:56:6c:5f:c3:6e:93:32:3f:6c:6f:
                    ad:e9:27:fd:ba:9e:86:c7:e7:a8:e2:8f:88:7e:fe:
                    9e:7c:78:16:92:3c:ac:72:e8:c3:fc:16:4d:76:a9:
                    7d:9a:00:15:fa:60:5a:46:39:0d:5c:dd:4b:d1:a8:
                    4a:66:a6:bc:89:97:e5:16:e1:9e:35:b6:32:de:55:
                    aa:ac:9b:e8:80:3b:49:ad:89:26:04:d9:51:f3:a4:
                    b4:e0:9d:4d:bc:7f:1f:ac:79:c6:f2:7f:97:2d:05:
                    e1:3f:73:57:7b:35:76:62:ea:01:6e:b3:6c:cf:60:
                    9a:0d:9e:22:f2:40:76:84:9e:50:94:7b:bf:c9:9a:
                    4e:8e:dd:46:22:e0:fd:75:1f:ea:5b:a7:92:b8:6a:
                    25:59:e2:f8:23:fb:cb:4f:0f:c2:54:ab:ee:18:1c:
                    55:78:d2:06:0e:25:0f:a7:a9:2e:9a:f2:ec:fc:e0:
                    90:d8:de:df:77:12:2c:f8:cf:4b:11:1a:87:8a:be:
                    7b:5d:38:78:83:a1:0c:5d:26:28:7e:ed:46:30:87:
                    fb:1f:3e:c7:56:84:64:c9:d3:70:f7:40:64:c6:42:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:D7:FB:B1:18:7F:3E:5F:F5:13:11:E6:4E:26:16:D8:D7:ED:02
            X509v3 Authority Key Identifier:
                keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:18:13:22:41:3e:45:15:3b:8d:40:7e:6a:af:86:68:c5:
         89:3f:eb:44:b9:db:3e:20:d8:39:c4:8f:6e:b9:75:6b:e4:92:
         fa:a2:b6:55:da:40:85:6e:24:38:4a:81:50:0f:75:fe:c5:d5:
         fb:af:4d:7d:d2:b5:3c:bc:f6:62:d8:ee:20:e9:aa:8c:62:3f:
         26:a8:dc:d3:db:0b:ee:64:d0:8a:be:9a:5e:2d:15:bb:d4:7e:
         fd:2a:14:f7:b8:70:82:2b:18:49:97:6f:48:03:09:45:97:34:
         6b:67:37:c3:48:4c:89:61:75:cb:b1:fd:e5:12:ee:7c:1b:4a:
         90:9a:46:0e:41:cb:25:3a:96:04:79:f0:3d:38:67:1c:31:98:
         1f:fb:7c:e3:ba:60:43:fd:ed:cf:7a:41:30:5b:17:61:66:a7:
         36:42:ab:29:24:2a:61:ee:a7:a4:42:40:af:31:18:d0:c6:54:
         bb:e9:95:a9:cc:78:c7:da:44:4c:81:c5:53:ac:a8:49:aa:ba:
         03:8a:27:65:cb:a6:ca:7f:41:3f:59:b9:25:d4:e0:ba:13:f6:
         28:97:65:5b:23:a9:85:5a:4a:49:e0:aa:a7:b7:16:02:03:35:
         c4:b8:d9:47:68:0d:8b:af:b6:50:ff:b6:71:79:59:c5:f0:ba:
         6c:c1:de:88
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZ0wkiHDV2kc0LQlK4Qz1I47NC7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF
REVGMjQ1RTAeFw0yNjA1MDMwMjMxMTFaFw0yNzA1MDIwMjM2MTFaMDMxMTAvBgNV
BAMTKDE4MjFEN0ZCQjExODdGM0U1RkY1MTMxMUU2NEUyNjE2RDhEN0VEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4JZ0+INer5FLGKp3BmLbTnST
TQiEQrlUetKt7lPVajj3Vmxfw26TMj9sb63pJ/26nobH56jij4h+/p58eBaSPKxy
6MP8Fk12qX2aABX6YFpGOQ1c3UvRqEpmpryJl+UW4Z41tjLeVaqsm+iAO0mtiSYE
2VHzpLTgnU28fx+secbyf5ctBeE/c1d7NXZi6gFus2zPYJoNniLyQHaEnlCUe7/J
mk6O3UYi4P11H+pbp5K4aiVZ4vgj+8tPD8JUq+4YHFV40gYOJQ+nqS6a8uz84JDY
3t93Eiz4z0sRGoeKvntdOHiDoQxdJih+7UYwh/sfPsdWhGTJ03D3QGTGQtEVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUGCHX+7EYfz5f9RMR5k4mFtjX7QIwHwYDVR0j
BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD
MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy
NDVFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05
MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypoSMA0GCSqG
SIb3DQEBCwUAA4IBAQCNChgTIkE+RRU7jUB+aq+GaMWJP+tEuds+INg5xI9uuXVr
5JL6orZV2kCFbiQ4SoFQD3X+xdX7r0190rU8vPZi2O4g6aqMYj8mqNzT2wvuZNCK
vppeLRW71H79KhT3uHCCKxhJl29IAwlFlzRrZzfDSEyJYXXLsf3lEu58G0qQmkYO
QcslOpYEefA9OGccMZgf+3zjumBD/e3PekEwWxdhZqc2QqspJCph7qekQkCvMRjQ
xlS76ZWpzHjH2kRMgcVTrKhJqroDiidly6bKf0E/Wbkl1OC6E/Yol2VbI6mFWkpJ
4KqntxYCAzXEuNlHaA2Lr7ZQ/7ZxeVnF8Lpswd6I
-----END CERTIFICATE-----
Generated at Tue May 5 15:05:53 2026 by rpki-client