Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa
File:                     3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa (raw, json)
Hash identifier:          r5A57ODshoOiBN4yL9YLFTI84pACO63AEIquUmFqa+I=
Subject key identifier:   F6:ED:46:5B:38:3F:93:38:01:CF:B0:26:75:05:1F:B9:1C:CF:9A:18
Certificate issuer:       /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial:       517A3BC79F40763A8A1986EAE263C17EAC02A12A
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa
Signing time:             Sun 03 May 2026 02:36:11 +0000
ROA not before:           Sun 03 May 2026 02:31:11 +0000
ROA not after:            Sun 02 May 2027 02:36:11 +0000
asID:                     136121
IP address blocks:        202.154.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
                          rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 11:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7a:3b:c7:9f:40:76:3a:8a:19:86:ea:e2:63:c1:7e:ac:02:a1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
        Validity
            Not Before: May  3 02:31:11 2026 GMT
            Not After : May  2 02:36:11 2027 GMT
        Subject: CN=F6ED465B383F933801CFB02675051FB91CCF9A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:a6:a0:5e:7e:13:d5:76:be:02:2c:1e:02:
                    58:10:86:51:66:1f:ba:ff:87:12:d8:74:28:c8:4c:
                    35:70:d1:1f:f8:a6:e4:fe:c8:84:fe:28:c0:92:23:
                    78:de:a5:f4:85:56:a3:a6:02:8b:2e:d7:a8:ec:27:
                    1a:27:cf:e6:48:ca:9a:4d:ad:81:d5:59:8f:51:a4:
                    20:89:9e:7f:50:dc:4a:07:70:5a:a6:39:24:72:01:
                    fa:84:f3:25:ba:64:82:a6:0f:9b:f7:53:cf:64:ef:
                    d5:57:2a:92:de:68:f0:84:ed:98:c6:c0:ee:5b:dc:
                    dc:ee:51:41:94:65:eb:c2:bf:5e:2c:1f:1c:32:e5:
                    83:ae:b5:59:df:08:0e:27:9e:75:50:1f:53:13:25:
                    a2:58:8d:07:9e:78:52:08:68:23:86:c1:58:77:02:
                    6e:3e:93:23:74:1c:31:8f:80:b9:02:eb:66:b7:5b:
                    c5:d2:3d:bb:0c:e4:40:15:4b:d1:69:f0:64:a6:6a:
                    94:b6:1e:41:4f:5a:dc:d0:04:61:dc:07:6a:df:7c:
                    fb:ab:d9:f4:a6:81:ca:8c:d9:f6:92:26:eb:9c:79:
                    ce:b7:68:66:90:c3:d1:09:27:55:37:39:18:50:d7:
                    01:cc:53:8e:df:97:3c:5f:64:11:b7:02:e1:22:1f:
                    41:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:ED:46:5B:38:3F:93:38:01:CF:B0:26:75:05:1F:B9:1C:CF:9A:18
            X509v3 Authority Key Identifier:
                keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:7a:e9:0c:6a:9c:8e:89:74:08:84:d9:ed:7d:b3:22:12:
         79:c5:08:4c:75:eb:3a:cc:a7:6a:2c:f7:d8:ba:34:24:cf:86:
         55:fb:41:2f:58:28:40:11:03:1a:1f:6f:ea:ae:21:c3:c9:18:
         80:f4:e5:d7:51:34:27:10:3a:fa:16:de:fa:9d:d4:9f:1f:37:
         f7:e1:2e:db:dc:2c:69:2b:db:fc:0d:74:09:3e:41:42:8b:e5:
         52:b6:0c:46:29:47:34:0d:c2:20:80:26:bb:ed:65:a3:66:7b:
         13:30:6c:c0:51:02:61:bf:18:36:94:89:8b:d3:cb:d7:b8:8d:
         2a:a7:62:20:0f:23:ef:75:29:e1:4f:49:da:61:45:f5:d3:01:
         cc:6b:21:2f:e7:eb:c5:18:cf:5a:88:9d:0b:73:0e:5c:e7:ad:
         70:29:84:8c:19:ec:63:30:ed:4f:9d:ee:a4:dc:ab:37:4c:d6:
         87:8b:a5:d4:39:75:89:6e:c5:56:79:e4:a4:f5:48:d7:a7:d7:
         78:c4:5d:69:fa:b5:f6:26:05:f9:90:f6:3b:d2:56:3b:33:c7:
         98:1b:c7:8e:ad:20:dd:6d:c1:43:f5:8a:cb:22:07:3e:c6:a7:
         6a:8a:ec:49:0b:ab:84:dc:f8:37:ed:e5:60:5e:8d:26:f8:6c:
         5f:b9:a8:59
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUXo7x59AdjqKGYbq4mPBfqwCoSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF
REVGMjQ1RTAeFw0yNjA1MDMwMjMxMTFaFw0yNzA1MDIwMjM2MTFaMDMxMTAvBgNV
BAMTKEY2RUQ0NjVCMzgzRjkzMzgwMUNGQjAyNjc1MDUxRkI5MUNDRjlBMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkaagXn4T1Xa+AiweAlgQhlFm
H7r/hxLYdCjITDVw0R/4puT+yIT+KMCSI3jepfSFVqOmAosu16jsJxonz+ZIyppN
rYHVWY9RpCCJnn9Q3EoHcFqmOSRyAfqE8yW6ZIKmD5v3U89k79VXKpLeaPCE7ZjG
wO5b3NzuUUGUZevCv14sHxwy5YOutVnfCA4nnnVQH1MTJaJYjQeeeFIIaCOGwVh3
Am4+kyN0HDGPgLkC62a3W8XSPbsM5EAVS9Fp8GSmapS2HkFPWtzQBGHcB2rffPur
2fSmgcqM2faSJuucec63aGaQw9EJJ1U3ORhQ1wHMU47flzxfZBG3AuEiH0FrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU9u1GWzg/kzgBz7AmdQUfuRzPmhgwHwYDVR0j
BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD
MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy
NDVFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05
MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypoSMA0GCSqG
SIb3DQEBCwUAA4IBAQAIz3rpDGqcjol0CITZ7X2zIhJ5xQhMdes6zKdqLPfYujQk
z4ZV+0EvWChAEQMaH2/qriHDyRiA9OXXUTQnEDr6Ft76ndSfHzf34S7b3CxpK9v8
DXQJPkFCi+VStgxGKUc0DcIggCa77WWjZnsTMGzAUQJhvxg2lImL08vXuI0qp2Ig
DyPvdSnhT0naYUX10wHMayEv5+vFGM9aiJ0Lcw5c561wKYSMGexjMO1Pne6k3Ks3
TNaHi6XUOXWJbsVWeeSk9UjXp9d4xF1p+rX2JgX5kPY70lY7M8eYG8eOrSDdbcFD
9YrLIgc+xqdqiuxJC6uE3Pg37eVgXo0m+GxfuahZ
-----END CERTIFICATE-----
Generated at Tue May 5 15:06:08 2026 by rpki-client