Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e20323135373438.roa
File:                     3230332e38342e3133362e302f32342d3234203d3e20323135373438.roa (raw, json)
Hash identifier:          PGJpqj97a4FLmBoFNBDINXicODmeYOoNb+ofVxYKueU=
Subject key identifier:   0D:E1:FC:31:46:24:AE:01:B1:F6:36:98:C5:9E:A8:57:92:76:CD:A2
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       2A5016B33B6F2148AD9433FB9242E4723D3903E9
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e20323135373438.roa
Signing time:             Mon 05 Oct 2026 03:54:12 +0000
ROA not before:           Mon 05 Oct 2026 03:49:12 +0000
ROA not after:            Mon 04 Oct 2027 03:54:12 +0000
asID:                     215748
IP address blocks:        203.84.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 12:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:50:16:b3:3b:6f:21:48:ad:94:33:fb:92:42:e4:72:3d:39:03:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: Oct  5 03:49:12 2026 GMT
            Not After : Oct  4 03:54:12 2027 GMT
        Subject: CN=0DE1FC314624AE01B1F63698C59EA8579276CDA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:23:39:14:4c:aa:f6:01:d8:a5:38:dc:21:
                    7a:57:e5:09:10:cc:21:a0:71:be:18:8c:a2:ce:fb:
                    80:3e:cc:fa:ec:60:1e:99:7f:81:28:1b:16:50:ab:
                    42:21:11:07:7f:36:35:c5:1f:63:36:55:0a:26:0e:
                    5b:29:1c:9c:0d:57:ed:ea:43:03:92:d3:78:1f:7d:
                    f8:b2:f9:f9:79:f3:db:34:58:13:92:c0:43:fd:c2:
                    12:51:6a:7e:9e:a9:3e:46:6c:a7:4f:d5:11:cd:a0:
                    68:81:62:98:5d:9d:a0:bc:73:f5:1b:67:11:a1:8c:
                    1c:97:72:20:1e:32:3b:3b:2b:01:76:79:36:c9:d4:
                    0b:dd:09:48:45:bc:1d:89:50:d1:aa:8c:01:b3:70:
                    56:f0:fc:10:42:d3:13:aa:a8:48:db:2e:25:ab:3e:
                    c8:8b:ae:b4:cf:60:24:bd:b4:db:f9:90:dc:be:e5:
                    c6:3f:b6:93:8b:b0:b1:ca:2a:fe:89:99:b0:5c:73:
                    c6:39:ce:59:bf:7d:1d:8c:f7:1b:70:df:dc:45:f9:
                    6e:60:8d:d2:46:97:5c:4b:90:dd:ca:08:d6:32:2f:
                    c0:88:04:79:f6:3f:13:54:22:39:02:92:f5:76:16:
                    6b:90:e4:47:83:51:84:8e:4d:ad:65:e0:8c:d6:1c:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E1:FC:31:46:24:AE:01:B1:F6:36:98:C5:9E:A8:57:92:76:CD:A2
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e20323135373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.84.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:bb:ba:c3:51:36:25:62:8b:c3:77:92:9b:35:6b:98:73:
         f4:9d:30:36:17:10:49:1a:3c:da:74:04:57:c2:93:7f:c5:cf:
         a9:b9:16:d4:bc:cb:84:6a:a7:86:82:7f:7c:7f:78:93:72:96:
         5d:14:70:b8:c9:5a:ea:5d:42:d9:c6:29:b0:ac:c6:e3:d3:6f:
         c0:fa:25:41:56:80:39:52:50:07:9d:34:72:c9:db:b9:0e:c0:
         99:81:9d:5f:c0:4f:13:b0:48:18:49:7d:be:cd:ab:6a:e1:d6:
         32:44:92:e3:09:6a:9d:5c:12:b2:71:b7:11:56:8d:05:66:2e:
         74:a2:df:84:9e:a6:10:17:60:98:31:26:76:f4:21:d4:76:de:
         b7:e5:f2:d1:36:2f:61:66:6f:f0:7a:03:a7:ee:2b:a1:45:c9:
         e0:a5:d1:26:0c:b9:bd:71:74:d0:2e:8b:3e:83:bd:83:7e:92:
         e9:7f:40:ff:bf:01:c2:20:8d:9c:14:16:0e:8d:30:2b:fb:b2:
         15:9c:0b:c4:b8:93:0a:7a:71:b4:99:38:71:6c:00:51:77:11:
         7f:bb:1b:6a:db:7b:8f:40:6b:eb:24:02:cc:9b:0b:64:49:3c:
         71:fc:90:a0:96:e9:f7:80:ff:f7:c6:2e:82:cc:49:66:ec:29:
         41:02:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:20 2026 by rpki-client