Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/3230322e37352e31362e302f32302d3234203d3e203338373834.roa
File:                     3230322e37352e31362e302f32302d3234203d3e203338373834.roa (raw, json)
Hash identifier:          fcRpAOgXJGgXnuhp6dR+nLQETgHc7bHGej7K9bp+jl4=
Subject key identifier:   4C:7C:B6:8F:F5:F7:F6:B8:7E:83:A9:8A:80:F1:F0:DB:48:34:3C:E5
Certificate issuer:       /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E
Certificate serial:       6CE115415DD41DF2C753B348CF41D7EED728C26D
Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/3230322e37352e31362e302f32302d3234203d3e203338373834.roa
Signing time:             Sun 03 May 2026 03:04:52 +0000
ROA not before:           Sun 03 May 2026 02:59:52 +0000
ROA not after:            Sun 02 May 2027 03:04:52 +0000
asID:                     38784
IP address blocks:        202.75.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl
                          rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 00:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e1:15:41:5d:d4:1d:f2:c7:53:b3:48:cf:41:d7:ee:d7:28:c2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E
        Validity
            Not Before: May  3 02:59:52 2026 GMT
            Not After : May  2 03:04:52 2027 GMT
        Subject: CN=4C7CB68FF5F7F6B87E83A98A80F1F0DB48343CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:39:6d:a4:e4:49:18:f0:94:77:25:38:0d:a3:
                    7b:68:3b:b6:97:f3:bd:d2:7c:da:15:29:ab:c9:e8:
                    c8:c1:23:91:f3:e5:76:7f:40:ec:d2:a4:66:a9:9f:
                    08:a3:4c:3a:16:16:4a:a0:81:50:89:68:a9:9d:c9:
                    11:44:77:ff:14:0e:b0:d9:d6:b0:dd:29:90:6d:66:
                    e0:a7:75:65:cc:04:68:74:b0:0a:23:46:03:64:f2:
                    4b:b5:61:84:33:0c:5e:5e:37:9b:6f:46:38:ca:8d:
                    ee:d7:2f:ba:65:19:a3:c7:13:40:eb:39:2d:3a:0d:
                    36:74:93:23:e1:41:13:5d:95:b4:71:1e:5b:0f:cf:
                    e6:a2:2e:fe:8b:8f:ef:07:93:4f:a4:d8:3f:bf:15:
                    7b:fe:e8:0d:7e:9a:7b:ee:05:6e:ba:9a:3b:17:7f:
                    a7:80:2f:53:75:97:48:86:c4:f6:9b:8d:6d:49:5c:
                    0f:1c:55:eb:be:c2:55:d9:00:74:f8:c0:e3:84:38:
                    80:ef:b9:e3:ec:af:ee:93:58:1a:b1:d0:9b:47:e8:
                    2e:ef:50:06:cb:a0:62:6a:85:f8:b5:87:5d:f6:04:
                    5a:1e:16:8a:56:1c:8f:bd:cf:21:0a:3e:03:e4:23:
                    9d:98:9d:e0:a6:4d:53:bc:3b:f7:2c:3d:8b:24:15:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7C:B6:8F:F5:F7:F6:B8:7E:83:A9:8A:80:F1:F0:DB:48:34:3C:E5
            X509v3 Authority Key Identifier:
                keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/3230322e37352e31362e302f32302d3234203d3e203338373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:41:a1:9e:15:bc:e8:87:88:b4:c3:31:a7:73:e5:f6:01:8a:
         c8:75:00:bb:f5:d7:ae:e0:6e:9e:0f:dc:4e:22:f8:eb:8a:1b:
         fc:c0:18:1b:2b:ab:eb:41:80:b1:3a:b9:c4:53:70:0b:e6:ba:
         35:bb:7a:f1:20:5e:de:86:47:a0:f0:d4:f3:b0:9d:6c:0a:d5:
         80:ec:e1:84:ac:eb:ed:8a:77:16:1a:66:ff:25:40:89:23:48:
         db:48:01:73:28:bd:f6:3c:a5:00:dc:95:95:df:ab:b0:2c:4d:
         00:65:65:d5:ae:fc:0e:57:02:89:7d:86:44:ea:36:cd:84:0f:
         30:c0:af:11:9e:75:c7:8e:68:ec:df:59:e9:60:51:c5:4f:e3:
         70:3d:4c:5a:77:b3:1d:cb:18:e5:95:e5:b3:46:2d:70:6b:95:
         2e:35:9d:6d:8d:e8:5e:da:7c:cc:af:54:9f:e7:29:2a:99:9d:
         f1:12:c7:ea:03:de:52:b1:65:36:06:e0:be:93:ec:90:56:64:
         28:74:c3:0b:d4:c3:35:29:bc:fc:df:69:c6:1b:4b:28:68:30:
         0f:90:15:6f:0b:b1:8b:a2:49:f2:cc:c6:c0:5f:f3:23:bf:f5:
         2a:5e:e3:4f:c0:3c:c5:d0:01:5c:26:da:d5:fc:0f:19:f6:53:
         31:69:31:ea
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbOEVQV3UHfLHU7NIz0HX7tcowm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3
NTAxQ0U2RTAeFw0yNjA1MDMwMjU5NTJaFw0yNzA1MDIwMzA0NTJaMDMxMTAvBgNV
BAMTKDRDN0NCNjhGRjVGN0Y2Qjg3RTgzQTk4QTgwRjFGMERCNDgzNDNDRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOW2k5EkY8JR3JTgNo3toO7aX
873SfNoVKavJ6MjBI5Hz5XZ/QOzSpGapnwijTDoWFkqggVCJaKmdyRFEd/8UDrDZ
1rDdKZBtZuCndWXMBGh0sAojRgNk8ku1YYQzDF5eN5tvRjjKje7XL7plGaPHE0Dr
OS06DTZ0kyPhQRNdlbRxHlsPz+aiLv6Lj+8Hk0+k2D+/FXv+6A1+mnvuBW66mjsX
f6eAL1N1l0iGxPabjW1JXA8cVeu+wlXZAHT4wOOEOIDvuePsr+6TWBqx0JtH6C7v
UAbLoGJqhfi1h132BFoeFopWHI+9zyEKPgPkI52YneCmTVO8O/csPYskFWm/AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUTHy2j/X39rh+g6mKgPHw20g0POUwHwYDVR0j
BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC
OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD
RTZFLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M0NTQ3MTA0LTkzOWUtNDBlMy04
ZmM4LTQyNTIyNjQyMDQ0Yi8wLzMyMzAzMjJlMzczNTJlMzEzNjJlMzAyZjMyMzAy
ZDMyMzQyMDNkM2UyMDMzMzgzNzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKSxAwDQYJKoZIhvcN
AQELBQADggEBAK9BoZ4VvOiHiLTDMadz5fYBish1ALv1167gbp4P3E4i+OuKG/zA
GBsrq+tBgLE6ucRTcAvmujW7evEgXt6GR6Dw1POwnWwK1YDs4YSs6+2KdxYaZv8l
QIkjSNtIAXMovfY8pQDclZXfq7AsTQBlZdWu/A5XAol9hkTqNs2EDzDArxGedceO
aOzfWelgUcVP43A9TFp3sx3LGOWV5bNGLXBrlS41nW2N6F7afMyvVJ/nKSqZnfES
x+oD3lKxZTYG4L6T7JBWZCh0wwvUwzUpvPzfacYbSyhoMA+QFW8LsYuiSfLMxsBf
8yO/9Spe40/APMXQAVwm2tX8Dxn2UzFpMeo=
-----END CERTIFICATE-----
Generated at Thu May 7 04:31:29 2026 by rpki-client