Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/3230322e37352e32382e302f32332d3234203d3e20313338383731.roa
File:                     3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (raw, json)
Hash identifier:          NrNEWLl4Yx21veR5eL8Fv+Q89ar/aJs2ToJ3iBjGoNw=
Subject key identifier:   E5:B1:B1:81:8E:7E:98:A9:EE:5D:97:C1:88:DC:38:F5:61:8A:A9:19
Certificate issuer:       /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E
Certificate serial:       4E7F04DD0E3DE6E127938357F8035084278D32B9
Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/3230322e37352e32382e302f32332d3234203d3e20313338383731.roa
Signing time:             Sun 03 May 2026 03:04:51 +0000
ROA not before:           Sun 03 May 2026 02:59:51 +0000
ROA not after:            Sun 02 May 2027 03:04:51 +0000
asID:                     138871
IP address blocks:        202.75.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl
                          rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 May 2026 04:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7f:04:dd:0e:3d:e6:e1:27:93:83:57:f8:03:50:84:27:8d:32:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E
        Validity
            Not Before: May  3 02:59:51 2026 GMT
            Not After : May  2 03:04:51 2027 GMT
        Subject: CN=E5B1B1818E7E98A9EE5D97C188DC38F5618AA919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:66:33:c8:09:e6:ab:62:01:0f:3e:43:46:
                    e7:54:09:94:af:47:98:de:20:f5:df:e1:85:55:8d:
                    43:30:55:e4:15:52:5b:af:d6:75:c3:3d:90:b1:63:
                    31:bb:88:7d:d2:22:e9:9b:af:85:96:8b:25:62:8f:
                    d7:9d:86:9d:53:85:05:18:26:32:b4:05:67:12:f2:
                    b4:f5:27:df:d2:2a:6f:79:2a:96:13:38:be:04:4f:
                    44:10:6a:3b:77:1f:f5:83:05:26:f6:8c:2c:10:67:
                    8a:ca:2b:3e:9b:d4:a4:97:31:29:da:dd:3b:95:a4:
                    69:02:85:fd:87:c6:0c:1e:04:2f:92:87:f0:85:9c:
                    18:08:e7:1f:85:7b:ae:03:b0:2c:af:1a:db:06:6f:
                    9b:ff:68:c5:04:2f:7c:64:e6:b6:56:fa:5a:48:21:
                    0e:cf:6c:0d:92:2a:6e:4d:38:f2:cc:01:a3:a0:54:
                    83:9a:c9:17:27:48:70:42:07:7b:5b:4d:d4:f6:33:
                    05:d9:e4:4b:41:65:ea:ca:8e:ac:0a:81:ae:ca:0a:
                    a9:49:8d:5d:b8:7c:89:14:5b:9c:af:76:1f:4f:41:
                    10:7a:dc:12:08:7b:2a:ca:2f:e8:3f:60:cb:45:02:
                    85:47:48:e6:a1:89:81:bd:d8:54:1c:80:94:bd:99:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B1:B1:81:8E:7E:98:A9:EE:5D:97:C1:88:DC:38:F5:61:8A:A9:19
            X509v3 Authority Key Identifier:
                keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/3230322e37352e32382e302f32332d3234203d3e20313338383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:2d:bf:10:c4:2d:0d:02:f8:af:cf:56:71:f1:57:4f:77:46:
         05:90:03:7f:3d:cd:1b:34:a4:c2:fb:96:42:19:a4:94:49:23:
         b7:94:51:ed:fc:3d:f7:6e:4b:a0:06:2b:84:c3:d3:63:15:34:
         46:34:7c:9c:c3:0c:8e:d1:39:fe:58:06:7e:c8:01:0a:de:34:
         38:ad:50:17:b1:b5:ff:87:b4:f9:86:40:37:59:b1:54:55:8e:
         0f:ca:4a:b5:73:c2:72:fc:3f:19:44:51:5b:4f:73:bf:81:83:
         b0:2d:72:be:39:ee:bb:1c:7c:ae:d3:8e:59:0c:06:74:94:9d:
         af:0c:2f:eb:b2:c1:fa:bb:95:e6:32:b0:a4:cb:89:2d:b8:e1:
         b2:37:72:33:1f:53:65:6d:ba:f5:53:87:e1:f9:94:34:a2:04:
         fa:71:9e:93:25:e1:db:8b:e1:56:01:9b:6d:f3:2b:5b:8c:94:
         52:53:82:f1:99:9d:2d:06:c7:f5:ed:b0:bd:04:fb:22:be:88:
         f1:de:0b:39:22:9e:78:f4:f5:7c:70:96:3c:93:30:f4:8a:fd:
         f7:59:ff:df:b3:5a:c6:17:e7:36:5f:ab:22:0f:c3:5f:57:a8:
         ef:85:7a:5c:a8:c4:dd:a3:f7:35:31:a8:a3:55:ab:8d:e3:f3:
         06:52:fe:fa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTn8E3Q495uEnk4NX+ANQhCeNMrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3
NTAxQ0U2RTAeFw0yNjA1MDMwMjU5NTFaFw0yNzA1MDIwMzA0NTFaMDMxMTAvBgNV
BAMTKEU1QjFCMTgxOEU3RTk4QTlFRTVEOTdDMTg4REMzOEY1NjE4QUE5MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73WYzyAnmq2IBDz5DRudUCZSv
R5jeIPXf4YVVjUMwVeQVUluv1nXDPZCxYzG7iH3SIumbr4WWiyVij9edhp1ThQUY
JjK0BWcS8rT1J9/SKm95KpYTOL4ET0QQajt3H/WDBSb2jCwQZ4rKKz6b1KSXMSna
3TuVpGkChf2HxgweBC+Sh/CFnBgI5x+Fe64DsCyvGtsGb5v/aMUEL3xk5rZW+lpI
IQ7PbA2SKm5NOPLMAaOgVIOayRcnSHBCB3tbTdT2MwXZ5EtBZerKjqwKga7KCqlJ
jV24fIkUW5yvdh9PQRB63BIIeyrKL+g/YMtFAoVHSOahiYG92FQcgJS9mTmfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5bGxgY5+mKnuXZfBiNw49WGKqRkwHwYDVR0j
BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC
OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD
RTZFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M0NTQ3MTA0LTkzOWUtNDBlMy04
ZmM4LTQyNTIyNjQyMDQ0Yi8wLzMyMzAzMjJlMzczNTJlMzIzODJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzMzODM4MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcpLHDANBgkqhkiG
9w0BAQsFAAOCAQEAhS2/EMQtDQL4r89WcfFXT3dGBZADfz3NGzSkwvuWQhmklEkj
t5RR7fw9925LoAYrhMPTYxU0RjR8nMMMjtE5/lgGfsgBCt40OK1QF7G1/4e0+YZA
N1mxVFWOD8pKtXPCcvw/GURRW09zv4GDsC1yvjnuuxx8rtOOWQwGdJSdrwwv67LB
+ruV5jKwpMuJLbjhsjdyMx9TZW269VOH4fmUNKIE+nGekyXh24vhVgGbbfMrW4yU
UlOC8ZmdLQbH9e2wvQT7Ir6I8d4LOSKeePT1fHCWPJMw9Ir991n/37NaxhfnNl+r
Ig/DX1eo74V6XKjE3aP3NTGoo1WrjePzBlL++g==
-----END CERTIFICATE-----
Generated at Sat May 9 09:34:02 2026 by rpki-client