Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3232203d3e2039393035.roa
File:                     3230322e3133372e302e302f32322d3232203d3e2039393035.roa (raw, json)
Hash identifier:          TKa4aDLU38X5q+Doa0Ay8zWK+5zVcgOOux9Jxm1CmbM=
Subject key identifier:   73:C8:39:9D:72:1F:0D:FD:F9:84:16:59:0E:48:BE:DD:1B:46:77:CA
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       62B01E2009197F9C6327BB84579541DDF3F701C6
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3232203d3e2039393035.roa
Signing time:             Tue 17 Mar 2026 16:00:01 +0000
ROA not before:           Tue 17 Mar 2026 15:55:01 +0000
ROA not after:            Tue 16 Mar 2027 16:00:01 +0000
asID:                     9905
IP address blocks:        202.137.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 09:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b0:1e:20:09:19:7f:9c:63:27:bb:84:57:95:41:dd:f3:f7:01:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: Mar 17 15:55:01 2026 GMT
            Not After : Mar 16 16:00:01 2027 GMT
        Subject: CN=73C8399D721F0DFDF98416590E48BEDD1B4677CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:0e:ec:fc:a0:bd:76:c9:83:1f:39:52:84:
                    cd:a3:56:c6:a9:16:fe:f6:41:72:ff:3e:66:d1:72:
                    30:38:5c:1f:97:9d:b4:62:4f:fe:45:de:eb:7e:db:
                    69:2e:84:29:7d:ea:53:fa:df:80:23:c8:96:bc:51:
                    c7:b4:9d:5e:cb:5a:50:52:e8:b1:21:17:7c:cf:3a:
                    31:37:6c:d1:17:3a:28:dc:ba:e6:d7:84:55:8a:17:
                    6b:6f:ea:cb:75:15:5c:f8:33:bb:41:ee:4c:6a:92:
                    05:50:ec:a8:54:ee:0e:bc:d7:21:af:d1:8a:0e:e5:
                    ac:ba:c0:b4:ef:7d:7b:f8:dd:89:5d:de:4e:ab:a4:
                    c3:c8:f2:9a:44:df:c0:1a:59:a9:11:6a:88:de:07:
                    b9:1a:40:aa:10:17:0e:b4:96:4f:2d:87:f3:2c:2f:
                    bb:b3:b6:7d:b6:4b:ce:a3:80:89:df:54:a0:e2:60:
                    1e:30:73:1c:56:83:0c:f6:5f:ac:c7:cf:cc:85:ff:
                    d8:27:39:21:ff:1d:c2:49:11:00:19:8f:ed:43:76:
                    81:d0:52:86:f4:cc:c9:96:24:f7:d3:75:4b:03:10:
                    9d:f7:a6:37:bb:7a:01:db:a1:b6:df:5d:a8:13:9e:
                    fa:46:6e:ae:52:22:6f:fb:06:ec:8a:6e:a7:22:97:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C8:39:9D:72:1F:0D:FD:F9:84:16:59:0E:48:BE:DD:1B:46:77:CA
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3232203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.137.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:6b:d6:a8:1c:b3:4d:5b:17:3e:d1:71:89:f7:a3:85:5c:9f:
         3a:ba:bd:aa:65:a9:ed:5c:95:1b:ec:69:74:25:e4:70:a6:c5:
         e5:aa:71:06:ad:7d:34:72:40:3e:d7:90:65:15:84:df:b8:cf:
         55:42:99:01:96:bb:5a:3e:c8:78:0e:8a:94:be:41:54:cc:37:
         7b:13:8f:30:14:4f:98:88:fb:51:31:0a:95:a7:eb:19:d1:e7:
         ba:1a:58:f0:4a:25:1b:e6:65:99:ed:cd:16:c1:bb:18:5c:a3:
         ec:e6:2e:4a:a8:63:51:a8:fd:94:49:9f:cd:ec:0d:ed:73:ad:
         7a:78:10:d7:2b:2f:d0:9c:47:9f:03:7f:48:fb:2c:4f:90:67:
         52:d4:24:81:15:8d:ab:d5:8b:b4:71:b8:62:c4:fc:fa:9e:bc:
         83:37:fe:d8:52:4f:42:8b:69:6a:ab:a5:1f:e4:93:73:1b:7c:
         7f:00:5b:6c:72:fc:8a:ff:8a:fa:22:c8:95:ec:76:37:2f:34:
         0a:a8:07:bb:a2:43:b4:d3:d5:80:ab:fa:0f:1b:86:53:fb:ff:
         dd:1f:78:f6:9c:4b:f0:fb:fb:f6:a3:9f:3d:53:12:48:f8:e4:
         38:6f:1e:03:1f:3f:bf:8a:b2:96:7e:00:90:8c:a2:6f:16:3e:
         04:1a:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:55 2026 by rpki-client