Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa
File:                     3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (raw, json)
Hash identifier:          HxnQcYIcwwdsUZsxFsSSsCIoNihJwjIt/Bw8jqjEhmo=
Subject key identifier:   FC:2C:61:D3:CD:58:44:C4:63:AC:8B:8D:61:D2:CA:E0:B4:C8:93:04
Certificate issuer:       /CN=726B10587DC8302315E9E3780C53B1A569B9D4C5
Certificate serial:       1113750E492C874D9CC039405D1AFB8215866740
Authority key identifier: 72:6B:10:58:7D:C8:30:23:15:E9:E3:78:0C:53:B1:A5:69:B9:D4:C5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/726B10587DC8302315E9E3780C53B1A569B9D4C5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa
Signing time:             Sun 03 May 2026 02:12:23 +0000
ROA not before:           Sun 03 May 2026 02:07:23 +0000
ROA not after:            Sun 02 May 2027 02:12:23 +0000
asID:                     152033
IP address blocks:        202.47.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/726B10587DC8302315E9E3780C53B1A569B9D4C5.crl
                          rsync://rpki-rsync.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/726B10587DC8302315E9E3780C53B1A569B9D4C5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/726B10587DC8302315E9E3780C53B1A569B9D4C5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:13:75:0e:49:2c:87:4d:9c:c0:39:40:5d:1a:fb:82:15:86:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=726B10587DC8302315E9E3780C53B1A569B9D4C5
        Validity
            Not Before: May  3 02:07:23 2026 GMT
            Not After : May  2 02:12:23 2027 GMT
        Subject: CN=FC2C61D3CD5844C463AC8B8D61D2CAE0B4C89304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a7:11:0b:c4:ca:4d:cb:7e:af:2c:c6:25:94:
                    89:8f:84:bf:b3:ef:f5:ac:5e:65:5b:41:7f:6e:25:
                    91:f4:24:6d:68:c3:38:11:f6:d3:84:9f:02:7c:ae:
                    bf:8b:6c:93:fb:8f:37:8a:be:71:16:11:b3:b9:1e:
                    90:95:36:ee:c8:29:08:be:bd:18:7c:28:07:49:08:
                    18:8a:fd:62:64:8e:63:ca:3c:f0:ea:53:71:7b:84:
                    45:33:42:b6:d6:79:0e:1b:99:b3:9f:56:14:75:a1:
                    4f:21:66:20:34:61:c1:56:66:23:ce:3f:58:52:16:
                    bc:dc:a8:84:ad:92:84:f0:30:c6:f0:eb:d2:f9:ff:
                    a5:f5:81:dc:b9:94:f2:55:a5:0c:b6:9e:7a:7d:5f:
                    cc:44:c1:ea:4a:de:f2:67:ec:63:c1:4c:ca:4b:69:
                    67:73:64:d7:67:05:0f:f2:2d:46:0d:de:af:0b:d1:
                    25:75:07:d7:aa:67:e4:8d:f3:60:6e:cc:3e:57:72:
                    f0:da:60:89:79:92:11:9f:57:3b:0a:b6:a8:ec:1a:
                    09:20:83:52:59:69:dd:1e:e1:26:8e:ce:a8:f5:d0:
                    d6:da:93:35:53:60:2c:6b:50:85:f5:d5:97:18:e2:
                    7c:e9:d3:56:a6:bb:25:06:30:ce:a4:68:b4:20:de:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2C:61:D3:CD:58:44:C4:63:AC:8B:8D:61:D2:CA:E0:B4:C8:93:04
            X509v3 Authority Key Identifier:
                keyid:72:6B:10:58:7D:C8:30:23:15:E9:E3:78:0C:53:B1:A5:69:B9:D4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/726B10587DC8302315E9E3780C53B1A569B9D4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/726B10587DC8302315E9E3780C53B1A569B9D4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b1:39:71:68:9a:9a:64:48:92:9d:fe:32:05:bb:6c:13:7d:
         2e:26:c9:17:6f:25:86:bd:59:4e:d9:73:1d:c9:f2:9a:dc:00:
         84:28:fb:e2:14:09:56:ae:30:02:f5:7e:d7:31:a8:22:fb:6a:
         86:ee:bf:66:d3:0f:1e:ae:55:70:a4:65:cc:21:98:87:49:55:
         93:84:05:01:4f:ef:49:23:c3:c4:63:19:29:c6:17:e3:33:67:
         c9:2b:a1:09:35:0f:19:96:63:50:43:44:df:cc:40:9a:e0:17:
         2b:11:ef:18:15:26:13:9d:13:bf:87:89:4f:de:6a:b9:73:65:
         90:82:07:d1:9e:a5:10:80:03:e4:ae:c6:c6:39:f9:33:c3:8a:
         75:77:38:ac:82:67:81:49:05:41:ac:96:c5:ea:d2:71:14:04:
         94:19:d7:d9:cb:89:75:b1:ab:4e:68:59:9a:e9:0a:64:39:ca:
         24:b4:96:0c:c1:18:d6:67:9d:c2:a7:70:12:42:10:e0:ef:f5:
         db:fa:d6:61:6f:48:b9:4d:5e:4f:90:86:83:25:31:00:cb:6b:
         ec:ab:4f:e1:63:fe:6d:f9:16:eb:4c:a7:c7:7b:5d:b3:57:d2:
         f2:fc:a4:fe:51:39:fa:f0:fb:4f:34:6e:b3:1b:be:ed:a6:bc:
         e2:8d:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:26 2026 by rpki-client