Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136302e302f32342d3234203d3e203137373639.roa
File:                     3230322e35352e3136302e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier:          8wq7NUfqKF5ZxnQyf6WDuSraHBCGSOkrkKjk8iJ76XY=
Subject key identifier:   E6:3A:E1:74:5A:48:49:65:12:B9:51:7A:1B:A1:08:E5:A4:3D:53:A8
Certificate issuer:       /CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
Certificate serial:       50CC53BD54D06488117C66B0D8B00AE2492BA4F0
Authority key identifier: 50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136302e302f32342d3234203d3e203137373639.roa
Signing time:             Sun 03 May 2026 02:14:28 +0000
ROA not before:           Sun 03 May 2026 02:09:28 +0000
ROA not after:            Sun 02 May 2027 02:14:28 +0000
asID:                     17769
IP address blocks:        202.55.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl
                          rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cc:53:bd:54:d0:64:88:11:7c:66:b0:d8:b0:0a:e2:49:2b:a4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
        Validity
            Not Before: May  3 02:09:28 2026 GMT
            Not After : May  2 02:14:28 2027 GMT
        Subject: CN=E63AE1745A48496512B9517A1BA108E5A43D53A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:b4:a3:20:0e:cc:c8:fd:cb:8d:9a:d4:3b:
                    6a:6e:d6:98:9c:9a:3d:b3:b9:f4:f8:3a:ab:5a:93:
                    6d:75:a0:19:0d:6e:13:b2:68:7d:54:0d:e6:db:d4:
                    ec:bf:dd:79:5d:6d:33:22:01:c7:fd:d5:5e:e2:6f:
                    33:b7:f3:db:7a:c9:06:d1:c0:80:47:04:29:16:3e:
                    0d:a2:db:6d:3f:59:b6:a8:7e:a0:0c:96:ae:23:e1:
                    15:68:41:65:7c:c0:03:d9:19:b6:99:06:ea:97:62:
                    48:cc:35:69:aa:66:65:01:39:b1:1e:e2:86:6f:2c:
                    7c:6f:b1:cf:da:80:de:d3:5c:03:8b:9c:d4:c3:91:
                    6c:17:86:c7:23:a7:27:95:a4:e4:85:75:73:0a:49:
                    2b:28:42:b2:40:a8:de:99:27:8f:04:3a:2f:0b:0e:
                    eb:09:b1:17:c5:09:a8:1d:8b:9c:22:4a:5e:14:71:
                    76:2e:d6:ef:56:26:c3:cb:45:e2:ac:15:25:09:f9:
                    5c:8b:8d:42:99:61:43:b5:ed:8f:32:40:08:fa:c6:
                    5d:5c:98:cb:f7:9e:38:98:98:7e:0b:de:9f:7c:33:
                    b0:fe:41:31:73:a0:7b:9a:4f:2a:04:ee:c6:26:0f:
                    7e:8b:15:4c:7e:9e:93:0f:da:38:69:d4:3b:ad:cc:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3A:E1:74:5A:48:49:65:12:B9:51:7A:1B:A1:08:E5:A4:3D:53:A8
            X509v3 Authority Key Identifier:
                keyid:50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136302e302f32342d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:00:89:ba:14:31:79:63:60:09:a0:e9:10:65:2c:65:75:49:
         e0:b2:2e:6d:5e:e3:a3:8c:e1:ff:33:9e:c8:f9:c2:f5:4c:b4:
         30:3e:ee:4d:5c:13:b0:6b:60:19:41:f9:6c:d0:75:d6:75:f1:
         61:11:be:37:95:0a:9a:50:6d:f3:ca:01:b6:9c:f8:af:3c:78:
         b6:ac:2f:81:25:f6:e6:43:d0:3b:5e:53:e5:d3:2e:14:67:13:
         85:28:c3:f2:4a:a7:90:81:4a:f0:e0:b2:23:7a:f3:7e:0e:c4:
         ff:37:1d:89:08:4b:d8:49:95:ed:db:23:1e:45:26:c2:2e:fc:
         62:a2:30:cc:6b:bc:e8:9e:90:a0:3d:98:17:a1:bb:00:b3:35:
         97:fa:94:fc:f7:f9:fb:bd:86:2e:fc:a1:51:e5:bf:18:ca:67:
         08:32:16:e2:4b:39:77:74:66:7d:d2:f5:7f:a0:93:8a:47:9c:
         14:9b:6d:2d:9e:00:26:9e:f0:d2:d1:e4:56:69:c4:a0:1a:d3:
         7a:71:86:f1:86:5b:3f:fd:40:08:e5:b5:84:f4:1c:64:8f:45:
         bc:93:37:57:4f:f5:41:3c:ac:a4:2a:a2:c3:d0:db:7c:5b:68:
         02:44:4c:c3:45:df:12:e1:f6:b8:96:33:c3:16:5b:dc:11:b9:
         bc:b5:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:27 2026 by rpki-client