Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136312e302f32342d3234203d3e203137373639.roa
File:                     3230322e35352e3136312e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier:          9xtEdFzAB80FwrQeLNDM7rSU/gkFaTqJkWIBciNjwe8=
Subject key identifier:   01:18:E5:F1:8B:72:6D:85:9B:CC:12:2E:F1:08:79:09:CC:44:5E:DF
Certificate issuer:       /CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
Certificate serial:       3F324B8340F2F08ECD1E7AA357B44F95D9BFE88C
Authority key identifier: 50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136312e302f32342d3234203d3e203137373639.roa
Signing time:             Sun 03 May 2026 02:14:26 +0000
ROA not before:           Sun 03 May 2026 02:09:26 +0000
ROA not after:            Sun 02 May 2027 02:14:26 +0000
asID:                     17769
IP address blocks:        202.55.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl
                          rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:32:4b:83:40:f2:f0:8e:cd:1e:7a:a3:57:b4:4f:95:d9:bf:e8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
        Validity
            Not Before: May  3 02:09:26 2026 GMT
            Not After : May  2 02:14:26 2027 GMT
        Subject: CN=0118E5F18B726D859BCC122EF1087909CC445EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:96:79:36:4e:f6:59:1d:fd:41:66:37:ac:
                    00:6e:e0:49:bf:a3:94:9f:da:84:a1:14:f8:a3:49:
                    20:53:51:ea:5f:a3:1a:d8:c3:93:b0:73:e6:7c:e0:
                    ec:aa:20:4a:09:63:6c:1f:0b:d4:67:ff:98:09:f7:
                    6e:b7:0d:9c:f8:f2:dd:0b:0c:67:8d:c7:ce:ca:90:
                    df:bb:f0:6e:14:2a:ce:58:4a:82:bb:da:4e:07:4c:
                    b2:0c:ec:72:cb:11:f8:b0:88:fe:35:0c:d5:ac:94:
                    a1:b0:ed:5c:95:4d:ae:f0:67:f3:2a:0d:e1:b0:8a:
                    40:1f:6a:8f:ff:36:2e:dc:3c:80:52:b9:0a:e7:4a:
                    d1:ea:1a:52:3b:91:de:a7:e8:df:87:ac:14:fc:4c:
                    cd:85:6a:64:ad:f4:6a:f0:66:84:29:f4:08:06:77:
                    22:ec:e8:7e:fd:1e:c0:cd:91:72:8a:4f:1b:fd:b0:
                    eb:3f:0d:19:38:74:71:71:10:1d:f8:87:a1:f2:7c:
                    f4:44:66:22:7c:1c:09:57:77:5a:70:08:81:65:0f:
                    7a:c0:18:5f:88:ce:bd:65:fa:96:fa:e9:7e:d4:54:
                    41:32:5f:f0:38:21:40:b7:44:56:4a:8a:a8:25:b4:
                    b3:1c:3f:e6:04:ff:d1:c5:42:22:dc:1c:93:75:27:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:18:E5:F1:8B:72:6D:85:9B:CC:12:2E:F1:08:79:09:CC:44:5E:DF
            X509v3 Authority Key Identifier:
                keyid:50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136312e302f32342d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e9:52:72:d1:60:4c:af:eb:bb:d0:99:ca:d3:8c:b9:a0:c7:
         51:4e:1f:77:8d:bf:a0:0b:10:1f:f1:4a:18:d1:c0:9a:61:91:
         ae:64:dd:3b:40:6c:b4:f3:f3:47:90:ac:56:f8:b3:b3:92:e9:
         31:6d:bf:0c:fc:28:0e:d6:99:0c:5d:c6:e8:96:79:a2:ad:de:
         ac:a6:69:f6:45:57:10:e0:54:ca:ba:52:06:b4:2b:dc:5a:2c:
         1b:ce:0a:6a:c3:a4:8e:e1:fb:f8:83:22:4a:56:00:e3:01:1c:
         f9:32:8d:2d:2c:30:a4:ec:fe:22:b8:50:f0:ed:6b:9e:8c:2a:
         1a:06:4a:d1:aa:f5:db:8a:fd:98:4c:e1:30:db:8d:fb:ba:bd:
         40:c5:89:78:86:75:ab:da:36:eb:5a:6f:23:88:97:06:9f:66:
         68:14:b1:3d:90:a4:99:55:96:20:5c:0c:0c:cf:7d:be:00:03:
         77:78:af:05:a5:41:b0:49:5d:c4:16:f1:29:4a:73:83:2a:e2:
         3a:fa:0b:51:55:ff:22:3c:dc:90:f5:3f:f6:b3:67:28:a0:5a:
         f4:9c:b1:84:e6:2a:87:03:8c:3e:a3:ef:f9:17:c3:05:93:1f:
         0a:cb:e0:6c:11:68:5c:49:b1:ab:df:fc:43:97:9f:46:18:f3:
         11:05:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:38 2026 by rpki-client