Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136332e302f32342d3234203d3e203137373639.roa
File:                     3230322e35352e3136332e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier:          VcCCZhXGi3x7CJAa5Vgdu2YB8uCWuLRBDzLErOIAwpg=
Subject key identifier:   6C:97:35:A9:91:5B:FF:1D:F1:DB:D3:8B:07:B9:97:9F:A3:16:D1:6E
Certificate issuer:       /CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
Certificate serial:       41E4837398FDC896952CA773E1646A739EC1BEF4
Authority key identifier: 50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136332e302f32342d3234203d3e203137373639.roa
Signing time:             Sun 03 May 2026 02:14:24 +0000
ROA not before:           Sun 03 May 2026 02:09:24 +0000
ROA not after:            Sun 02 May 2027 02:14:24 +0000
asID:                     17769
IP address blocks:        202.55.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl
                          rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e4:83:73:98:fd:c8:96:95:2c:a7:73:e1:64:6a:73:9e:c1:be:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
        Validity
            Not Before: May  3 02:09:24 2026 GMT
            Not After : May  2 02:14:24 2027 GMT
        Subject: CN=6C9735A9915BFF1DF1DBD38B07B9979FA316D16E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:45:c1:3a:1f:8f:a1:eb:4a:93:33:65:56:
                    a5:34:9b:75:ae:d1:cf:95:6b:f6:d8:65:41:4d:76:
                    e6:68:9d:b6:78:40:a0:4c:7d:5a:c0:9b:26:64:dd:
                    df:e5:3f:93:cc:09:f3:54:74:67:f8:35:68:eb:e4:
                    37:db:89:37:7e:02:06:5f:6a:a5:ef:c7:b6:af:14:
                    65:86:85:dd:e2:1f:cf:5d:e7:a8:23:4e:0c:cc:ec:
                    96:50:8c:b6:d8:25:d3:3d:dc:62:73:69:3b:88:54:
                    e9:a3:86:53:bc:23:e0:fe:88:34:91:65:2a:16:b8:
                    37:db:67:d9:27:fb:ba:5b:ce:ac:69:8c:7a:25:22:
                    bb:cd:06:ed:e3:94:28:d8:5b:7d:ef:ac:d6:d6:bc:
                    22:5a:eb:b7:9c:55:25:08:15:ea:3a:40:63:da:aa:
                    c0:9e:05:8e:b4:cd:51:5f:f1:6c:1c:16:a4:8a:56:
                    db:6f:c3:44:af:6d:59:2f:1c:8c:02:1d:8d:80:07:
                    69:2b:30:b5:2d:28:73:c0:25:b4:5b:38:2f:35:69:
                    e1:23:0b:8b:62:3d:21:3e:63:bc:90:16:67:cb:e6:
                    30:81:55:0f:60:84:cc:02:3f:76:1c:c0:32:ce:64:
                    63:b0:aa:a7:b9:dc:ac:7a:e3:f7:80:2b:5a:2a:fd:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:97:35:A9:91:5B:FF:1D:F1:DB:D3:8B:07:B9:97:9F:A3:16:D1:6E
            X509v3 Authority Key Identifier:
                keyid:50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136332e302f32342d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b4:51:c9:e9:66:8b:43:4f:e7:7a:85:61:16:ef:f0:44:6f:
         b5:f5:19:c6:43:f1:74:20:89:3a:70:ae:ef:b9:4f:c8:31:b4:
         31:41:55:70:17:b9:54:37:9a:9a:53:c9:24:72:98:00:b6:86:
         0a:19:21:c1:58:f6:f7:e4:bf:1c:5e:78:9b:d6:ea:b8:94:e1:
         d5:49:14:1e:66:15:8b:02:dd:c1:79:53:4b:1c:f7:0b:cf:ee:
         ef:41:48:85:05:79:54:8f:b0:25:3d:7b:5e:ae:3a:b3:9c:d3:
         07:1c:53:8e:96:f1:b9:7e:74:57:46:8a:f2:30:f7:8a:2e:32:
         37:ec:c3:eb:89:f0:d2:d4:16:ac:8b:7a:5c:24:07:06:f5:24:
         6c:7d:14:b7:8d:b5:5e:d8:c7:24:0b:8d:6f:33:6d:b8:d2:d9:
         44:47:2e:1c:f7:03:61:c4:09:b6:68:a2:a9:24:5d:99:0e:74:
         e3:fd:9e:df:00:ef:24:70:bf:32:69:ff:48:c5:64:a8:0a:35:
         bd:86:a3:45:c8:b4:75:ac:2c:8d:a8:39:de:5a:9f:77:27:80:
         0f:6e:5a:e5:24:0d:fa:3f:41:00:5c:da:82:fb:27:45:70:e4:
         4e:e1:97:76:6c:ca:97:98:cb:b1:c7:9c:f4:1b:df:18:a2:f9:
         fb:40:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:58 2026 by rpki-client