Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136352e302f32342d3234203d3e203137373639.roa
File:                     3230322e35352e3136352e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier:          zkd2QZIUEWhJnszbPPEcl7kbg1ELA5mqlYqo5AQxio0=
Subject key identifier:   75:64:CF:86:62:02:91:DD:EE:37:B6:71:19:17:81:D1:2C:1F:F2:43
Certificate issuer:       /CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
Certificate serial:       1EEA6F994C5B27A3870011E435A8A0D0B267BCD8
Authority key identifier: 50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136352e302f32342d3234203d3e203137373639.roa
Signing time:             Sun 03 May 2026 02:14:26 +0000
ROA not before:           Sun 03 May 2026 02:09:26 +0000
ROA not after:            Sun 02 May 2027 02:14:26 +0000
asID:                     17769
IP address blocks:        202.55.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl
                          rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ea:6f:99:4c:5b:27:a3:87:00:11:e4:35:a8:a0:d0:b2:67:bc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
        Validity
            Not Before: May  3 02:09:26 2026 GMT
            Not After : May  2 02:14:26 2027 GMT
        Subject: CN=7564CF86620291DDEE37B671191781D12C1FF243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:79:4a:de:4d:1f:f6:1b:df:9b:e9:38:cc:
                    22:aa:18:3c:62:e3:9c:32:00:e9:60:5c:6e:8a:41:
                    57:c2:85:74:26:a1:c6:cc:39:7b:a3:04:13:8e:d8:
                    40:5c:6b:e1:55:0c:33:f8:4b:0b:25:7f:bd:90:3e:
                    4f:d5:c1:20:68:97:95:7b:7b:42:97:e9:92:a8:95:
                    90:72:e8:d2:55:b1:e4:15:00:b2:39:e7:dc:61:5c:
                    c9:82:7f:a2:87:fb:ef:65:1b:99:97:a5:ac:dc:8a:
                    bc:f9:d9:3b:33:52:fc:0f:69:ab:83:dc:b3:06:ad:
                    60:f2:f3:ff:3d:4f:1f:9e:3f:5f:49:53:89:58:7c:
                    cf:59:31:a3:04:09:44:f7:ba:45:37:0e:49:4f:e4:
                    be:f3:58:a7:e9:15:3e:96:a5:df:9a:e6:e9:47:ef:
                    32:35:f1:bf:c0:fe:d5:3d:47:ec:40:ac:67:6c:43:
                    41:b8:5e:62:9d:81:0a:53:cc:1d:e3:b5:82:e9:a4:
                    7b:76:83:2d:fc:b7:67:fe:50:ef:14:c2:54:67:8c:
                    b4:db:3b:43:2b:aa:96:19:af:b3:92:69:d8:3f:89:
                    75:b8:82:21:a8:8a:eb:8c:aa:15:f9:77:db:03:18:
                    db:06:a2:3a:be:c0:8b:bd:fd:fd:6b:fb:9b:c1:b3:
                    ed:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:64:CF:86:62:02:91:DD:EE:37:B6:71:19:17:81:D1:2C:1F:F2:43
            X509v3 Authority Key Identifier:
                keyid:50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136352e302f32342d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:64:0e:61:2b:79:c7:7b:c8:a2:8d:98:92:51:0a:81:7e:
         e6:6a:3f:b6:e4:16:68:28:bf:27:38:c1:c1:17:92:00:89:ce:
         97:29:a3:19:c3:a6:8c:d1:5d:83:5b:88:7c:6f:5f:0c:1f:c2:
         af:9c:a8:f6:6f:cd:68:ad:d5:96:e8:fd:eb:11:f2:23:05:13:
         63:17:d4:55:91:7b:d2:b6:00:6c:97:55:04:60:2e:5b:97:83:
         27:49:48:14:05:79:cb:d5:9c:6c:9c:8d:86:1c:bc:04:7d:fb:
         0b:c7:4e:08:12:7f:7c:b5:ab:42:3f:8d:73:fb:63:73:be:7c:
         ec:32:cd:50:98:f3:ea:4f:4e:60:ce:c4:c1:87:40:97:49:9f:
         fd:2a:67:5c:d2:c2:b9:1d:3f:de:df:b3:39:75:f1:d6:d3:97:
         9e:49:2a:bd:46:cb:ec:e9:c6:03:fc:0c:dc:3c:c5:45:c2:24:
         07:e6:fb:c1:19:f6:df:79:b7:83:b0:33:e9:a2:05:76:d4:22:
         96:dc:52:32:14:f5:b5:e1:60:3d:91:be:ba:ee:38:17:e1:ee:
         c8:ba:44:f9:5f:0c:7e:f0:cb:f3:61:e4:fe:41:82:b7:21:34:
         91:a5:fa:83:42:65:1a:2e:9a:33:a4:0a:8f:34:cd:5f:41:4f:
         41:1d:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:39 2026 by rpki-client