Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136382e302f32342d3234203d3e203137373639.roa
File:                     3230322e35352e3136382e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier:          x6c51JosipPaOfbmzQCg2PukjtdaYAUJt/azhqpuZIU=
Subject key identifier:   F9:B2:EC:D7:F1:4A:DC:89:06:ED:FD:82:84:CF:8F:2A:60:49:44:24
Certificate issuer:       /CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
Certificate serial:       11C93B4B644716E5395DA763BF8E8CD4AAA671B7
Authority key identifier: 50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136382e302f32342d3234203d3e203137373639.roa
Signing time:             Sun 03 May 2026 02:14:23 +0000
ROA not before:           Sun 03 May 2026 02:09:23 +0000
ROA not after:            Sun 02 May 2027 02:14:23 +0000
asID:                     17769
IP address blocks:        202.55.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl
                          rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c9:3b:4b:64:47:16:e5:39:5d:a7:63:bf:8e:8c:d4:aa:a6:71:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
        Validity
            Not Before: May  3 02:09:23 2026 GMT
            Not After : May  2 02:14:23 2027 GMT
        Subject: CN=F9B2ECD7F14ADC8906EDFD8284CF8F2A60494424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:b3:7e:95:ed:88:65:11:3e:ec:9b:77:0a:
                    bb:4e:05:1e:70:87:78:77:33:d1:92:bf:ff:61:0b:
                    bf:fa:27:af:18:82:66:f0:a8:06:18:85:fe:1a:d8:
                    7f:20:37:eb:69:65:70:61:67:a5:9a:1c:b2:ef:c9:
                    ea:cd:44:2c:f8:cd:6c:18:28:5b:df:50:ba:10:0f:
                    90:97:eb:4e:c0:77:04:6c:f1:98:80:73:0b:f8:31:
                    d8:f1:49:f1:66:03:4a:4a:f7:c7:f4:0a:74:8c:2a:
                    92:15:85:8c:f9:b1:80:f2:70:f0:df:46:d1:32:6e:
                    c9:ed:bc:97:fc:66:5b:94:fa:38:be:ce:d7:a2:0f:
                    87:ad:98:05:95:64:ce:38:5b:ab:63:76:61:fb:b0:
                    05:ad:74:74:f2:11:aa:09:b2:51:8e:73:3f:05:8e:
                    4e:fa:27:54:21:a3:e8:8c:71:93:bf:1a:dd:8a:f3:
                    ec:07:e3:af:1b:88:e0:9f:18:b2:71:44:a0:6a:db:
                    ea:dd:6b:6e:4d:31:87:00:c1:ec:5f:81:b3:55:c3:
                    f8:d4:2d:0d:66:40:22:9e:1a:52:2d:4b:67:1d:3c:
                    de:cb:91:1c:64:f9:fe:7e:6c:12:7f:1b:9d:a0:09:
                    f4:0f:83:ca:36:9d:26:92:6f:b2:8c:80:38:5d:c7:
                    13:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:EC:D7:F1:4A:DC:89:06:ED:FD:82:84:CF:8F:2A:60:49:44:24
            X509v3 Authority Key Identifier:
                keyid:50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136382e302f32342d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:7f:5b:1b:5e:62:75:97:db:e0:57:40:11:52:34:69:9a:b9:
         3e:e5:21:0a:79:96:32:56:fb:46:dc:f5:29:95:ce:52:36:e1:
         dd:44:3e:d4:4f:27:27:67:69:7d:26:fe:e4:89:71:5f:02:b0:
         56:12:92:6a:6e:56:00:0a:25:80:87:df:23:38:72:bc:36:90:
         c3:f1:5a:6c:42:bc:cb:47:18:2f:b3:f9:e5:e1:88:37:6e:53:
         ef:3f:ee:97:88:d5:35:c8:a8:01:50:02:59:71:1c:07:ff:cc:
         09:c3:37:f4:45:e0:58:81:bf:9a:c4:b0:a5:f1:79:35:5c:1a:
         ab:bd:9f:8a:12:89:65:13:e5:e7:11:3f:fb:32:fe:cb:36:80:
         e9:c3:c6:01:00:d8:a8:04:85:93:cc:07:8c:2e:8f:c9:c3:c3:
         5e:aa:69:62:a9:51:a3:d9:72:aa:5f:23:78:f5:71:ed:d0:4e:
         b7:ec:9b:90:c1:87:0e:1e:81:f5:2c:b3:cb:cf:c0:70:c7:cf:
         37:da:8e:dc:6e:ca:33:48:04:7e:9f:c2:56:96:f0:74:a5:c8:
         48:72:bb:28:46:ff:11:6b:2b:e2:af:06:3e:6d:5f:ba:04:ae:
         fb:4b:29:2e:97:c8:90:e1:38:97:fd:76:a0:b9:e6:44:d4:68:
         80:cd:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:01 2026 by rpki-client