Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3137352e302f32342d3234203d3e203137373639.roa
File:                     3230322e35352e3137352e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier:          Un7QeB+68gr+nMOEGUVfqrgZbV5gwb/rCw8XjqHm9Do=
Subject key identifier:   33:53:05:29:92:A4:85:1B:46:E0:DE:A8:5B:B2:E2:FD:85:91:B5:46
Certificate issuer:       /CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
Certificate serial:       7B3876B1F820FD493C6FFDE5BC07FDB8334CD94F
Authority key identifier: 50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3137352e302f32342d3234203d3e203137373639.roa
Signing time:             Sun 03 May 2026 02:14:25 +0000
ROA not before:           Sun 03 May 2026 02:09:25 +0000
ROA not after:            Sun 02 May 2027 02:14:25 +0000
asID:                     17769
IP address blocks:        202.55.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl
                          rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:38:76:b1:f8:20:fd:49:3c:6f:fd:e5:bc:07:fd:b8:33:4c:d9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
        Validity
            Not Before: May  3 02:09:25 2026 GMT
            Not After : May  2 02:14:25 2027 GMT
        Subject: CN=3353052992A4851B46E0DEA85BB2E2FD8591B546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:89:f6:3a:97:a7:d7:58:dc:cf:0e:c1:20:6d:
                    e4:49:a5:7b:c1:f6:50:20:34:fc:7d:fc:d4:31:ad:
                    ef:b7:50:25:64:a6:5a:bc:b5:ff:0e:42:5c:c2:8c:
                    15:80:fa:70:bc:69:a1:4f:f6:a1:08:47:4a:43:44:
                    a4:79:83:b8:87:92:2d:a5:85:07:f0:2d:4c:21:52:
                    e6:b0:17:36:78:b5:14:8c:1b:75:e2:ff:d6:93:92:
                    95:e7:93:6d:aa:e4:21:bf:23:a1:76:b7:75:62:f6:
                    f5:fe:38:6e:e0:a0:6f:42:e4:92:62:5d:ce:c9:5e:
                    f8:1b:14:a3:b1:b2:ce:5d:be:e4:bb:c2:83:23:dd:
                    ac:cf:17:ba:53:d2:37:e9:dc:b7:cd:4f:b9:fa:b4:
                    17:bb:62:4e:a0:f0:ce:09:53:b5:18:b5:19:93:66:
                    0b:7d:74:e6:c5:7b:b1:47:ad:13:ee:8f:7d:11:7c:
                    bc:17:56:9e:a5:0e:4d:ac:23:3b:d7:b6:aa:1e:1f:
                    74:1a:20:41:d0:e3:85:f1:5a:0f:07:32:da:32:89:
                    95:c8:1a:92:35:ca:d5:a4:4e:d2:6c:2a:e9:1d:ce:
                    98:ec:9a:e4:0a:e5:ac:51:e4:52:a6:9d:d6:bc:db:
                    86:e5:64:bc:30:ca:bc:16:d1:13:92:40:5f:6c:93:
                    dc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:53:05:29:92:A4:85:1B:46:E0:DE:A8:5B:B2:E2:FD:85:91:B5:46
            X509v3 Authority Key Identifier:
                keyid:50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3137352e302f32342d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:0e:ab:09:15:6d:c7:e6:1d:64:d3:07:d0:f6:0d:bb:76:d8:
         8b:f3:d1:06:49:9e:50:a2:bf:5b:7a:1e:a9:9e:03:08:67:55:
         1f:90:f2:a6:5a:36:14:11:b1:74:f4:18:05:7f:33:49:ba:da:
         72:c7:c1:03:94:11:d0:49:30:a9:98:89:8c:49:03:cd:80:e0:
         7e:c8:f4:d2:64:dc:4a:43:94:10:02:91:4b:99:9b:e3:5a:4d:
         aa:32:36:b9:1d:29:64:d3:02:8a:42:50:d6:9e:09:3a:ee:c1:
         a5:40:d9:c7:4d:09:ad:cb:68:b1:61:a5:70:7a:2e:5f:46:53:
         54:69:e0:61:30:7a:0b:ea:b3:fe:4a:42:d4:3a:e1:e2:bf:04:
         47:42:c0:1a:07:5f:f3:cb:a4:b1:8e:e3:e3:d4:a4:be:14:ee:
         91:c9:61:ce:42:88:51:9d:71:45:65:39:bc:2b:00:8f:59:06:
         57:63:93:1e:b5:c8:b1:40:e3:56:01:75:ef:db:fa:2f:a8:c7:
         25:e2:2c:a1:0b:7b:50:b4:09:ef:2b:6b:05:1f:41:02:57:d6:
         a3:58:1f:e8:4a:cd:0f:93:9e:95:bd:bc:bf:b6:f7:c1:94:60:
         de:6f:72:42:8a:71:2d:ba:96:83:3d:12:fb:8f:bb:d8:76:cd:
         53:08:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:29 2026 by rpki-client