Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa
File:                     3230322e39312e31312e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          /bDQ1gDKqvhjUD5sIBBKcc/d7hDJ/PXDCn4UuJeT0Ls=
Subject key identifier:   6E:DA:88:A0:F6:5B:7C:0A:18:F3:18:F9:B7:FD:D6:F7:02:17:77:9F
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       06B6EEBBE70D6984041F21E770EA8568E33DC641
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:15:53 +0000
ROA not before:           Sun 03 May 2026 02:10:53 +0000
ROA not after:            Sun 02 May 2027 02:15:53 +0000
asID:                     38150
IP address blocks:        202.91.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b6:ee:bb:e7:0d:69:84:04:1f:21:e7:70:ea:85:68:e3:3d:c6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:10:53 2026 GMT
            Not After : May  2 02:15:53 2027 GMT
        Subject: CN=6EDA88A0F65B7C0A18F318F9B7FDD6F70217779F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:74:67:c6:fc:3d:2e:dd:e2:f9:72:c8:45:
                    ef:32:7f:1c:84:1a:ba:1a:12:36:43:1e:1f:40:08:
                    34:74:8e:3d:af:51:8d:13:03:a2:2b:23:62:4f:d2:
                    cb:32:52:d3:5f:45:a7:8f:ff:36:46:76:9d:8a:6a:
                    1b:70:14:de:dc:4d:79:0f:82:0b:37:2e:58:94:6e:
                    b0:69:26:03:57:80:e3:17:fe:7d:32:3f:7b:37:92:
                    ac:67:8d:7a:32:0d:e2:8b:fe:ee:52:b8:8e:89:8d:
                    4c:3d:e1:0d:94:04:64:ea:63:ca:58:8b:5a:02:c8:
                    d9:59:3a:2d:d0:44:8a:9f:9a:9d:d6:1b:dc:5b:16:
                    13:64:e3:95:45:f3:cb:90:f3:86:72:b6:d9:21:90:
                    fb:e7:ff:ba:71:42:63:59:bb:66:28:2e:9f:76:42:
                    7b:5d:54:f1:a9:2f:84:0c:7f:c2:e9:3c:b6:97:d5:
                    c5:97:6f:d1:61:12:1f:8f:75:a4:68:38:59:3c:cb:
                    7a:f7:e8:61:0d:6f:e5:f7:17:12:64:d2:65:86:ec:
                    ed:e3:b3:a7:49:05:91:e0:d0:a3:07:c0:70:28:e8:
                    5e:4c:0a:72:ac:b3:1d:7a:18:3e:25:9a:29:4f:4f:
                    6c:03:f6:cc:0c:67:57:71:9d:d4:f3:f1:c8:f3:59:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DA:88:A0:F6:5B:7C:0A:18:F3:18:F9:B7:FD:D6:F7:02:17:77:9F
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:27:31:96:1b:47:96:e0:59:29:d1:4c:59:07:a9:99:e4:06:
         fb:d9:4d:e9:4b:27:e4:b3:65:ae:73:56:86:ad:c8:ae:c8:da:
         e3:6d:a3:96:37:2c:ec:a1:a2:91:ad:79:e2:1a:d9:5f:f3:e7:
         91:81:8a:87:28:6f:e4:27:8f:3a:e9:c5:f8:2d:5d:49:bf:0b:
         26:7d:71:96:75:a6:24:78:8e:39:66:d0:b8:6c:5c:08:ce:1c:
         17:29:41:0f:e4:36:0b:8b:b0:c1:83:07:be:42:69:eb:e3:96:
         e6:e3:ef:42:c3:a2:a3:3b:83:d7:78:10:02:46:43:f6:e3:c5:
         5d:4c:c6:19:f4:d1:ef:2d:97:94:08:bb:f9:5a:0b:63:49:62:
         a8:d0:2f:65:f0:3e:8a:9c:69:7e:07:60:f5:4a:ea:4e:7c:b3:
         69:72:bf:c2:20:f5:6e:f8:3a:09:2b:35:f1:7d:c0:d1:49:bb:
         36:bc:f1:95:7a:8e:03:fe:28:19:a7:98:43:f7:14:c8:17:39:
         35:6a:58:3e:1c:b1:cd:b1:31:fa:5f:7a:7d:f4:2a:d0:c4:b6:
         70:80:52:54:9f:5c:ae:5f:a2:8a:d6:ab:34:3e:2d:41:ae:ae:
         15:72:71:a6:bd:ce:51:3d:de:5d:95:c7:1f:74:8c:2d:1a:f9:
         ef:97:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:27 2026 by rpki-client