Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31352e302f32342d3234203d3e203338313530.roa
File:                     3230322e39312e31352e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          tSpJIXLzQ0pL+aodNvc7ns9K3AjDZr8FDk8CW+jKFio=
Subject key identifier:   C9:0F:22:21:7F:25:57:5A:15:16:C0:65:89:37:DD:0D:96:85:ED:5A
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       68147BC83989CB94D25242F409FCDD36F69C8586
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31352e302f32342d3234203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:15:56 +0000
ROA not before:           Sun 03 May 2026 02:10:56 +0000
ROA not after:            Sun 02 May 2027 02:15:56 +0000
asID:                     38150
IP address blocks:        202.91.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:14:7b:c8:39:89:cb:94:d2:52:42:f4:09:fc:dd:36:f6:9c:85:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:10:56 2026 GMT
            Not After : May  2 02:15:56 2027 GMT
        Subject: CN=C90F22217F25575A1516C0658937DD0D9685ED5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:19:a8:a5:52:12:32:c9:e2:20:64:c4:2e:b0:
                    26:24:9c:fd:26:85:23:1f:07:62:9f:16:98:1d:76:
                    b6:97:15:f1:92:03:7e:75:e4:a4:6c:8a:5a:35:2c:
                    33:56:be:ee:31:7d:f8:82:dd:68:f6:24:56:55:95:
                    7b:5d:f1:a4:5d:3b:b7:53:91:db:00:00:e3:fc:2e:
                    de:fe:e9:8d:99:fb:8c:1c:a9:a7:47:9a:8d:f7:73:
                    7d:e9:d6:b1:83:73:f4:ed:00:e7:03:30:9e:52:49:
                    d8:2c:1d:32:d9:64:8a:45:55:c1:f6:b3:14:3a:4e:
                    74:d8:33:e8:31:e5:c2:a6:62:7a:f3:5e:24:18:2c:
                    2e:ba:75:f2:d2:f0:16:a6:a7:a7:20:5d:a0:25:8a:
                    3a:e0:05:3e:8c:cb:6f:64:68:a9:b0:f8:20:97:ab:
                    9f:66:4f:b2:3e:9b:08:c5:0c:ad:d2:e3:95:92:82:
                    ef:f3:25:25:9c:c8:99:de:df:4a:31:5b:1f:ff:43:
                    68:4d:61:f5:e2:2b:5f:b9:46:03:ad:74:0d:bb:d9:
                    af:b0:09:eb:d7:70:77:0e:8c:de:f5:3c:7d:04:3b:
                    66:ee:0c:f8:54:55:4a:ea:11:95:cc:c0:02:e7:b8:
                    a9:39:a4:f9:ec:2c:5e:e4:bb:72:b1:74:80:7e:4d:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0F:22:21:7F:25:57:5A:15:16:C0:65:89:37:DD:0D:96:85:ED:5A
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31352e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b8:c3:b9:32:3f:e1:dc:f0:8c:b6:72:61:df:ec:ec:8b:a7:
         d6:2c:93:ad:6b:30:a9:f4:67:01:a4:45:66:d0:47:7d:1b:e7:
         5c:c7:71:77:9d:95:d2:7d:04:55:a4:0c:35:6f:68:16:86:2e:
         42:6d:06:62:b2:e7:1e:f2:3e:52:ab:f1:e6:a5:9f:1c:87:c8:
         45:1c:5b:e6:e4:5c:60:27:8f:82:e5:83:d4:62:27:4a:92:0f:
         35:26:19:cd:53:b8:9f:7b:55:7d:d0:9f:f6:f6:95:67:e8:fd:
         89:fc:3c:b7:ac:f4:8a:d5:ad:7a:df:4a:d1:fb:18:85:2d:eb:
         11:5d:d2:f7:7d:b4:0b:39:c4:74:be:25:03:11:bd:e1:99:c6:
         9b:ff:9b:07:2b:3e:3e:84:fa:75:e6:6e:23:51:51:2a:34:75:
         42:de:7c:c0:8f:a7:65:76:f3:47:53:d9:7f:cc:20:da:ea:d1:
         6b:01:d2:1b:50:2c:75:b8:5b:bd:b3:8f:55:c2:9a:32:a1:34:
         26:11:a0:81:db:0d:c2:4e:ad:fc:02:ef:ea:c6:f0:27:35:bf:
         76:64:0c:58:a1:1f:ac:b6:f0:f5:e5:c5:8a:9c:a7:d3:cf:6a:
         63:c9:3c:4b:37:47:93:16:86:e0:90:5a:87:3f:51:05:3b:b7:
         2c:f4:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:21 2026 by rpki-client