Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3131322e302f32312d3234203d3e203233393531.roa
File:                     3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (raw, json)
Hash identifier:          lJAR5H9EAjowki+F3wTub0E5xXRygZB7vWolMlHO9Ks=
Subject key identifier:   B3:C2:F2:F1:24:2E:B6:D4:3F:FD:32:93:4F:4A:81:28:A3:62:7C:77
Certificate issuer:       /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Certificate serial:       7EADCFEE53CAB9529AEE694055087A9C3AEF8614
Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3131322e302f32312d3234203d3e203233393531.roa
Signing time:             Sun 03 May 2026 02:18:14 +0000
ROA not before:           Sun 03 May 2026 02:13:14 +0000
ROA not after:            Sun 02 May 2027 02:18:14 +0000
asID:                     23951
IP address blocks:        202.65.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
                          rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ad:cf:ee:53:ca:b9:52:9a:ee:69:40:55:08:7a:9c:3a:ef:86:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
        Validity
            Not Before: May  3 02:13:14 2026 GMT
            Not After : May  2 02:18:14 2027 GMT
        Subject: CN=B3C2F2F1242EB6D43FFD32934F4A8128A3627C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:f9:90:9b:5d:95:40:b8:f1:78:37:9e:77:
                    fa:ad:14:1b:a7:f4:67:05:fc:aa:4c:ba:64:fb:76:
                    82:63:28:43:f1:f8:8e:0a:1d:15:ba:0b:1a:2b:e9:
                    82:67:74:43:bb:2e:46:1b:81:b0:e5:4c:78:59:c1:
                    7e:d1:6e:03:9b:4a:91:13:7d:dd:7e:fa:74:46:9c:
                    a8:aa:45:63:9d:bc:a9:9f:65:d1:7c:1d:66:78:0a:
                    bb:0c:49:ff:0b:da:58:78:07:bf:77:6b:2b:bb:ce:
                    99:bc:04:65:ad:5e:e7:86:5e:e7:8c:78:e7:df:de:
                    36:43:2b:15:e2:82:8c:ad:9a:d7:28:7e:b7:e8:6b:
                    8c:c8:e7:78:30:84:85:c0:5a:0d:83:48:8d:b7:62:
                    d8:57:5d:27:1c:b5:44:b7:35:71:92:d8:0d:ae:69:
                    26:32:b7:e0:92:61:58:e0:14:50:a6:06:9f:77:24:
                    c9:ac:cf:0c:2b:3a:18:ae:3d:83:5f:00:cb:72:12:
                    d7:16:c1:81:86:c4:46:cf:f2:f3:83:3b:b2:74:cc:
                    d6:39:45:ba:89:9c:3b:1a:f8:22:bf:66:4d:95:e6:
                    a4:05:75:96:9f:35:52:ae:7e:ad:7a:4e:34:f0:80:
                    d0:0e:3f:32:69:77:98:8d:51:67:2e:d7:f2:87:b0:
                    50:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C2:F2:F1:24:2E:B6:D4:3F:FD:32:93:4F:4A:81:28:A3:62:7C:77
            X509v3 Authority Key Identifier:
                keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3131322e302f32312d3234203d3e203233393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.65.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:8e:a3:f3:45:b5:bf:90:96:49:43:ff:c1:0e:6c:ab:72:5a:
         7b:25:05:8e:b6:f5:b5:60:1f:f8:c0:09:44:6b:7c:52:59:6c:
         31:50:56:1f:d4:27:df:2f:95:5b:6d:01:b6:78:ed:af:ff:b0:
         a2:d2:a3:dd:f4:cf:44:c7:64:8a:01:7b:d7:73:09:a3:2b:ae:
         2f:ec:75:37:98:45:14:93:d6:d9:ad:85:75:92:8e:d7:3b:ae:
         a5:1d:75:aa:23:44:8f:6f:cd:7a:dc:42:0b:10:e5:38:7a:24:
         d3:9d:ff:c9:80:02:f1:85:c5:e1:05:7a:73:9f:1c:e9:d9:e3:
         7a:a8:63:72:67:01:4d:5d:8f:6f:5a:a6:07:ba:a8:ad:e9:f6:
         81:85:69:e8:e0:c7:db:95:72:43:ae:dd:8c:5e:1a:f8:56:ce:
         35:86:ff:44:ce:5a:af:17:af:e4:e8:45:6e:79:2b:ab:53:c0:
         8a:cf:29:cd:b0:2b:70:27:70:43:43:1b:c8:87:92:57:cb:9c:
         61:40:e3:4a:4c:58:38:4d:6b:14:71:8c:e3:79:62:47:59:f0:
         c1:88:af:2d:ad:3d:5c:b1:37:dd:24:1e:c3:81:0b:88:a3:2d:
         17:66:aa:f3:45:d7:20:1e:e2:c2:38:0a:fc:ef:2b:e3:ce:04:
         8d:ae:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:48 2026 by rpki-client