Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132302e302f32342d3234203d3e203233393531.roa
File:                     3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (raw, json)
Hash identifier:          s511aUhrDoqnfoWhUJdvzunShOrgJJ2eEdfvPOc7/iM=
Subject key identifier:   32:D4:90:C8:78:3E:B0:97:21:96:F8:48:90:DF:13:75:C7:1B:6A:3A
Certificate issuer:       /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Certificate serial:       4A191CFBC5BC7BEC30B01E14EC51011947C9906A
Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132302e302f32342d3234203d3e203233393531.roa
Signing time:             Sun 03 May 2026 02:18:16 +0000
ROA not before:           Sun 03 May 2026 02:13:16 +0000
ROA not after:            Sun 02 May 2027 02:18:16 +0000
asID:                     23951
IP address blocks:        202.65.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
                          rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:19:1c:fb:c5:bc:7b:ec:30:b0:1e:14:ec:51:01:19:47:c9:90:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
        Validity
            Not Before: May  3 02:13:16 2026 GMT
            Not After : May  2 02:18:16 2027 GMT
        Subject: CN=32D490C8783EB0972196F84890DF1375C71B6A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:9a:68:61:c1:31:81:9e:24:e5:3a:65:1a:
                    89:c5:4c:fd:e1:fe:83:c3:00:79:81:fc:3b:24:0c:
                    5f:5b:77:fd:97:9d:15:87:a4:dc:70:0c:a5:9f:94:
                    88:d3:01:6a:bd:c7:90:d9:d2:d9:25:1a:6f:d8:7f:
                    80:8a:b6:59:52:55:47:fa:5b:d0:29:4f:01:bb:3f:
                    1b:92:23:67:aa:e3:93:bb:78:ee:e7:e6:dc:40:6d:
                    36:fc:3c:42:a7:43:cc:4c:bd:4a:54:29:6c:29:4c:
                    fb:52:b2:bf:e4:df:58:3a:f0:cb:60:51:02:ab:24:
                    7f:ba:df:28:e9:c1:e1:3f:48:3a:b8:5b:ee:5a:d5:
                    1b:7d:04:00:d3:b9:65:1b:5e:20:8a:7d:64:6f:49:
                    74:57:d7:cc:fd:e2:b7:63:ae:c9:cc:7a:ec:eb:e5:
                    d1:6f:b2:c6:1b:03:66:08:af:da:e4:f4:b0:d4:f8:
                    84:2d:d8:78:bd:b2:46:68:3f:dc:62:3a:98:7d:6b:
                    fd:4d:1a:4f:fb:68:16:14:4f:b5:83:1d:8e:f5:79:
                    d8:9e:9f:a9:3d:95:e5:0e:96:4f:70:37:e2:66:8e:
                    26:18:43:87:55:9c:5e:d2:45:e8:de:4f:03:4a:54:
                    2a:bd:68:b8:ca:b9:e2:fd:d2:3c:28:fb:75:c3:51:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D4:90:C8:78:3E:B0:97:21:96:F8:48:90:DF:13:75:C7:1B:6A:3A
            X509v3 Authority Key Identifier:
                keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132302e302f32342d3234203d3e203233393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.65.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:11:fe:b5:b1:53:5a:0e:5e:d8:fb:9e:84:46:0e:40:8e:ac:
         ef:d0:13:4b:9e:f7:ab:51:4a:89:bc:a2:cd:bb:38:2a:a6:5c:
         86:d5:c0:fa:c9:55:88:13:a4:83:5d:93:19:b7:e8:82:aa:c1:
         07:c9:0c:b8:46:ec:26:6e:f6:78:8b:4c:d7:38:09:f0:2d:9e:
         c9:d1:df:b5:fe:0d:23:4c:ce:4f:b1:fc:97:fa:8d:67:49:bc:
         cb:2d:b9:a5:a1:13:1e:58:de:9d:d9:45:8a:91:44:a1:f6:3e:
         f9:2a:61:1f:cb:95:26:69:81:83:e5:93:b4:82:93:e8:17:1c:
         9d:09:87:34:d9:40:25:af:bf:f9:a5:84:d1:ef:9e:56:a5:d5:
         9c:28:60:c9:ae:23:55:15:dc:6d:d0:bf:27:50:8c:d7:bd:56:
         56:c7:c4:b6:72:7f:0a:0c:56:bf:f1:38:cb:c4:5c:72:c1:28:
         9b:3b:3d:39:06:d8:3e:43:db:a7:05:58:31:b2:bd:b4:bd:36:
         2f:9b:ce:ee:ac:92:51:ff:c5:75:c4:fb:df:54:38:88:06:99:
         06:af:d5:a4:9a:46:c3:d0:cc:27:43:07:18:7f:ad:7c:57:70:
         bf:63:0f:be:98:04:1f:22:65:91:9c:36:59:af:cb:40:ba:bb:
         e3:61:d1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:17 2026 by rpki-client