Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/3230322e302e39322e302f32332d3234203d3e203535363935.roa
File:                     3230322e302e39322e302f32332d3234203d3e203535363935.roa (raw, json)
Hash identifier:          wgVvr0GfPg6coWh3Xe95X5cFnSDCPizf4FPOmRoPulE=
Subject key identifier:   5C:4E:7A:98:38:64:3B:20:B2:8E:94:2A:97:47:CE:10:74:35:EE:83
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       79C05371594B8082A237FDD3AC0AE4997E62D900
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/3230322e302e39322e302f32332d3234203d3e203535363935.roa
Signing time:             Sun 03 May 2026 02:19:48 +0000
ROA not before:           Sun 03 May 2026 02:14:48 +0000
ROA not after:            Sun 02 May 2027 02:19:48 +0000
asID:                     55695
IP address blocks:        202.0.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c0:53:71:59:4b:80:82:a2:37:fd:d3:ac:0a:e4:99:7e:62:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: May  3 02:14:48 2026 GMT
            Not After : May  2 02:19:48 2027 GMT
        Subject: CN=5C4E7A9838643B20B28E942A9747CE107435EE83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:29:a3:fb:7c:19:14:55:64:12:a1:67:80:
                    3f:fd:cd:0d:32:fd:4a:9b:e4:a3:65:66:3e:52:cf:
                    a4:fe:18:0b:e4:03:ff:88:38:bd:7e:8b:2b:98:46:
                    1b:92:c6:98:b1:75:0c:c6:0b:b6:b3:82:4a:8f:5f:
                    2e:f7:89:1e:cc:47:b9:c8:4e:81:44:fc:f8:98:84:
                    48:5b:9e:ac:ff:ce:cb:ba:26:e1:87:dc:b5:fc:17:
                    d1:20:ae:65:9c:04:8e:0e:73:27:e1:ff:4e:bb:98:
                    e2:a9:d0:19:6e:a8:ec:21:fc:f1:1a:91:14:f1:2a:
                    d1:5f:fd:c3:46:37:a2:a6:71:b5:6a:15:7c:14:89:
                    ff:62:94:e4:08:56:b0:cb:61:82:37:2d:e5:0a:0a:
                    93:95:af:0f:64:c1:23:0a:62:d4:29:66:0f:72:5f:
                    49:0c:36:65:65:03:fa:3c:42:04:5a:2e:b7:3c:bd:
                    a7:8b:01:82:1e:f1:22:0e:6b:c5:94:5a:30:aa:50:
                    81:5a:aa:26:e5:94:df:58:d1:38:a0:1d:09:25:04:
                    3a:ef:5b:82:8a:4b:53:4e:b7:42:fb:84:01:ef:16:
                    00:1a:ca:4d:8e:c6:67:19:ab:7e:e4:0c:5c:51:2e:
                    bb:0a:40:78:66:3c:54:e1:eb:a1:55:fc:de:ed:b2:
                    e1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4E:7A:98:38:64:3B:20:B2:8E:94:2A:97:47:CE:10:74:35:EE:83
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/3230322e302e39322e302f32332d3234203d3e203535363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:1e:8c:18:d0:96:19:02:93:56:3e:9e:4c:c4:12:6d:b4:70:
         0f:81:eb:82:65:38:f3:53:9f:a0:40:56:29:41:33:7f:73:9f:
         d2:42:a0:09:fc:b0:fe:ec:7f:5c:46:12:03:ef:3d:d6:e4:bb:
         d0:e6:5f:6f:3c:65:ce:e1:64:07:4d:f0:72:41:f4:e1:f1:85:
         e9:7d:d4:96:8b:75:c1:a6:da:e0:5b:17:33:21:bb:09:8f:e6:
         ce:b6:0e:35:70:6a:35:51:2e:32:25:e7:7e:81:cd:50:a9:e3:
         45:d1:b8:d1:a7:b3:41:da:9e:fe:7c:fa:43:ec:45:39:af:d2:
         67:e5:59:95:6c:fe:46:7c:32:7f:d7:1b:96:fb:2c:33:46:3e:
         50:6d:ca:86:28:f9:f6:03:a2:38:09:06:48:8e:7d:fe:00:47:
         fd:92:3b:24:ec:06:dd:a4:33:1a:f3:c3:9f:d1:41:a0:79:cd:
         e4:36:4d:ef:fc:e4:ef:e0:2b:14:73:53:99:a0:dc:96:11:d6:
         2e:39:7f:73:c8:05:54:4e:b4:28:5f:b9:08:cc:21:d5:17:7b:
         fe:3a:36:4f:6e:3b:46:10:b4:ea:af:ef:eb:23:dd:4c:fc:5c:
         07:01:c2:16:95:9d:9d:04:52:c1:7d:a6:0f:66:93:b7:3a:4b:
         7d:80:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:01 2026 by rpki-client