Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32372e302f32342d3234203d3e203535373031.roa
File:                     3230322e37332e32372e302f32342d3234203d3e203535373031.roa (raw, json)
Hash identifier:          BAdz9q0heD7H4d5EINNzizZi9X7k9sip5rKeZrRgrbA=
Subject key identifier:   36:0A:C2:9C:25:2B:CB:1D:FC:21:CF:D4:61:63:26:EF:3B:18:60:06
Certificate issuer:       /CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1
Certificate serial:       03AB73E1E34F6C35327996ACCEA0BF04DE1121E0
Authority key identifier: 9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32372e302f32342d3234203d3e203535373031.roa
Signing time:             Sun 03 May 2026 02:21:09 +0000
ROA not before:           Sun 03 May 2026 02:16:09 +0000
ROA not after:            Sun 02 May 2027 02:21:09 +0000
asID:                     55701
IP address blocks:        202.73.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ab:73:e1:e3:4f:6c:35:32:79:96:ac:ce:a0:bf:04:de:11:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1
        Validity
            Not Before: May  3 02:16:09 2026 GMT
            Not After : May  2 02:21:09 2027 GMT
        Subject: CN=360AC29C252BCB1DFC21CFD4616326EF3B186006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bd:8c:f9:4f:c1:9b:2d:95:7b:fc:a6:68:29:
                    34:b0:0d:20:7e:4c:de:da:d0:32:69:b4:b7:ee:d1:
                    7f:cb:fe:5b:ed:f2:43:a5:ee:f3:bd:5c:70:d6:e4:
                    b4:9a:6b:e8:54:ac:12:b2:fc:80:f2:0a:bc:64:61:
                    96:1f:bc:f1:01:14:b0:90:fd:62:11:1e:c7:84:47:
                    4a:8f:97:10:98:d4:bb:1e:82:e7:18:16:46:48:df:
                    2f:71:42:76:8c:aa:a8:ae:cb:a8:8c:ec:7e:97:b8:
                    b9:a6:33:59:20:35:e7:82:7a:ef:93:0e:e4:bd:7d:
                    8f:d6:f5:5b:09:ea:c5:92:d2:e1:db:36:97:b0:f5:
                    d0:0d:0a:b2:df:4e:5e:9c:07:3d:93:e6:f3:b4:cf:
                    ee:14:23:72:2b:5c:c7:3e:0a:ba:6f:32:93:bb:28:
                    fb:90:3c:38:b0:02:98:68:01:87:67:0c:0b:c1:44:
                    13:a6:ed:ff:f3:13:63:ca:06:99:6e:53:4a:24:92:
                    5e:c2:f6:19:dc:8a:e9:d1:a0:e2:fe:88:33:53:5e:
                    71:7c:ab:72:d4:b8:04:5b:06:68:33:7e:1d:8f:40:
                    81:7a:25:34:45:8a:31:3f:a3:c4:a2:ac:c7:3d:5a:
                    a2:73:9e:64:49:ea:76:34:b2:5f:f9:5b:d5:36:5c:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0A:C2:9C:25:2B:CB:1D:FC:21:CF:D4:61:63:26:EF:3B:18:60:06
            X509v3 Authority Key Identifier:
                keyid:9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32372e302f32342d3234203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:7d:5b:a1:3e:eb:d0:10:d3:15:f2:45:51:8c:49:88:14:
         cf:07:87:d6:13:11:1e:c0:df:a2:01:b8:19:5c:07:e6:8a:e1:
         e3:8c:c4:54:a9:61:24:d7:1d:42:b5:02:5b:9a:8f:ac:d9:6c:
         2c:6c:6a:7b:ef:8f:29:15:81:da:66:b9:3d:2d:49:78:04:54:
         4e:59:03:ee:4a:b5:c0:9e:75:f1:26:19:1e:f1:70:65:37:9a:
         ff:70:9e:e1:1f:5e:a7:39:21:36:2b:15:60:bb:42:f0:49:ad:
         f6:69:a1:47:ac:fc:1c:5e:ed:ce:bd:0f:5d:e9:02:a4:e3:35:
         9b:90:4b:82:1a:5d:4e:9b:fb:7f:5c:fe:44:db:d3:b7:fc:5b:
         84:ac:3c:ee:61:cd:0f:e8:07:9d:e5:a5:8f:25:75:a7:e5:cf:
         97:4b:d5:92:e2:a3:ac:70:c5:ad:f4:87:35:92:d1:2d:d8:19:
         98:d1:53:e7:97:3e:5b:11:f8:89:b4:ac:a6:a5:d6:f6:f3:c4:
         c4:1a:0b:8e:b9:d8:c0:30:d4:1b:e4:5e:ff:a3:b8:76:51:d3:
         5d:b6:aa:3c:99:6a:c9:5f:41:22:d1:0f:13:52:16:02:7e:74:
         8f:db:c1:8b:34:ed:c7:26:f9:67:d7:7f:3d:1c:ad:f6:de:ac:
         20:2a:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:06 2026 by rpki-client