Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34312e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e34312e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          g0Hx5yrKopEHxPdHtj/SRdO2/5oBYvD/cLkEtfxzcgA=
Subject key identifier:   AB:BF:85:00:C1:5B:99:F6:3C:53:B5:A5:00:91:BA:C5:15:24:09:2C
Certificate issuer:       /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Certificate serial:       0A5C8926E65F7B9D31C3CDE1C6EED3B4DE008611
Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34312e302f32342d3234203d3e203538343837.roa
Signing time:             Sun 03 May 2026 02:22:49 +0000
ROA not before:           Sun 03 May 2026 02:17:49 +0000
ROA not after:            Sun 02 May 2027 02:22:49 +0000
asID:                     58487
IP address blocks:        202.10.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
                          rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5c:89:26:e6:5f:7b:9d:31:c3:cd:e1:c6:ee:d3:b4:de:00:86:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
        Validity
            Not Before: May  3 02:17:49 2026 GMT
            Not After : May  2 02:22:49 2027 GMT
        Subject: CN=ABBF8500C15B99F63C53B5A50091BAC51524092C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:28:4e:d6:a7:ad:e3:18:15:65:62:3f:0c:
                    1a:84:47:bc:b6:a0:c7:f4:d3:55:87:f7:8f:a3:6d:
                    e8:d6:cf:6c:52:e8:69:d8:87:66:68:80:87:16:8c:
                    2c:97:d0:ef:67:80:9c:e2:a0:51:9a:70:f2:01:9e:
                    34:f6:33:a2:c8:be:d5:7e:27:5d:36:38:2d:18:8c:
                    a7:ff:5f:c5:be:34:82:b8:a9:af:dc:7d:94:4e:44:
                    da:95:bd:3f:98:ff:48:a9:f1:3d:b6:61:5d:6b:c8:
                    12:ae:e7:b5:45:ac:5c:d9:07:f5:51:e5:ce:85:c2:
                    3f:b8:ab:8c:4e:1c:e9:bf:be:83:33:00:f3:4d:a4:
                    dc:fe:59:c3:e5:c3:db:79:9d:8b:de:87:25:a4:54:
                    29:a5:c3:47:ef:c3:ca:96:0a:8c:f7:ee:1a:e7:dc:
                    7f:bf:49:02:10:df:8a:eb:5d:6e:bf:60:41:e3:df:
                    86:f6:8a:44:0d:57:4e:11:dc:c6:28:3d:27:7d:be:
                    04:3f:2a:81:10:88:68:4c:b7:2e:e2:f4:7a:08:15:
                    52:40:8f:2c:f1:4b:91:da:de:04:47:68:e6:65:5b:
                    5f:41:d7:25:e4:0a:13:fe:eb:09:3c:4b:6e:10:46:
                    2e:77:9b:94:85:ab:11:27:2b:40:f0:7b:5f:15:82:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BF:85:00:C1:5B:99:F6:3C:53:B5:A5:00:91:BA:C5:15:24:09:2C
            X509v3 Authority Key Identifier:
                keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34312e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e6:b7:75:60:62:55:73:6a:38:83:37:bd:bf:9a:06:56:68:
         2f:07:22:11:63:3d:ff:30:79:01:9e:c5:ba:b6:cc:a9:9d:8a:
         6a:23:e4:e0:17:60:a7:d3:67:11:ea:18:a6:11:29:56:14:58:
         a6:85:07:1b:e5:9a:b2:79:a2:75:ed:39:87:89:7a:0d:fb:84:
         15:37:fa:56:1a:dc:cc:6f:74:39:98:22:46:9e:62:85:10:3e:
         bc:97:11:38:3a:f3:2e:e2:f2:55:d4:2d:0d:86:f5:ad:fb:ff:
         63:78:96:fb:72:bd:c4:40:d1:e8:7a:44:f4:02:27:82:a3:52:
         3b:a2:b1:e2:34:be:3d:97:f4:24:78:38:19:d9:21:f3:78:a2:
         bb:69:3d:b6:8e:e3:92:f7:62:b8:e5:4f:2f:e9:e9:fb:13:58:
         11:06:0f:50:ae:85:2f:17:70:d0:b2:63:ed:74:0e:8d:c1:4f:
         f6:ea:93:32:f0:32:52:b9:b4:5c:eb:f4:dc:5e:d1:d2:5a:62:
         73:e0:40:b4:f3:77:8a:59:a7:8e:1a:93:d3:e6:4b:47:01:1e:
         4d:b0:ee:ec:e0:dc:65:df:ce:39:0e:03:1b:76:e8:18:52:ab:
         97:aa:2c:52:69:51:51:c5:55:03:51:cd:92:9e:ae:a7:00:5a:
         a9:44:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:15 2026 by rpki-client