Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e34342e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          WKuOJrVVZlYWwTvTmiW45MtVMO0eJoMBeuJku53fqVY=
Subject key identifier:   9E:28:DC:33:94:FA:DE:B6:F7:5A:C1:93:C1:33:F1:26:C4:B0:3E:28
Certificate issuer:       /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Certificate serial:       74E91F8C751BE1BB7AD058960B00DCBB9C1A4C09
Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa
Signing time:             Sun 03 May 2026 02:22:46 +0000
ROA not before:           Sun 03 May 2026 02:17:46 +0000
ROA not after:            Sun 02 May 2027 02:22:46 +0000
asID:                     58487
IP address blocks:        202.10.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
                          rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e9:1f:8c:75:1b:e1:bb:7a:d0:58:96:0b:00:dc:bb:9c:1a:4c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
        Validity
            Not Before: May  3 02:17:46 2026 GMT
            Not After : May  2 02:22:46 2027 GMT
        Subject: CN=9E28DC3394FADEB6F75AC193C133F126C4B03E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:3b:44:b1:8b:a5:31:ea:1c:9d:91:08:b5:
                    7f:4e:ee:aa:2f:10:c7:4d:43:97:c9:b0:0c:d4:4a:
                    7b:22:68:9b:02:96:67:79:a2:5e:bb:75:31:27:5f:
                    6e:6d:80:2c:a8:aa:ed:f3:c3:71:ff:80:23:e9:d3:
                    78:3b:72:08:47:62:67:08:d0:c7:6b:b1:4c:7f:bf:
                    4f:8b:3e:c0:c1:61:45:d4:05:3c:52:5f:3e:e4:f1:
                    12:42:2d:29:7f:e0:4e:06:94:d2:4a:6c:a5:ff:e2:
                    42:20:bd:29:cd:40:38:94:63:a9:9b:8a:b6:71:9a:
                    31:9c:3a:a6:a9:b3:15:08:e9:34:4b:5c:54:6f:d8:
                    e8:7f:fb:a5:b6:42:90:4f:4a:64:2a:f1:d9:d6:89:
                    c0:31:14:74:95:20:3c:99:83:b7:d0:2c:dc:ce:b6:
                    51:74:b2:d5:08:b1:8f:71:3e:61:89:19:cd:97:a1:
                    46:3d:a3:6d:68:9c:e7:7a:c5:0e:26:00:68:a5:5d:
                    51:ea:4e:0c:fe:f9:5d:94:42:fa:8b:69:a6:36:7f:
                    38:fd:db:f3:35:b6:87:b8:73:a7:ae:92:99:f6:d4:
                    9e:ea:af:ee:f9:2d:58:d2:96:c3:f9:ad:49:cd:3d:
                    da:b6:7b:1c:e7:05:da:b3:49:c5:f3:bb:4a:9f:9a:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:28:DC:33:94:FA:DE:B6:F7:5A:C1:93:C1:33:F1:26:C4:B0:3E:28
            X509v3 Authority Key Identifier:
                keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:dc:b1:bd:70:06:2a:06:8b:b1:6d:fc:b2:4f:80:ac:77:3c:
         3f:81:ca:ee:ed:d7:d2:8e:59:89:fb:61:af:df:c6:f1:2f:7e:
         7c:c2:ef:86:58:de:49:2b:5d:fc:92:91:d3:6c:b8:7a:54:e7:
         74:f0:74:d6:a0:49:9e:9c:ca:80:d2:07:e3:a0:90:91:60:40:
         7b:b8:48:5a:85:f3:df:20:59:b2:5f:b3:f5:30:a5:cc:37:c5:
         4b:95:5e:e6:1f:a2:78:f5:bb:f6:fa:20:83:e9:ab:c6:33:8f:
         b3:28:58:58:10:64:6d:44:2a:d3:53:69:2d:6d:af:16:a6:9b:
         43:74:da:cf:1c:6c:b9:da:fc:8d:c6:5a:51:4b:26:f0:0d:c2:
         d0:bd:8c:ac:9a:03:b6:e3:b5:e8:f4:c3:ac:05:53:e1:70:99:
         7e:a9:3c:67:85:85:76:44:3c:13:36:15:67:20:50:f5:b5:fb:
         17:c7:87:14:40:a8:53:35:cf:fc:84:b6:bb:13:6c:13:92:2b:
         40:08:6e:69:6b:14:98:41:b5:b9:23:89:93:d4:2d:34:64:ae:
         14:41:04:9e:03:9d:a0:6a:44:70:70:60:ac:87:f0:80:80:5c:
         50:6e:9a:dc:6f:72:a4:6a:fd:f0:61:67:8e:bf:44:2a:2f:cd:
         04:7a:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:15 2026 by rpki-client