Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34372e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e34372e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          o/ovZODvAYW8nitqxabUgfoEb6l26ISQ4qAXkJQ9bRQ=
Subject key identifier:   06:D9:8C:44:0A:FF:63:05:8E:D5:86:61:2E:CE:F3:4F:AF:6F:E0:D3
Certificate issuer:       /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Certificate serial:       459F22252114FD22C6D7749C6945F581905ECB36
Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34372e302f32342d3234203d3e203538343837.roa
Signing time:             Sun 03 May 2026 02:22:58 +0000
ROA not before:           Sun 03 May 2026 02:17:58 +0000
ROA not after:            Sun 02 May 2027 02:22:58 +0000
asID:                     58487
IP address blocks:        202.10.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
                          rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9f:22:25:21:14:fd:22:c6:d7:74:9c:69:45:f5:81:90:5e:cb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
        Validity
            Not Before: May  3 02:17:58 2026 GMT
            Not After : May  2 02:22:58 2027 GMT
        Subject: CN=06D98C440AFF63058ED586612ECEF34FAF6FE0D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:94:19:c5:b9:a3:de:d5:63:3a:07:e3:b0:15:
                    33:ef:36:c1:ff:0a:0c:07:4f:89:0c:51:86:b0:03:
                    c4:5c:c8:53:bf:16:42:ec:e1:6c:d7:39:f5:81:18:
                    ea:53:e2:d5:ae:ba:9e:c1:c8:f3:53:5b:a0:19:27:
                    5e:4a:5e:ea:38:e4:fe:10:3e:ac:43:32:7a:13:ec:
                    57:6e:f6:ce:82:36:39:63:0f:23:05:95:5f:a0:31:
                    24:08:c5:8f:16:3a:bf:4c:03:16:b3:e3:a0:7e:be:
                    aa:26:db:4c:cc:ab:74:98:6a:1d:7b:d2:2b:0d:f4:
                    09:76:9c:ae:c0:3d:45:46:7a:34:a9:76:91:09:eb:
                    a4:dc:fa:5b:50:66:f3:9a:12:e0:e8:e3:87:8a:c2:
                    22:6c:a6:c2:0f:72:a1:fc:f9:3a:09:29:a4:2c:d4:
                    29:df:e9:42:a8:3e:f1:e3:94:36:0b:38:85:a0:b4:
                    0f:26:fe:0f:56:d7:19:99:6e:47:67:8f:36:bb:ea:
                    7d:04:dd:fb:2a:3f:7a:c3:3a:af:69:4a:46:f2:45:
                    27:13:23:8a:24:6e:35:cd:15:38:e9:ea:f5:d0:8e:
                    9e:eb:0e:50:76:14:b7:b0:31:88:f0:77:33:01:6d:
                    b8:ec:07:e5:32:16:9d:44:a1:da:a3:af:84:71:6c:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D9:8C:44:0A:FF:63:05:8E:D5:86:61:2E:CE:F3:4F:AF:6F:E0:D3
            X509v3 Authority Key Identifier:
                keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34372e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:0e:8b:0d:56:e4:eb:38:a5:e9:b3:07:45:c5:48:7d:68:f1:
         bf:30:34:9d:b9:c2:f1:e6:ba:f7:81:30:0b:0c:b0:1c:29:5e:
         d1:88:81:e0:46:6d:3f:27:69:f1:f9:68:7d:99:6b:6c:e3:76:
         96:d1:18:f4:0b:c3:d6:f5:03:e8:db:3c:5b:b9:ed:1b:8b:30:
         cc:da:28:38:5f:4f:ec:8f:cd:4e:b5:b5:d5:18:ec:b1:f2:37:
         6d:e5:75:7b:f7:a3:17:29:06:b9:c2:e9:02:90:e3:8f:67:48:
         65:75:33:08:cc:6b:cf:ff:f1:2f:fc:68:71:f2:26:29:39:4b:
         fb:fe:53:da:86:5c:4d:25:55:8a:6f:1d:d5:91:67:a3:a7:1a:
         1b:92:b0:45:1b:a2:f4:b3:5a:03:9d:22:c9:6c:3d:5a:78:da:
         c3:67:22:74:86:c8:d6:6a:47:a0:09:42:b0:af:f8:9d:64:f7:
         fe:03:20:4f:6d:a9:72:2a:57:d0:3c:ec:3d:73:33:d2:09:04:
         4c:8c:d6:c0:8a:7b:91:fe:fe:ac:18:0d:e1:67:6d:f8:9b:0b:
         b4:04:cc:8c:f0:5a:c5:17:0b:cd:dd:51:9b:54:ec:de:fb:97:
         fa:60:db:24:7f:c2:3d:ce:82:26:ac:70:94:01:c3:d9:a9:42:
         51:63:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:30 2026 by rpki-client