Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa
File:                     3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (raw, json)
Hash identifier:          6EETEPKtzbYhkS8PCH/i18xxZFkGLUgPS/GSOlw9zjQ=
Subject key identifier:   1C:4A:48:68:07:63:6C:88:40:D4:37:8E:9E:7E:4E:E6:95:54:07:DE
Certificate issuer:       /CN=83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917
Certificate serial:       26469C755D466F0B54440D8E3BC2EA1ED1160CBF
Authority key identifier: 83:B2:DB:74:7B:ED:1A:E0:1D:D0:B8:AF:08:DF:AE:9B:FF:90:09:17
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa
Signing time:             Sun 03 May 2026 02:29:16 +0000
ROA not before:           Sun 03 May 2026 02:24:16 +0000
ROA not after:            Sun 02 May 2027 02:29:16 +0000
asID:                     152076
IP address blocks:        202.47.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl
                          rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:46:9c:75:5d:46:6f:0b:54:44:0d:8e:3b:c2:ea:1e:d1:16:0c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917
        Validity
            Not Before: May  3 02:24:16 2026 GMT
            Not After : May  2 02:29:16 2027 GMT
        Subject: CN=1C4A486807636C8840D4378E9E7E4EE6955407DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:b1:59:37:41:d4:cf:da:9e:20:7b:32:4d:
                    2b:93:44:07:c6:47:08:41:48:c0:15:2c:0f:7a:1d:
                    3e:b9:56:d3:8d:49:69:06:78:ef:c3:ce:24:90:39:
                    20:81:d6:ca:f2:bb:9b:be:69:e5:54:83:8a:b3:89:
                    07:ba:a5:a0:fd:b4:e1:4e:ef:68:7a:0f:5a:b6:e6:
                    2c:e1:39:41:16:cc:0a:c2:fe:17:9a:f1:90:94:d9:
                    be:72:58:6f:c7:00:30:2a:53:6e:54:5d:fd:0a:91:
                    e1:78:c4:9a:09:e5:99:2c:36:db:79:65:c8:0e:16:
                    91:8a:f1:c1:e2:f9:8e:7a:14:93:98:93:22:44:3a:
                    ca:75:81:f7:e3:02:b7:83:3a:c7:cd:45:af:9a:eb:
                    e5:32:fe:7b:01:bd:22:5e:cd:a1:33:d9:80:70:c3:
                    e3:00:59:a1:68:0c:87:01:ef:b7:37:56:a4:9d:c0:
                    da:96:ae:de:ba:22:40:e3:b2:e9:30:f0:c3:f5:14:
                    23:3c:c4:26:2a:57:f9:0e:f0:94:15:e2:3c:13:b0:
                    a5:66:31:1d:de:5a:b1:23:95:99:18:f9:74:ab:9e:
                    d9:43:a0:b9:b5:9c:5f:93:e7:2a:b0:8b:04:4e:b3:
                    38:df:3d:ca:b5:1f:6d:4e:e7:71:87:85:1f:5f:55:
                    47:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4A:48:68:07:63:6C:88:40:D4:37:8E:9E:7E:4E:E6:95:54:07:DE
            X509v3 Authority Key Identifier:
                keyid:83:B2:DB:74:7B:ED:1A:E0:1D:D0:B8:AF:08:DF:AE:9B:FF:90:09:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:68:2f:e0:0b:b8:96:16:e9:67:b3:7d:cf:88:22:79:fa:e7:
         5e:b2:72:e5:b9:85:7a:81:e9:cb:80:32:3e:78:fe:fe:44:aa:
         60:54:bf:36:fc:51:24:a9:43:cb:0d:ec:27:b8:df:7e:74:cf:
         3f:88:7e:56:de:c7:7e:11:63:ef:ec:43:b7:2c:b3:c6:f2:60:
         b9:19:12:a2:14:44:ae:64:4a:ea:eb:31:71:73:51:fe:5d:12:
         0a:aa:68:9f:c6:2c:a6:a6:8c:2a:80:5b:80:44:35:77:a0:45:
         bc:b8:59:62:e3:8f:f1:3c:8b:a6:0b:64:7c:90:90:5c:2f:ed:
         9d:1f:91:95:70:94:ce:c3:19:e0:4c:48:c0:4c:c5:b9:e7:fe:
         dc:00:7b:7c:55:59:2a:13:ef:ef:ad:0e:9e:1f:77:83:c2:db:
         b7:3f:81:e5:89:03:9b:07:60:33:b7:a9:0c:0c:be:1a:e6:50:
         40:a2:9d:54:f8:be:a8:e2:be:44:a2:01:c3:c0:90:0c:19:b1:
         44:9d:e5:73:30:fb:89:31:20:bd:d1:04:9d:a5:bd:8c:6f:31:
         69:e6:04:1d:7f:c8:06:72:b9:7b:f5:d6:49:94:cc:e2:dd:57:
         5c:93:cb:bf:c1:3a:8e:1f:1f:dd:69:dc:79:3a:1d:ae:c9:f4:
         77:e7:c0:db
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJkacdV1GbwtURA2OO8LqHtEWDL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNCMkRCNzQ3QkVEMUFFMDFERDBCOEFGMDhERkFFOUJG
RjkwMDkxNzAeFw0yNjA1MDMwMjI0MTZaFw0yNzA1MDIwMjI5MTZaMDMxMTAvBgNV
BAMTKDFDNEE0ODY4MDc2MzZDODg0MEQ0Mzc4RTlFN0U0RUU2OTU1NDA3REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVMrFZN0HUz9qeIHsyTSuTRAfG
RwhBSMAVLA96HT65VtONSWkGeO/DziSQOSCB1sryu5u+aeVUg4qziQe6paD9tOFO
72h6D1q25izhOUEWzArC/hea8ZCU2b5yWG/HADAqU25UXf0KkeF4xJoJ5ZksNtt5
ZcgOFpGK8cHi+Y56FJOYkyJEOsp1gffjAreDOsfNRa+a6+Uy/nsBvSJezaEz2YBw
w+MAWaFoDIcB77c3VqSdwNqWrt66IkDjsukw8MP1FCM8xCYqV/kO8JQV4jwTsKVm
MR3eWrEjlZkY+XSrntlDoLm1nF+T5yqwiwROszjfPcq1H21O53GHhR9fVUfrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUHEpIaAdjbIhA1DeOnn5O5pVUB94wHwYDVR0j
BBgwFoAUg7LbdHvtGuAd0LivCN+um/+QCRcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDI4ODc2MmMtM2ZjNS00OWNjLTk0OWEtNTk0YjMzMWExM2ExLzAvODNCMkRCNzQ3
QkVEMUFFMDFERDBCOEFGMDhERkFFOUJGRjkwMDkxNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84M0IyREI3NDdCRUQxQUUwMUREMEI4QUYwOERGQUU5QkZGOTAw
OTE3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQyODg3NjJjLTNmYzUtNDljYy05
NDlhLTU5NGIzMzFhMTNhMS8wLzMyMzAzMjJlMzQzNzJlMzEzNjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyi+gMA0GCSqG
SIb3DQEBCwUAA4IBAQAUaC/gC7iWFulns33PiCJ5+udesnLluYV6genLgDI+eP7+
RKpgVL82/FEkqUPLDewnuN9+dM8/iH5W3sd+EWPv7EO3LLPG8mC5GRKiFESuZErq
6zFxc1H+XRIKqmifxiympowqgFuARDV3oEW8uFli44/xPIumC2R8kJBcL+2dH5GV
cJTOwxngTEjATMW55/7cAHt8VVkqE+/vrQ6eH3eDwtu3P4HliQObB2Azt6kMDL4a
5lBAop1U+L6o4r5EogHDwJAMGbFEneVzMPuJMSC90QSdpb2MbzFp5gQdf8gGcrl7
9dZJlMzi3Vdck8u/wTqOHx/dadx5Oh2uyfR358Db
-----END CERTIFICATE-----
Generated at Wed May 13 09:17:23 2026 by rpki-client