Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230302e302f32342d3234203d3e203535363936.roa
File:                     3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (raw, json)
Hash identifier:          j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=
Subject key identifier:   60:78:D0:EA:76:FC:B3:BC:78:E1:57:F0:5F:AE:CF:83:73:20:C3:21
Certificate issuer:       /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597
Certificate serial:       34596BDB2D0CC318930B9137D42B39C39463F103
Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230302e302f32342d3234203d3e203535363936.roa
Signing time:             Sun 03 May 2026 02:33:13 +0000
ROA not before:           Sun 03 May 2026 02:28:13 +0000
ROA not after:            Sun 02 May 2027 02:33:13 +0000
asID:                     55696
IP address blocks:        202.50.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl
                          rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:59:6b:db:2d:0c:c3:18:93:0b:91:37:d4:2b:39:c3:94:63:f1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597
        Validity
            Not Before: May  3 02:28:13 2026 GMT
            Not After : May  2 02:33:13 2027 GMT
        Subject: CN=6078D0EA76FCB3BC78E157F05FAECF837320C321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:63:be:fe:19:56:59:23:f8:43:71:5e:ad:
                    ff:cf:f9:ea:b2:00:ab:47:98:15:8a:ae:b0:62:ec:
                    6d:71:26:31:f4:c2:3d:9e:ce:dd:62:64:50:2d:e7:
                    f3:03:e8:9f:e6:28:14:6b:ec:54:00:ee:b5:f7:dc:
                    8b:7e:d5:e3:f1:d4:e3:a5:0d:28:89:da:79:3b:30:
                    60:ba:f2:f2:f6:3c:92:9d:ac:a5:87:3d:d7:6e:fd:
                    2f:cf:ed:66:d0:3d:95:8e:bf:c1:3c:2f:97:68:96:
                    42:fb:4e:2e:d8:00:d7:07:7a:66:aa:0f:45:11:a4:
                    7b:bc:73:89:d0:a8:5f:f0:a6:1b:ff:57:8e:4c:8c:
                    78:8c:3d:af:c4:7a:86:14:69:4a:57:7e:be:94:f9:
                    e0:7a:3d:b2:cd:49:65:61:26:f0:af:e1:1e:c2:15:
                    d4:bf:4d:e5:0c:ed:e4:f8:34:76:f9:f5:e9:3c:28:
                    b1:32:f0:6b:6b:3a:61:88:46:f9:f6:a5:88:d8:e2:
                    ef:f1:49:db:fb:98:d5:fa:fc:54:e1:18:db:c2:c9:
                    69:9a:52:bc:3a:24:22:87:a7:d3:e9:62:0f:32:10:
                    3b:04:19:ab:d3:dd:00:bc:1d:ac:d7:fb:47:fa:f2:
                    73:0a:4f:b1:73:29:4f:78:2c:fb:35:c7:df:37:b6:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:78:D0:EA:76:FC:B3:BC:78:E1:57:F0:5F:AE:CF:83:73:20:C3:21
            X509v3 Authority Key Identifier:
                keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230302e302f32342d3234203d3e203535363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:e0:b8:5a:7d:1b:49:8a:7a:c6:86:8f:a3:16:4b:74:59:cc:
         01:ea:8f:4c:2f:36:d9:a5:cc:56:8f:4c:d6:30:9b:89:07:c7:
         dd:ec:f8:21:08:e1:94:67:3a:e2:14:65:2e:62:02:cc:c0:32:
         c8:35:cc:8a:5a:10:a6:88:da:b5:40:a3:45:02:3e:b0:21:81:
         b4:03:5f:b2:ba:ae:bd:1d:39:d7:4c:73:39:5e:06:e1:a2:41:
         c4:37:eb:97:84:f9:31:25:92:a3:b3:ed:a7:7a:dc:50:44:95:
         4a:7d:49:51:48:7f:f2:a8:5d:a7:56:1d:b5:e1:af:13:0b:41:
         ea:71:eb:26:b5:d8:02:1c:af:d6:45:00:7a:ec:8b:b1:0a:26:
         67:25:c5:e8:10:83:30:b3:75:9a:78:2e:1f:c9:03:42:8e:70:
         fb:da:3a:1b:f0:42:17:34:a1:72:ca:43:2a:77:41:b6:55:51:
         18:7b:b6:3d:15:1f:a9:f0:1c:b3:c1:7f:a3:14:41:a1:0f:b6:
         f4:83:26:a6:eb:3e:4d:1c:c3:31:00:76:b5:1a:00:c4:12:87:
         f4:38:a4:5c:56:9f:4a:26:1c:a5:da:7e:c5:68:d1:2f:27:19:
         a1:96:30:18:d4:9a:ad:4c:78:92:e3:35:4d:63:39:c2:bf:fd:
         0b:ef:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:03 2026 by rpki-client