Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa
File:                     3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (raw, json)
Hash identifier:          9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=
Subject key identifier:   59:AA:EB:53:62:FB:9A:C9:00:9C:84:2E:16:F3:39:DF:B4:AE:EA:8D
Certificate issuer:       /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597
Certificate serial:       7318945A2E5410B63C0CB0AF8283380E207F3A14
Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa
Signing time:             Sun 03 May 2026 02:33:14 +0000
ROA not before:           Sun 03 May 2026 02:28:14 +0000
ROA not after:            Sun 02 May 2027 02:33:14 +0000
asID:                     55696
IP address blocks:        202.50.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl
                          rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:18:94:5a:2e:54:10:b6:3c:0c:b0:af:82:83:38:0e:20:7f:3a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597
        Validity
            Not Before: May  3 02:28:14 2026 GMT
            Not After : May  2 02:33:14 2027 GMT
        Subject: CN=59AAEB5362FB9AC9009C842E16F339DFB4AEEA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:a5:5b:bc:22:8f:37:6e:0a:59:60:5b:ce:
                    71:b3:e7:4d:54:46:5f:1b:85:38:71:ac:c8:d9:0c:
                    e8:73:c3:94:1f:9e:31:9e:ec:2f:66:26:a2:72:2f:
                    06:8f:68:c9:f8:63:b2:6f:c0:88:b4:af:73:77:27:
                    0e:02:34:47:ab:81:02:f3:60:22:f1:eb:97:30:6b:
                    36:c5:75:38:42:1b:65:20:40:47:76:92:e0:dd:79:
                    8e:6a:fc:a6:e7:f1:e1:e2:9f:c0:7e:b8:fe:0c:e8:
                    62:89:17:bb:cc:55:0e:b7:69:75:c3:59:f0:72:6a:
                    25:3c:1f:54:63:2f:e1:7a:eb:b3:af:22:91:3c:4f:
                    86:83:9a:ef:0e:67:cb:f0:25:9b:92:0b:36:e6:a7:
                    4a:62:8b:9d:ab:46:5e:5f:52:ea:5f:2e:5a:61:6e:
                    c6:1e:9f:b6:89:a8:3e:1b:3b:ca:dc:5f:cf:b5:f6:
                    35:05:7c:50:15:2c:8a:7a:27:66:83:83:41:46:9a:
                    bc:1a:a7:53:f4:29:72:95:8d:02:7d:d2:db:af:ce:
                    26:fc:bc:4d:e9:fa:44:89:db:29:97:10:26:cc:e8:
                    9f:12:dc:4f:3d:e8:16:b6:fe:5c:c1:3a:be:a1:ff:
                    00:0b:bd:d4:73:0a:b5:c8:2f:85:5b:4f:ac:1c:ac:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AA:EB:53:62:FB:9A:C9:00:9C:84:2E:16:F3:39:DF:B4:AE:EA:8D
            X509v3 Authority Key Identifier:
                keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:0a:10:64:27:7c:da:0c:bb:a2:2a:16:cf:c1:e2:e3:42:
         be:33:f6:87:b5:91:a3:16:8d:ff:48:33:4b:b9:48:09:65:df:
         28:90:26:0b:5c:80:63:0a:72:f2:c5:45:d3:a5:48:34:93:a3:
         83:d2:b7:4a:9d:1a:79:40:56:2e:99:61:89:f0:1e:2a:58:9d:
         7b:6c:c8:12:a9:56:4c:fa:12:68:09:b8:f9:50:48:b3:be:96:
         99:ad:28:a2:22:72:0c:73:67:fa:6b:ca:ac:c8:48:76:9d:59:
         8f:9b:1b:f2:e9:26:d6:da:58:55:15:3e:2a:77:42:3a:17:d4:
         9f:f7:da:bb:8c:9c:18:46:60:48:7a:92:fd:84:ed:00:a6:d2:
         59:e4:86:19:20:a9:51:d3:e0:39:dc:89:4b:e2:36:07:1d:12:
         91:77:a2:fe:75:16:12:7d:d2:d4:72:c8:44:c7:2c:ec:03:4f:
         52:26:f2:ec:e7:9b:de:65:61:6c:e1:bb:39:5d:4f:7e:a3:2a:
         f6:98:30:8e:d4:9d:cc:8d:f1:56:ad:f0:1d:ac:7f:b1:e2:66:
         95:b4:bc:c0:9e:9f:e9:3d:c7:58:d9:8c:f7:87:3e:a8:61:e7:
         b6:c2:19:b0:16:cc:16:cc:ef:ff:9f:8d:f0:e3:bd:99:cf:74:
         69:cb:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:36 2026 by rpki-client