Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3230322e3135322e302e302f31382d3234203d3e2034383030.roa
File:                     3230322e3135322e302e302f31382d3234203d3e2034383030.roa (raw, json)
Hash identifier:          cicKi/T6f7Jr16t/8dsj0hJbDvZ04h7npH+a5sskg8g=
Subject key identifier:   58:EA:8E:2F:10:5D:44:37:D3:3B:2A:B9:29:CA:74:0E:72:7D:59:1D
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       082C1029AADEF6222ABF8FC76807AEC263F80002
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3230322e3135322e302e302f31382d3234203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:34:14 +0000
ROA not before:           Sun 03 May 2026 02:29:14 +0000
ROA not after:            Sun 02 May 2027 02:34:14 +0000
asID:                     4800
IP address blocks:        202.152.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2c:10:29:aa:de:f6:22:2a:bf:8f:c7:68:07:ae:c2:63:f8:00:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:14 2026 GMT
            Not After : May  2 02:34:14 2027 GMT
        Subject: CN=58EA8E2F105D4437D33B2AB929CA740E727D591D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:04:c6:aa:f3:77:d6:54:75:71:e8:df:1a:c3:
                    df:53:6d:11:28:cd:ad:b7:14:20:db:59:5b:cf:b3:
                    15:f5:b3:14:4a:a4:21:e7:74:58:40:5a:5c:97:0b:
                    3e:8f:97:8d:af:11:64:57:ba:44:29:2b:f5:4e:da:
                    b0:e9:43:6f:c8:29:26:27:4d:55:d7:21:de:ae:9a:
                    09:89:1f:b3:59:9a:3d:9b:e0:e9:19:ec:d2:e4:52:
                    62:e7:7b:8f:bc:ab:76:b1:df:83:92:e5:26:15:ac:
                    21:8f:e9:98:9d:0e:a4:c5:ea:ce:b7:56:97:d8:32:
                    40:97:db:05:f5:22:51:40:f8:37:1c:e1:3a:77:a6:
                    05:a0:2e:56:da:0d:df:4c:1b:b6:4c:40:2a:ca:48:
                    ae:70:cd:e9:68:bd:f5:67:cd:02:8f:25:4e:86:01:
                    45:e5:b3:16:e8:f5:6d:11:db:07:83:a1:7b:99:e4:
                    3a:05:3d:99:86:12:4a:12:f0:3f:cc:31:44:58:fa:
                    0a:2f:24:e4:c9:26:5d:54:31:4d:f6:2f:b5:b2:84:
                    0a:d4:da:b4:50:75:86:be:27:2c:69:80:e1:c9:2b:
                    49:89:5a:c2:75:02:54:ba:21:2a:a4:ac:62:a8:f0:
                    75:fe:ec:21:d1:2a:c1:c5:05:84:ea:ec:1f:79:e8:
                    8b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EA:8E:2F:10:5D:44:37:D3:3B:2A:B9:29:CA:74:0E:72:7D:59:1D
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3230322e3135322e302e302f31382d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.152.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b3:b1:0e:e7:f6:da:85:0d:ac:e3:d3:34:c4:51:29:f3:14:26:
         ff:96:e2:2b:08:83:51:ab:b4:57:50:b6:6b:9a:57:6a:43:f5:
         11:a2:d1:5b:22:2d:03:bf:8d:00:07:e3:af:41:ff:fa:47:cf:
         09:2b:eb:e8:0e:bc:ef:00:0c:d6:c3:15:2b:26:2c:e3:7b:e1:
         45:f7:c5:13:a3:be:7e:bf:e4:ab:5e:b3:37:6b:59:39:fb:82:
         53:60:1f:e7:fb:e1:ff:20:b4:f3:e0:8f:31:14:92:2c:fc:6c:
         c2:9b:bd:9d:b7:6a:af:82:d4:fe:5c:76:2e:7a:dd:4b:bd:29:
         16:f8:b2:f1:00:8e:c0:56:5d:57:cb:fd:62:65:81:a8:8b:4d:
         63:6c:36:df:1e:7e:5b:3b:6c:e2:b6:2f:53:16:56:be:26:0e:
         4d:cd:30:43:63:80:ea:78:c8:4e:21:06:19:7b:89:4f:06:21:
         ae:32:c4:05:fb:26:3a:72:09:ee:2a:32:0d:a3:07:47:fe:2b:
         ed:01:90:9a:a8:0f:2d:d6:88:cd:41:16:7d:6b:2b:89:a8:18:
         df:2e:8e:bd:84:77:7c:85:90:c4:e2:c3:db:2c:58:80:8c:4d:
         35:ba:a0:92:4f:a0:be:c3:51:95:24:0a:0a:11:22:13:32:8d:
         38:35:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:16 2026 by rpki-client