Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35322e302f32342d3234203d3e203338313435.roa
File:                     3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier:          4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=
Subject key identifier:   75:55:BC:73:DE:78:90:C7:49:92:BE:77:88:24:89:D3:2F:36:8B:05
Certificate issuer:       /CN=FAF852347432F9918D1450C78A1EC83C3599937A
Certificate serial:       144FCC46578046D9734B5450D552F807032BED18
Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35322e302f32342d3234203d3e203338313435.roa
Signing time:             Sun 03 May 2026 02:34:35 +0000
ROA not before:           Sun 03 May 2026 02:29:35 +0000
ROA not after:            Sun 02 May 2027 02:34:35 +0000
asID:                     38145
IP address blocks:        202.180.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl
                          rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4f:cc:46:57:80:46:d9:73:4b:54:50:d5:52:f8:07:03:2b:ed:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A
        Validity
            Not Before: May  3 02:29:35 2026 GMT
            Not After : May  2 02:34:35 2027 GMT
        Subject: CN=7555BC73DE7890C74992BE77882489D32F368B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:be:bc:9d:fe:e3:e6:64:e3:fa:3f:d1:57:
                    65:24:15:92:9f:e3:9c:33:01:d2:67:9b:1c:d8:ee:
                    8e:c3:48:fe:98:7f:db:3f:78:6e:03:0e:6c:f7:04:
                    64:ec:65:2d:d1:ce:c9:78:18:ff:3c:f8:70:a2:10:
                    7b:40:31:c8:cd:d3:84:22:73:94:ca:07:4c:a0:5a:
                    49:5b:98:50:a3:99:c3:e8:15:6e:c6:d1:94:02:98:
                    96:a6:9b:49:80:31:d2:ba:ae:b7:2d:40:9c:a6:98:
                    54:53:89:8d:bf:76:30:7b:0d:91:b0:2b:7d:52:3d:
                    3d:cd:93:34:04:76:3d:bc:b4:b9:50:d6:de:92:45:
                    87:1f:28:35:d5:54:24:ec:d8:0a:b6:e9:9a:c7:5c:
                    82:e7:be:57:ef:43:1e:ab:56:15:fc:4d:46:98:34:
                    bd:d9:24:8e:28:7d:bc:62:b7:f9:4f:bd:bf:34:86:
                    d3:e5:43:0a:38:55:9d:a7:6d:16:f8:60:42:94:ce:
                    e9:42:84:c7:d4:57:13:af:5f:53:a5:f1:9c:15:1c:
                    04:2a:59:9e:95:34:eb:ed:a5:81:f1:33:50:67:61:
                    6c:78:b7:fa:68:24:0c:0f:a4:dc:1b:e2:96:6d:dc:
                    90:41:d4:a0:c2:40:ca:d5:f9:04:b7:e0:16:6b:db:
                    38:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:55:BC:73:DE:78:90:C7:49:92:BE:77:88:24:89:D3:2F:36:8B:05
            X509v3 Authority Key Identifier:
                keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35322e302f32342d3234203d3e203338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:94:85:63:2f:50:ee:27:43:5c:a8:4d:d3:37:3a:96:81:1c:
         53:41:40:4d:dc:ed:de:26:2c:70:76:61:67:f1:33:46:62:3d:
         5c:6c:1e:6d:78:b3:8a:51:52:e7:d0:4d:f7:8c:48:1f:96:c6:
         df:23:3f:30:bc:93:0a:72:02:43:e3:49:d7:bb:a9:46:d5:e2:
         c5:53:fd:86:93:4d:f1:23:b3:f0:9a:4f:e1:6e:0b:ed:bf:7b:
         a3:89:5f:9a:35:e3:4f:a2:f4:cb:35:8d:da:26:f8:ce:e3:e0:
         53:01:10:3b:2e:74:aa:d6:ae:1b:c0:87:1c:8c:66:c9:5b:09:
         a9:1f:00:ca:7d:80:3d:a9:55:de:24:82:6e:45:90:40:dc:a1:
         15:97:92:81:21:bc:86:b0:9f:f6:6c:d0:3a:ed:f3:bf:f3:04:
         f3:6d:ac:a5:39:b3:92:f9:96:68:3b:99:bb:bb:92:0f:1a:40:
         ce:d7:cf:23:1c:fc:a6:71:ad:f5:79:ae:67:ad:bf:ad:1b:23:
         77:36:cb:b3:10:f4:57:a9:7d:c2:06:09:91:72:17:60:46:66:
         91:f4:91:73:4a:ee:75:8c:c3:f2:99:31:12:b8:f5:2d:33:ba:
         0a:38:86:ee:50:f3:47:a2:f5:ff:2b:ad:4e:d7:a3:f0:1e:4a:
         8d:69:8c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:27 2026 by rpki-client