Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35342e302f32342d3234203d3e203338313435.roa
File:                     3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier:          jYh/8DeC6MGduy9a59ZlrYpV1Zy029mpfofzMC1+aS4=
Subject key identifier:   3C:4B:34:8D:26:D9:4D:E4:F8:EA:A2:C2:75:82:65:4C:3C:C9:38:F1
Certificate issuer:       /CN=FAF852347432F9918D1450C78A1EC83C3599937A
Certificate serial:       04746A834B2DAFC9D4CF21A33FB3816FD454E866
Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35342e302f32342d3234203d3e203338313435.roa
Signing time:             Sun 03 May 2026 02:34:35 +0000
ROA not before:           Sun 03 May 2026 02:29:35 +0000
ROA not after:            Sun 02 May 2027 02:34:35 +0000
asID:                     38145
IP address blocks:        202.180.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl
                          rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:74:6a:83:4b:2d:af:c9:d4:cf:21:a3:3f:b3:81:6f:d4:54:e8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A
        Validity
            Not Before: May  3 02:29:35 2026 GMT
            Not After : May  2 02:34:35 2027 GMT
        Subject: CN=3C4B348D26D94DE4F8EAA2C27582654C3CC938F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:84:e7:03:60:f7:cb:86:ca:2a:6d:1a:b1:
                    db:3f:f7:d8:d8:9c:bc:44:bf:d6:6c:73:93:14:58:
                    fd:62:ce:bc:b8:b2:8d:4f:c4:92:bf:eb:24:21:25:
                    be:90:b6:17:c3:95:2e:1b:e6:3f:80:18:02:ec:f6:
                    84:3f:ba:76:68:02:a9:45:c2:f0:c9:6d:97:72:c9:
                    66:02:28:10:0c:18:55:ae:e4:09:a4:b8:62:ba:a1:
                    bb:96:da:92:2e:3d:89:a3:1b:f6:3c:1b:18:c3:ad:
                    14:1f:23:00:a5:b7:d8:6e:90:68:08:a0:66:a3:05:
                    61:e2:be:f1:10:43:96:e3:93:80:6e:dc:c8:22:6b:
                    25:a0:3e:39:57:7c:fe:ee:21:aa:e7:dc:20:1b:a6:
                    01:6f:ce:40:8c:b3:b9:e2:93:52:d3:dd:1a:83:db:
                    9a:a6:63:bf:9f:95:72:5a:f7:3e:3c:74:45:ce:3f:
                    84:ad:b8:a9:90:12:d8:e8:34:1f:73:0a:81:f8:c0:
                    1a:da:3d:27:74:0c:5b:6e:8a:3a:29:ae:67:dd:90:
                    f1:db:2d:05:9e:c3:7e:87:20:6d:51:e8:41:f9:48:
                    39:8d:06:fb:b8:16:4a:92:ae:7c:15:aa:42:be:3e:
                    d4:11:b3:26:82:3a:c0:80:bc:42:88:82:2a:fa:33:
                    a8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4B:34:8D:26:D9:4D:E4:F8:EA:A2:C2:75:82:65:4C:3C:C9:38:F1
            X509v3 Authority Key Identifier:
                keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35342e302f32342d3234203d3e203338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:85:d1:3e:cb:86:09:c0:01:e8:d3:cf:c5:7a:53:92:b2:1e:
         89:b1:64:95:83:9c:e0:5d:42:e6:65:65:a9:36:60:17:8f:e4:
         f8:03:40:29:5c:51:75:d1:ef:9d:0b:f1:6c:4a:e1:1c:16:0a:
         c9:86:1d:ca:50:5e:14:95:f0:9b:1a:37:79:61:14:f5:ac:41:
         b2:37:3e:a5:5f:2f:b8:f4:3e:33:f8:96:51:be:66:74:21:4e:
         7f:62:73:ec:b2:aa:40:3c:16:66:bc:e6:6f:b3:ce:0a:2b:d2:
         fe:85:8e:67:ad:72:f5:f5:0e:ce:27:14:61:df:cd:8b:6b:09:
         33:2a:71:4d:9a:ed:a0:2c:b7:0b:d8:27:23:23:a7:85:20:6a:
         7d:b2:df:59:a7:bb:37:07:49:14:aa:32:d3:54:bc:bc:87:77:
         61:68:cd:b1:1c:8d:c4:6b:c1:a9:4d:77:89:e1:41:33:41:77:
         10:b1:80:19:3a:f9:3a:c6:b4:4c:b4:69:b2:33:3c:f4:ae:8c:
         49:46:21:ba:bc:6a:12:26:b4:83:45:46:f8:41:55:7d:5b:df:
         6d:51:c6:16:15:62:be:88:65:d6:1c:60:4f:7b:c5:86:4d:f9:
         29:59:a4:2b:b8:66:34:8e:62:1e:29:14:cc:ad:7f:06:1c:c4:
         b5:b0:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:24 2026 by rpki-client