Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa
File:                     3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (raw, json)
Hash identifier:          VTw+tu3SsLrqMi7jJgKUunIG386oKhLKeizx0PYXC2g=
Subject key identifier:   6B:B0:1D:8D:8B:0C:4E:A7:CB:91:EF:6A:88:40:D5:09:90:F8:ED:FF
Certificate issuer:       /CN=A655C14C173A3BE852B5A2C52C501937C4340242
Certificate serial:       12364A2D0461F7F5A08E8B0C58D54503F729AF8B
Authority key identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa
Signing time:             Sun 03 May 2026 02:34:48 +0000
ROA not before:           Sun 03 May 2026 02:29:48 +0000
ROA not after:            Sun 02 May 2027 02:34:48 +0000
asID:                     152037
IP address blocks:        202.47.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl
                          rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:36:4a:2d:04:61:f7:f5:a0:8e:8b:0c:58:d5:45:03:f7:29:af:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A655C14C173A3BE852B5A2C52C501937C4340242
        Validity
            Not Before: May  3 02:29:48 2026 GMT
            Not After : May  2 02:34:48 2027 GMT
        Subject: CN=6BB01D8D8B0C4EA7CB91EF6A8840D50990F8EDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:17:72:1b:33:49:93:a5:5e:79:5d:4c:75:
                    bf:3e:0c:d9:4e:5a:78:ed:21:e4:a4:02:aa:cd:6d:
                    14:71:03:f5:97:35:4d:7e:59:61:6e:4b:16:64:e4:
                    7d:17:bb:df:76:71:06:c0:10:17:0d:23:18:d1:e5:
                    70:f2:54:13:c2:bf:a4:df:25:ee:08:50:20:10:8a:
                    4c:ac:da:ff:46:fe:ea:ab:76:df:d8:8f:4c:62:ea:
                    71:d1:f1:9d:2d:76:b1:94:d9:2e:d4:6b:18:12:70:
                    cd:7d:74:89:53:b9:a0:70:b0:4e:f3:f4:c8:a1:f4:
                    b4:56:bb:a2:8d:63:03:9b:18:53:a1:b5:48:fd:87:
                    9a:79:9f:cd:2f:37:91:cf:68:d8:10:d1:c6:83:28:
                    48:bd:fd:f8:c8:8c:21:ab:bb:28:29:1f:a0:8f:01:
                    e7:04:ab:ac:9f:a9:54:93:b1:d0:30:3f:b4:8b:ba:
                    b0:2b:7a:e1:9b:3d:4e:13:da:64:cd:52:ac:25:b7:
                    4c:c5:08:11:f7:97:1f:62:6b:85:ad:a6:d8:62:13:
                    eb:2f:66:cb:74:f6:91:ec:33:df:c5:24:dc:16:b3:
                    b8:31:dd:48:c7:2d:40:99:4e:97:96:92:47:1e:42:
                    af:c2:52:f8:70:1c:9e:e4:8f:5f:be:02:b0:03:00:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B0:1D:8D:8B:0C:4E:A7:CB:91:EF:6A:88:40:D5:09:90:F8:ED:FF
            X509v3 Authority Key Identifier:
                keyid:A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:18:75:5b:ec:9e:47:91:cb:fb:b9:5a:87:08:9e:3a:e2:
         3d:df:45:f3:18:84:02:71:b7:a4:a4:16:8c:fe:43:7b:1f:c8:
         c8:81:bb:6e:5e:d2:45:77:34:c6:ec:eb:3d:30:9b:5b:ad:a1:
         3d:f9:0c:07:2a:c3:47:de:7b:a7:54:26:00:3d:9d:83:92:ce:
         e9:bb:a5:27:10:62:8a:c8:ae:3e:7a:3f:dd:85:9c:b5:55:8f:
         69:0f:f1:21:0f:be:51:f4:d7:ff:e7:34:29:d4:87:e1:3d:76:
         5c:c0:13:19:0e:9e:b4:da:db:6a:a7:c0:3f:86:4b:1c:37:b4:
         d7:be:1d:2e:a7:bd:e4:c5:8a:52:1b:d2:e7:93:18:e2:f2:dd:
         15:8a:67:db:df:8d:f1:9e:0f:2e:14:36:c2:34:60:e7:5a:20:
         dd:6a:dd:3a:42:b9:bc:a6:5f:0b:b2:c5:30:75:0f:dd:b0:f1:
         d9:bd:d9:9f:4d:8f:6d:af:66:99:b6:58:6a:37:d0:ce:ff:e0:
         c4:da:05:07:da:3b:8e:97:bf:c7:82:da:81:21:f7:f1:69:24:
         a2:eb:f8:b5:45:de:3b:07:02:2f:17:9c:c6:fd:56:aa:dd:48:
         45:8c:df:9f:cf:1d:46:22:79:4e:dc:16:6c:82:f3:8b:d3:40:
         3b:b4:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:22 2026 by rpki-client