Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa
File:                     3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (raw, json)
Hash identifier:          St+whbiWn8DuDZzEPL2qqiXyvmUfCd91hjaKC3vJifA=
Subject key identifier:   4E:8F:10:32:D4:36:E5:5B:24:24:99:76:65:F8:5F:EC:55:E1:CD:1C
Certificate issuer:       /CN=A655C14C173A3BE852B5A2C52C501937C4340242
Certificate serial:       412B7C998A8A7D8C42599389941B97423FB5349C
Authority key identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa
Signing time:             Sun 03 May 2026 02:34:49 +0000
ROA not before:           Sun 03 May 2026 02:29:49 +0000
ROA not after:            Sun 02 May 2027 02:34:49 +0000
asID:                     152037
IP address blocks:        202.47.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl
                          rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2b:7c:99:8a:8a:7d:8c:42:59:93:89:94:1b:97:42:3f:b5:34:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A655C14C173A3BE852B5A2C52C501937C4340242
        Validity
            Not Before: May  3 02:29:49 2026 GMT
            Not After : May  2 02:34:49 2027 GMT
        Subject: CN=4E8F1032D436E55B2424997665F85FEC55E1CD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:93:c0:89:f9:b8:4d:ff:5b:c1:eb:a0:c0:55:
                    a6:e4:06:1e:75:7b:db:4f:53:7a:06:95:50:22:81:
                    8d:1f:29:b8:bc:0e:97:58:62:f2:3f:90:2c:5f:73:
                    d8:06:44:ac:2e:df:cd:a6:e3:d8:60:a8:64:e2:bf:
                    e9:ca:60:ef:c6:ae:a2:82:8c:26:db:4a:4b:0c:b6:
                    c0:a5:2e:52:71:8a:ae:ec:6b:b6:56:d8:84:ad:65:
                    7d:33:45:0c:23:26:0f:88:d1:e7:33:4b:ef:8c:ac:
                    97:b9:5d:e8:85:f0:c8:e5:8e:6e:60:75:47:4a:ca:
                    ee:20:1e:0f:49:e1:12:84:b2:b4:92:18:d2:a0:c7:
                    77:58:6e:e2:ec:c1:cd:f2:d9:a2:16:9d:54:00:65:
                    43:0a:0e:43:17:ff:96:7e:2e:43:a8:94:d9:11:c8:
                    50:7a:c0:8a:5f:f7:fe:fb:56:12:01:6b:4b:ed:f9:
                    74:b0:43:c8:82:5a:6a:1b:12:a7:e0:de:46:05:18:
                    17:3a:7d:2d:e5:12:01:97:48:5b:ac:69:68:09:74:
                    3e:3b:3e:08:cc:77:94:e2:05:aa:81:3f:c9:50:28:
                    96:41:c1:50:27:5c:d9:3f:8c:9b:dc:72:bc:4f:a7:
                    f0:dc:25:dc:d4:8a:ec:5d:bd:2b:2f:72:50:09:5e:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8F:10:32:D4:36:E5:5B:24:24:99:76:65:F8:5F:EC:55:E1:CD:1C
            X509v3 Authority Key Identifier:
                keyid:A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:7a:35:5c:c2:be:fa:c3:a3:db:9c:ff:0b:5a:42:df:11:57:
         39:7d:ca:38:22:bb:45:8a:d6:69:45:44:14:d1:c7:34:03:45:
         28:f0:82:44:d8:aa:ad:44:5c:4e:73:03:31:49:48:a4:00:f9:
         db:86:e3:f7:5d:a3:f3:7b:98:12:53:c5:5d:9f:14:45:71:f5:
         70:c1:43:8f:f6:b0:82:66:dd:8f:82:d8:3c:41:4b:3a:e6:ee:
         fb:20:38:8f:dc:da:f8:27:a7:7e:5e:9b:4f:3e:e3:5c:9c:9f:
         cd:4c:2d:6d:f2:68:48:91:66:41:05:c7:b3:80:1d:1a:84:d6:
         7e:c2:c8:c7:2b:60:47:92:b2:1a:3d:80:1a:b3:c6:6d:7b:77:
         45:fc:a7:dc:d7:d3:17:17:2d:23:e3:0c:33:2c:dd:d4:d4:93:
         6e:54:7f:a5:e0:c5:e7:37:97:a1:d7:86:1c:21:0d:c8:2c:f8:
         22:c7:1c:8b:ee:4b:1e:f6:11:71:33:ed:31:ff:4e:3c:50:a8:
         a0:70:e2:39:da:92:f5:85:1b:57:d1:96:df:5d:72:0d:f7:7f:
         1f:f5:2a:ae:e2:d5:e9:0c:d5:a3:b4:1a:6a:73:89:bc:b8:52:
         a9:19:b8:7c:e1:7b:c4:1e:09:a5:9a:bf:e3:eb:f9:71:57:1b:
         35:e9:cf:33
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQSt8mYqKfYxCWZOJlBuXQj+1NJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5MzdD
NDM0MDI0MjAeFw0yNjA1MDMwMjI5NDlaFw0yNzA1MDIwMjM0NDlaMDMxMTAvBgNV
BAMTKDRFOEYxMDMyRDQzNkU1NUIyNDI0OTk3NjY1Rjg1RkVDNTVFMUNEMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkk8CJ+bhN/1vB66DAVabkBh51
e9tPU3oGlVAigY0fKbi8DpdYYvI/kCxfc9gGRKwu382m49hgqGTiv+nKYO/GrqKC
jCbbSksMtsClLlJxiq7sa7ZW2IStZX0zRQwjJg+I0eczS++MrJe5XeiF8Mjljm5g
dUdKyu4gHg9J4RKEsrSSGNKgx3dYbuLswc3y2aIWnVQAZUMKDkMX/5Z+LkOolNkR
yFB6wIpf9/77VhIBa0vt+XSwQ8iCWmobEqfg3kYFGBc6fS3lEgGXSFusaWgJdD47
PgjMd5TiBaqBP8lQKJZBwVAnXNk/jJvccrxPp/DcJdzUiuxdvSsvclAJXnCfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTo8QMtQ25VskJJl2Zfhf7FXhzRwwHwYDVR0j
BBgwFoAUplXBTBc6O+hStaLFLFAZN8Q0AkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTgxMjc0YWYtN2NkMC00MGFmLWEzMjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMx
NzNBM0JFODUyQjVBMkM1MkM1MDE5MzdDNDM0MDI0Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNjU1QzE0QzE3M0EzQkU4NTJCNUEyQzUyQzUwMTkzN0M0MzQw
MjQyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU4MTI3NGFmLTdjZDAtNDBhZi1h
MzIxLTY3Njg5OGQ1OGRiOC8wLzMyMzAzMjJlMzQzNzJlMzEzNjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyi+jMA0GCSqG
SIb3DQEBCwUAA4IBAQA+ejVcwr76w6PbnP8LWkLfEVc5fco4IrtFitZpRUQU0cc0
A0Uo8IJE2KqtRFxOcwMxSUikAPnbhuP3XaPze5gSU8VdnxRFcfVwwUOP9rCCZt2P
gtg8QUs65u77IDiP3Nr4J6d+XptPPuNcnJ/NTC1t8mhIkWZBBcezgB0ahNZ+wsjH
K2BHkrIaPYAas8Zte3dF/Kfc19MXFy0j4wwzLN3U1JNuVH+l4MXnN5eh14YcIQ3I
LPgixxyL7kse9hFxM+0x/048UKigcOI52pL1hRtX0ZbfXXIN938f9Squ4tXpDNWj
tBpqc4m8uFKpGbh84XvEHgmlmr/j6/lxVxs16c8z
-----END CERTIFICATE-----
Generated at Wed May 13 10:37:03 2026 by rpki-client