Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa
File:                     3230322e302e3130372e302f32342d3234203d3e203535363937.roa (raw, json)
Hash identifier:          PkVVbgoFw66MPF2zwjon2GNSfbIfJE+9WsRpKXP88mM=
Subject key identifier:   AA:A6:B8:2C:41:D8:EF:D6:A0:05:55:89:6C:99:92:A8:F4:18:17:3A
Certificate issuer:       /CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
Certificate serial:       1716A927C2748F1F43A4238459646B6D14A2729D
Authority key identifier: 06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa
Signing time:             Sun 03 May 2026 02:37:27 +0000
ROA not before:           Sun 03 May 2026 02:32:27 +0000
ROA not after:            Sun 02 May 2027 02:37:27 +0000
asID:                     55697
IP address blocks:        202.0.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl
                          rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:16:a9:27:c2:74:8f:1f:43:a4:23:84:59:64:6b:6d:14:a2:72:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
        Validity
            Not Before: May  3 02:32:27 2026 GMT
            Not After : May  2 02:37:27 2027 GMT
        Subject: CN=AAA6B82C41D8EFD6A00555896C9992A8F418173A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:76:1c:c9:ce:95:ca:c9:05:a1:f7:ef:29:
                    3f:85:c9:c6:6a:3d:f9:e3:2b:14:59:52:67:70:83:
                    f0:9a:5f:f9:05:98:72:c3:25:0c:e3:ad:dd:79:74:
                    a0:8e:2d:0b:df:22:6d:25:89:0a:d0:de:c6:97:ba:
                    44:81:ef:cb:0f:62:8a:ea:7c:1b:77:19:49:05:08:
                    34:c6:4f:77:f9:c8:52:e6:dc:c0:59:98:f5:60:8f:
                    b3:8c:7a:21:e1:c7:f1:50:c0:98:e1:c6:04:79:05:
                    96:f7:0d:ec:eb:1c:4c:5c:b0:fe:ca:6b:b1:10:b2:
                    e5:bb:99:5f:d6:a9:b0:08:da:08:6c:29:4c:9a:70:
                    52:40:53:bc:dc:df:e7:02:3f:6c:79:ad:7c:18:90:
                    b2:10:16:60:1d:b9:e9:0a:4b:8d:51:c5:13:7a:20:
                    70:54:2a:c3:cc:40:31:ee:58:f2:9d:7a:d2:dc:22:
                    1a:04:c5:87:e1:f9:bd:60:6a:74:e5:41:53:b0:ed:
                    80:dd:6e:7c:1d:72:56:a1:a9:e2:97:d1:3d:a3:d5:
                    0f:3f:21:61:6b:f1:9e:4b:d5:0b:43:a0:11:09:1b:
                    a1:95:2b:37:99:c1:b3:be:c6:76:3d:79:17:6a:dd:
                    1f:05:b8:45:67:5c:1b:48:1d:f3:37:cb:3d:f5:ec:
                    75:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:B8:2C:41:D8:EF:D6:A0:05:55:89:6C:99:92:A8:F4:18:17:3A
            X509v3 Authority Key Identifier:
                keyid:06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:49:cb:41:bd:4c:5c:e3:bd:c3:dd:22:0a:76:82:6a:cd:59:
         5c:bb:01:90:15:7c:be:37:c1:92:9c:03:28:63:3e:d6:e8:97:
         43:09:b7:40:9f:7e:b1:61:e0:ff:8b:1e:00:18:f0:a4:bb:2d:
         16:3a:19:d8:5f:af:1c:d5:32:52:15:57:ff:eb:b6:41:22:41:
         3c:59:70:db:2e:93:a4:ce:98:92:a0:53:eb:56:7f:05:65:b7:
         30:79:eb:c3:c2:66:d1:a0:db:6f:3b:41:72:00:19:e4:8d:6a:
         18:e6:21:2d:c2:29:93:32:af:7f:62:15:c0:fb:0f:3d:d3:9a:
         08:df:5f:c8:c4:84:19:e7:e4:33:38:af:de:8d:1c:49:a7:26:
         34:b1:6b:d4:80:34:81:49:92:98:0c:b2:08:17:fe:bf:c4:66:
         d1:2d:eb:b9:54:32:c3:a5:aa:1b:b3:ab:e9:30:28:c2:7b:80:
         5c:d7:2c:f0:29:37:aa:c1:33:7f:dd:eb:d0:a9:89:1e:b8:29:
         ab:a2:cd:3d:32:ae:2b:97:3e:e1:af:8d:36:c6:ad:c2:df:4d:
         16:cc:b5:f5:5a:1b:a7:6d:b9:f8:2a:cb:4b:3e:ba:ba:38:d7:
         48:1f:ff:89:e2:1e:34:0a:51:97:11:05:f1:5f:e3:30:ba:fb:
         67:59:80:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:28 2026 by rpki-client