Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa
File:                     3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          HebSu8SCatdjWJX0KSFRf/Jwjzla//ePm6YqKIACjAQ=
Subject key identifier:   01:6E:7A:04:5E:C0:E4:3C:D1:4C:77:8A:93:E1:80:E6:23:96:1B:DF
Certificate issuer:       /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial:       55F6596A06F384FA67DC7085B4771ECDA64227C2
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa
Signing time:             Sun 03 May 2026 02:39:06 +0000
ROA not before:           Sun 03 May 2026 02:34:06 +0000
ROA not after:            Sun 02 May 2027 02:39:06 +0000
asID:                     45725
IP address blocks:        202.150.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
                          rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f6:59:6a:06:f3:84:fa:67:dc:70:85:b4:77:1e:cd:a6:42:27:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
        Validity
            Not Before: May  3 02:34:06 2026 GMT
            Not After : May  2 02:39:06 2027 GMT
        Subject: CN=016E7A045EC0E43CD14C778A93E180E623961BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:44:d7:5a:93:27:5b:48:8d:98:b4:32:28:
                    bd:ab:84:7b:cb:e6:8c:d2:f1:c6:cd:84:42:4a:15:
                    66:77:d3:2f:19:b3:ea:6d:bf:41:c1:74:f6:10:49:
                    a7:28:92:77:89:59:20:f6:01:cc:cb:41:c1:a1:ef:
                    41:38:60:6c:51:07:52:f8:19:45:ff:9c:e9:39:68:
                    51:80:d5:a3:84:b9:b1:20:4a:5d:60:ba:6f:dc:ee:
                    eb:5d:9f:08:d7:45:79:3e:b3:cf:ce:87:3a:75:6c:
                    3c:44:a5:ff:60:d5:21:ef:8c:bc:e8:f1:e6:85:05:
                    95:b5:a8:ef:3a:1c:e3:35:f2:7c:ff:a4:2b:03:cc:
                    cf:89:cc:66:50:11:16:a4:6c:32:37:5e:ea:4b:b7:
                    5e:33:c2:0e:e5:c4:73:fa:84:06:79:e1:5c:8b:73:
                    19:22:c2:4b:bf:f1:7d:ce:e4:10:d6:ff:98:2d:c5:
                    5d:61:fc:5c:62:31:45:bc:64:36:df:63:0a:ff:89:
                    74:24:50:ee:e5:11:21:34:b5:1a:72:3e:45:0e:f4:
                    6a:b4:fd:d8:2d:17:97:45:e4:db:7d:99:e8:e6:aa:
                    3e:ed:22:a3:a8:15:a1:d1:5f:41:d5:ce:40:de:53:
                    82:ee:af:1b:5a:2c:46:34:98:2e:22:66:96:0d:9c:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6E:7A:04:5E:C0:E4:3C:D1:4C:77:8A:93:E1:80:E6:23:96:1B:DF
            X509v3 Authority Key Identifier:
                keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:48:c2:f3:d1:a7:aa:c9:34:88:c7:94:cb:1a:91:3f:f6:d3:
         6c:57:d3:ff:1e:51:84:a6:0b:3e:ff:7d:6f:ae:f8:c5:8f:42:
         a3:67:78:15:96:a2:f2:58:4a:3f:44:e0:cf:61:ef:34:cf:91:
         93:50:98:f5:1e:1b:75:3a:54:de:60:2c:58:55:d5:60:6c:fb:
         2d:e0:db:35:c6:18:50:a3:1d:75:a9:59:7d:c0:2e:f1:76:a5:
         ec:c1:bf:e4:0b:81:f2:82:55:df:de:32:0f:7e:18:e5:cf:73:
         ee:80:3a:84:28:69:fd:ec:24:63:d7:81:6c:b4:cc:4f:cb:6e:
         4f:ce:f2:22:aa:31:cb:c2:08:8d:be:db:60:bd:9e:c7:b7:c0:
         37:fa:dc:b5:c9:83:1f:f6:03:6d:bc:67:2f:b5:d3:ac:39:93:
         1b:ef:1e:3b:4d:90:be:bb:4b:bf:90:54:e9:a6:d6:9b:b7:ca:
         8a:88:5d:e6:08:66:8a:da:ba:f3:ff:da:36:75:3f:3f:55:f7:
         07:51:1b:c8:05:3c:d7:ec:3d:a1:10:e5:dc:04:bb:1a:dd:0b:
         41:ef:b1:22:08:cf:3b:0e:d4:11:0d:b3:ff:4c:36:6c:8a:19:
         9d:7e:0a:18:94:90:fb:85:fc:e3:15:64:8d:56:d6:1d:5a:15:
         4b:62:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:35 2026 by rpki-client