Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa
File:                     3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          q7i3VvqcCD3x07FgXTMpDHT0smnebc3E8aK/7b0IAls=
Subject key identifier:   AF:15:FA:99:2C:FB:8C:8A:CC:88:7C:C1:95:00:12:F8:CC:84:19:5F
Certificate issuer:       /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial:       2F417F0E37544D2EA36871E70C8684F9C86E6887
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa
Signing time:             Sun 03 May 2026 02:39:15 +0000
ROA not before:           Sun 03 May 2026 02:34:15 +0000
ROA not after:            Sun 02 May 2027 02:39:15 +0000
asID:                     45725
IP address blocks:        202.150.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
                          rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:41:7f:0e:37:54:4d:2e:a3:68:71:e7:0c:86:84:f9:c8:6e:68:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
        Validity
            Not Before: May  3 02:34:15 2026 GMT
            Not After : May  2 02:39:15 2027 GMT
        Subject: CN=AF15FA992CFB8C8ACC887CC1950012F8CC84195F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:34:39:d4:6c:4d:a3:f9:37:93:a8:1d:64:8a:
                    31:bd:67:b6:c7:99:90:bd:4c:9e:8b:32:5c:bd:00:
                    53:ef:77:f9:48:31:8a:fe:28:f5:e6:02:bf:14:f8:
                    8e:3e:67:2e:de:80:07:75:ce:1a:78:62:49:48:d3:
                    0a:22:80:ef:14:fa:97:07:3d:64:3d:b8:0f:31:aa:
                    23:d3:59:5d:bb:06:d8:a9:d5:8c:4d:1b:10:40:bf:
                    02:54:ec:1c:d9:04:b1:57:ca:35:5b:8e:d6:fe:4e:
                    b2:02:19:a7:42:58:d4:13:d8:b5:4b:c1:cd:db:0d:
                    2f:2d:85:31:78:aa:27:bd:37:3d:23:e3:eb:8a:83:
                    e3:5f:31:2b:1f:6c:46:e5:b5:ff:e5:64:80:c6:1c:
                    ef:40:6c:19:7e:55:58:c0:29:16:32:f1:ea:24:90:
                    06:bc:67:9b:8e:e4:c4:72:22:2b:bf:32:9a:85:08:
                    3a:12:0b:4a:48:c8:b1:fd:59:05:dc:1a:5a:93:2b:
                    a9:c2:f8:f8:f3:21:a1:a6:6b:e1:a6:0e:75:b8:04:
                    7f:ee:8f:34:fa:1a:7b:7d:74:1e:15:0d:b1:d7:e3:
                    0d:2e:0d:89:26:f2:2d:fd:06:a3:c8:c7:df:3d:fb:
                    34:0d:d4:09:86:cb:bf:42:a7:7b:cb:bd:a5:d6:d8:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:15:FA:99:2C:FB:8C:8A:CC:88:7C:C1:95:00:12:F8:CC:84:19:5F
            X509v3 Authority Key Identifier:
                keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:2e:63:bf:ad:f8:2c:c6:06:d4:cc:8f:05:cb:b3:28:f9:ba:
         0f:02:f5:7a:0e:6c:4f:37:53:55:64:c4:65:29:b0:e6:c7:de:
         33:43:68:81:0b:ca:65:da:27:bc:8f:58:71:ee:70:bb:43:99:
         3d:18:3d:0d:f8:5a:ed:eb:03:28:b7:67:4c:4e:01:66:89:0e:
         59:85:de:2b:40:a0:73:f3:c5:58:7f:c8:f1:c0:0a:42:1b:18:
         af:75:ae:d6:1d:10:4e:8f:6f:92:f3:63:17:ac:57:aa:c5:28:
         22:75:87:30:cf:d3:52:9e:e9:db:96:95:58:c8:45:f2:35:37:
         1a:93:fe:92:0c:6b:24:36:0a:3a:4d:54:f7:98:6b:6d:2e:08:
         52:73:97:a1:86:01:28:b8:c0:06:7b:22:1e:9a:7c:1a:43:0e:
         dc:b1:a0:4c:a8:8e:e8:90:4f:c7:e2:47:9b:80:0a:e6:f1:0d:
         ab:7e:e7:5e:48:87:05:97:5b:82:3e:59:e8:b1:a9:2e:bd:96:
         39:ed:27:4c:f5:78:ab:e4:3e:a7:a6:6a:73:39:48:7c:30:ee:
         e9:a9:6d:c3:40:53:f4:e4:18:6b:09:95:f6:fe:ca:88:5c:01:
         7b:da:9a:df:ec:23:f5:ad:56:3f:fd:bd:76:aa:2f:6f:0b:b7:
         c5:9f:13:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:31 2026 by rpki-client