Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa
File:                     3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          AeiBVEKUpvDKxzGDBuNXy0HO0C2sU0qRHIequTJ3z1g=
Subject key identifier:   E7:99:A1:0B:55:FD:E6:A5:49:02:8F:93:78:0D:77:A8:38:F7:B3:8A
Certificate issuer:       /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial:       73F763070C89E4CA009887525F1201A13ADD2FE1
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa
Signing time:             Sun 03 May 2026 02:39:10 +0000
ROA not before:           Sun 03 May 2026 02:34:10 +0000
ROA not after:            Sun 02 May 2027 02:39:10 +0000
asID:                     45725
IP address blocks:        202.150.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
                          rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f7:63:07:0c:89:e4:ca:00:98:87:52:5f:12:01:a1:3a:dd:2f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
        Validity
            Not Before: May  3 02:34:10 2026 GMT
            Not After : May  2 02:39:10 2027 GMT
        Subject: CN=E799A10B55FDE6A549028F93780D77A838F7B38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:4c:9b:e3:7a:19:4c:db:cf:1d:f7:01:b3:
                    84:71:3c:be:f4:a1:64:6a:27:08:17:71:83:6c:a6:
                    32:bb:29:4c:c8:a5:7c:2f:38:b7:c8:ae:83:19:92:
                    b2:5f:4f:46:df:2b:3e:1a:1f:93:28:bd:af:cb:ae:
                    f3:c6:a3:c7:53:2d:75:4d:76:02:55:4a:00:06:fe:
                    4e:fe:0d:0c:08:bc:38:58:4b:2b:7a:be:d5:39:30:
                    f4:dd:ad:3c:b4:f6:85:2f:f3:da:5c:58:96:06:a9:
                    de:f0:c2:51:ed:b5:82:53:fa:33:4c:33:33:ef:e1:
                    c1:cc:00:27:27:a7:f8:4b:6a:34:23:93:e2:fd:e4:
                    72:c4:9f:4d:2b:26:2d:03:99:03:71:37:96:70:a1:
                    33:d9:db:53:b0:d6:63:af:ff:ae:13:19:a6:96:d6:
                    e1:8a:f2:c1:f1:32:be:cb:86:19:00:a2:1b:f8:75:
                    83:31:68:6b:37:21:fa:c2:03:c7:ca:e9:e2:15:4c:
                    ef:c7:77:57:81:a5:8c:0b:45:1c:24:10:50:94:e1:
                    2f:2a:20:60:64:25:0c:eb:9a:94:6a:6e:b8:96:18:
                    42:8d:63:5d:c7:49:b8:c4:2d:59:1d:45:8a:10:ea:
                    8f:50:cd:19:91:3f:88:67:c0:c4:05:86:1c:c9:c0:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:99:A1:0B:55:FD:E6:A5:49:02:8F:93:78:0D:77:A8:38:F7:B3:8A
            X509v3 Authority Key Identifier:
                keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:64:55:39:bb:8d:8e:25:78:61:96:5f:ea:50:29:46:f4:85:
         2d:70:fb:2a:74:7d:39:e6:3a:4d:5b:5a:37:ec:67:97:5f:84:
         b0:a7:bb:11:34:c0:bd:55:ff:18:24:fe:82:68:6f:25:66:2a:
         93:7b:ef:d3:77:c2:76:91:be:51:45:66:3b:33:ff:d4:ba:f8:
         31:72:2d:c7:f0:fe:a1:2f:0f:2f:2e:1b:bb:49:43:7f:19:52:
         16:01:53:17:53:7c:62:8c:ce:c5:be:af:4f:bd:17:d4:e0:1d:
         33:f0:c1:fc:e1:7f:4e:46:99:4e:9c:69:0b:ff:90:0d:98:66:
         dd:97:c3:ce:1e:22:b0:fd:73:5a:e2:a1:80:7b:96:35:c8:cc:
         ed:df:67:c4:41:48:b9:6f:f5:fa:f8:7f:ad:07:84:d9:e5:e2:
         74:ed:23:a2:96:f6:f1:c9:81:44:9a:79:c2:bc:9d:8c:a6:33:
         5a:4c:7c:b5:69:8d:e8:04:fd:99:4e:8e:34:92:eb:56:33:8c:
         79:de:a2:ca:11:d7:f9:95:71:1d:a1:3c:d9:bd:32:c2:a7:94:
         7b:fd:c8:d2:a9:2d:be:37:fe:ea:08:c3:24:c4:54:96:e0:6f:
         5f:48:15:75:d7:9d:8b:b9:73:6b:e8:2f:74:82:76:05:b7:dc:
         58:b5:7c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:44 2026 by rpki-client