Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37332e302f32342d3234203d3e203435323938.roa
File:                     3230322e34332e37332e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          tVfRZp6f+AWfshFsgerAOwxwSTX5duGY0+gwqpeM1Nw=
Subject key identifier:   4B:AB:4C:73:6B:D9:E8:78:5B:FD:56:98:81:F2:0D:25:4A:AE:EA:B3
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       36032D18160A97484DA00B8C89E4BFEBFA83B247
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37332e302f32342d3234203d3e203435323938.roa
Signing time:             Sun 03 May 2026 02:39:53 +0000
ROA not before:           Sun 03 May 2026 02:34:53 +0000
ROA not after:            Sun 02 May 2027 02:39:53 +0000
asID:                     45298
IP address blocks:        202.43.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:03:2d:18:16:0a:97:48:4d:a0:0b:8c:89:e4:bf:eb:fa:83:b2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:53 2026 GMT
            Not After : May  2 02:39:53 2027 GMT
        Subject: CN=4BAB4C736BD9E8785BFD569881F20D254AAEEAB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1a:0e:75:03:4c:9d:84:20:5b:df:f5:4c:c6:
                    e3:79:3d:fd:89:41:04:5b:83:ed:d1:91:89:9e:76:
                    30:86:42:b5:5b:58:7c:f3:25:78:4d:70:0b:16:75:
                    a9:6b:db:33:b6:3b:01:dc:6b:62:5a:ab:ee:3e:83:
                    6a:76:63:3c:c4:54:22:75:70:ba:a4:d8:f1:f1:b5:
                    ba:ae:25:0e:7c:a6:0b:4f:d7:ff:77:4e:e6:7f:df:
                    61:65:71:a2:ec:bd:65:64:bc:7d:a5:91:0d:9c:e3:
                    20:c3:6a:ef:08:3e:24:fd:c4:98:e2:07:89:0b:6c:
                    a6:43:99:7c:ed:36:f1:50:6c:b0:c9:c9:7c:86:2f:
                    fc:22:56:79:4f:d5:06:01:c5:58:9e:7d:4c:be:e7:
                    45:35:f3:e0:3c:67:9d:52:89:16:11:9a:9d:fc:f1:
                    84:ad:3f:71:9b:b4:da:b2:78:0e:15:37:e4:0d:ec:
                    ab:a4:df:fa:44:25:11:21:c0:8f:ff:82:bf:f6:e0:
                    2c:58:4f:4d:5e:65:39:98:85:34:aa:20:62:06:2f:
                    81:a6:11:0f:d5:55:d8:fd:d6:63:49:4f:39:59:f6:
                    a9:29:ee:08:5f:71:75:86:d5:64:6c:2f:cc:6d:25:
                    7b:d2:c5:6f:67:b1:60:c4:0e:20:e8:9c:14:00:3d:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AB:4C:73:6B:D9:E8:78:5B:FD:56:98:81:F2:0D:25:4A:AE:EA:B3
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37332e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:9f:9c:20:1b:43:6b:93:85:7e:52:48:5f:ca:25:5f:3b:60:
         c2:53:8a:97:60:41:7c:2b:3a:85:18:9d:0c:21:b8:d5:1f:9f:
         43:c4:55:47:02:ca:0a:29:3b:4f:b8:22:d7:f4:45:74:77:64:
         05:bc:47:bb:26:dd:3d:85:23:37:34:6e:be:80:02:bd:2a:a5:
         e1:f7:38:76:01:e2:39:93:8b:d8:25:bf:f6:0b:7f:56:48:1d:
         ce:2e:e3:26:7e:ec:9d:e3:2e:07:9c:3c:64:65:ce:27:21:46:
         61:d9:50:97:10:6b:b6:a0:b4:74:0a:20:6e:32:4d:e9:56:9a:
         e9:ac:59:6c:5a:68:3d:36:be:4b:61:9c:56:a6:91:14:92:aa:
         2b:ee:59:20:72:d1:33:0e:3a:55:91:ad:69:b2:49:84:44:98:
         fe:26:f4:a2:de:30:75:ee:d3:05:3b:5b:ae:95:b8:c3:28:78:
         c0:35:39:07:52:a2:b4:0b:7d:73:4e:94:4f:b1:78:fb:fe:99:
         e2:36:36:5c:e7:53:39:59:ba:1d:c7:96:9d:83:27:68:1e:54:
         20:01:cb:8e:82:a1:d4:de:ec:ea:98:1f:ae:75:50:bc:a6:3c:
         14:3c:54:34:e5:50:aa:f9:ef:da:13:d3:74:66:1c:be:fe:40:
         50:9d:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:46 2026 by rpki-client