Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37342e302f32342d3234203d3e203435323938.roa
File:                     3230322e34332e37342e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          PPUc42SvgK+Q6yaLY9FrEmjvu0915Evdge1eJ95vgF8=
Subject key identifier:   B8:54:72:79:53:07:E4:48:49:99:81:94:42:BE:B7:C0:4F:B8:F5:95
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       034E57450F8968A171C2B76F283F9869EC2F6BC7
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37342e302f32342d3234203d3e203435323938.roa
Signing time:             Sun 03 May 2026 02:39:49 +0000
ROA not before:           Sun 03 May 2026 02:34:49 +0000
ROA not after:            Sun 02 May 2027 02:39:49 +0000
asID:                     45298
IP address blocks:        202.43.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4e:57:45:0f:89:68:a1:71:c2:b7:6f:28:3f:98:69:ec:2f:6b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:49 2026 GMT
            Not After : May  2 02:39:49 2027 GMT
        Subject: CN=B85472795307E4484999819442BEB7C04FB8F595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:34:bf:c8:e1:6c:7f:b1:0a:b3:1d:d0:9e:7f:
                    46:96:21:b7:61:9e:2a:ad:91:51:09:b2:e3:d6:a6:
                    08:05:b8:86:dd:fc:70:4f:90:5e:92:38:b7:5c:b6:
                    d7:56:ad:e8:bd:14:3e:a4:e6:1a:aa:a7:a4:4c:2b:
                    a0:20:84:57:f9:85:4f:59:9a:32:fd:1b:96:c3:e0:
                    3d:54:ee:29:c2:46:60:d4:41:4f:8c:63:df:de:20:
                    06:1d:96:58:f2:bc:f2:85:32:df:76:a1:7f:e6:16:
                    ce:c2:ce:28:dd:8b:7c:a7:f0:75:4f:42:81:e4:5b:
                    b1:79:d8:58:6c:83:f1:41:51:91:91:5d:9d:e5:22:
                    00:f4:22:37:ae:9d:42:24:fb:7c:7a:0b:a5:58:ba:
                    36:2a:4e:49:17:73:71:27:bd:55:85:e8:17:69:a1:
                    b7:2c:d1:07:97:58:3e:b2:23:b0:c2:4d:13:ef:ed:
                    82:db:ad:e1:50:0b:7d:f0:3b:70:3f:60:97:24:43:
                    59:e2:ab:46:b7:2e:19:68:60:c1:4b:23:4d:8d:cd:
                    8e:ca:ce:28:a9:9e:4e:9c:32:b3:24:ba:d5:81:2d:
                    3a:8c:2d:aa:22:61:3d:b0:91:ca:1c:57:5c:30:1a:
                    49:4f:0e:78:f6:d4:50:62:39:8f:7b:d5:30:5a:2e:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:54:72:79:53:07:E4:48:49:99:81:94:42:BE:B7:C0:4F:B8:F5:95
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37342e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:ff:87:f3:6e:37:cc:6e:b3:4b:4b:78:8d:0a:2a:df:cf:73:
         09:cf:45:db:5c:5e:4f:cc:62:40:5d:18:70:10:6b:7c:56:4a:
         3e:a1:c8:03:fd:8c:7d:1e:06:5c:2f:be:e9:a4:80:11:d5:f0:
         c7:e8:09:2a:dd:b0:ac:fa:75:e5:5f:35:a6:65:5f:4c:6a:e6:
         88:b7:99:cf:d0:56:eb:b9:a0:1d:77:1d:6f:7d:41:92:4b:39:
         b2:08:d8:c5:54:8a:2b:2d:22:45:93:53:14:b9:d4:1f:71:2e:
         6e:a8:ca:66:09:6a:cb:b1:9d:a7:9e:bb:da:0f:37:f3:7e:b5:
         09:d3:f2:ff:93:f2:7c:3d:ec:5d:cf:b1:86:69:da:c4:a9:a1:
         c2:dd:aa:6b:9c:3a:f7:a9:07:c8:54:19:70:80:b6:4c:c3:28:
         bb:04:85:c2:59:c0:31:bc:0e:ca:b8:7b:d2:c4:67:f6:c1:6c:
         d5:d2:88:7f:5c:73:7d:0d:d8:5c:58:27:1b:9f:51:50:5f:23:
         2d:0f:d3:a2:43:f9:03:24:e1:34:4b:19:aa:76:43:83:23:8c:
         13:f8:f5:24:16:f4:0e:58:e0:18:13:9f:27:49:21:ae:2e:1d:
         72:0d:3d:ac:40:f7:f2:1a:70:44:37:03:1f:97:c3:4a:93:53:
         5d:a9:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:00 2026 by rpki-client