Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139362e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          0VsRrjsdIFJeamY9VCTKavELmYTFS3ilP2PUztX74Uc=
Subject key identifier:   C2:E0:DB:3D:1D:75:AE:25:35:97:64:84:2C:5E:BA:02:CC:E4:A9:DA
Certificate issuer:       /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial:       232DD09E7C6723BC3A3CF93FF7F7BEC766CDC95C
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139362e302f32342d3234203d3e203138313533.roa
Signing time:             Sun 03 May 2026 02:40:35 +0000
ROA not before:           Sun 03 May 2026 02:35:35 +0000
ROA not after:            Sun 02 May 2027 02:40:35 +0000
asID:                     18153
IP address blocks:        202.72.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
                          rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2d:d0:9e:7c:67:23:bc:3a:3c:f9:3f:f7:f7:be:c7:66:cd:c9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
        Validity
            Not Before: May  3 02:35:35 2026 GMT
            Not After : May  2 02:40:35 2027 GMT
        Subject: CN=C2E0DB3D1D75AE25359764842C5EBA02CCE4A9DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:04:3c:32:8a:18:44:03:46:61:42:78:52:
                    2a:89:84:3c:2a:df:e9:a0:fd:49:6a:e3:d8:40:1e:
                    9b:9a:a8:4a:91:24:c1:53:e6:ce:e2:93:07:6e:ab:
                    70:4e:43:1b:6e:fc:b9:71:e9:79:d5:f6:28:2f:1b:
                    cf:f4:c7:61:ff:a7:c5:14:6e:ff:2f:0e:4c:a9:27:
                    36:21:7e:49:b0:b2:12:0c:79:1d:a1:a9:d1:dd:90:
                    c9:76:94:93:ac:5d:82:cf:3e:5a:eb:17:b7:42:19:
                    d1:cc:56:28:47:90:4b:27:5e:ca:b8:91:71:83:22:
                    dc:66:e2:b8:3b:9b:50:c3:4e:28:5b:14:1a:0b:fc:
                    3c:e3:6b:21:b7:b4:da:26:94:c9:7e:e7:0b:9f:1a:
                    6c:3f:05:c1:b7:38:4b:a9:63:14:a2:54:6a:3d:9e:
                    9e:56:9a:9f:52:74:fe:b0:84:fe:2a:85:46:3c:55:
                    7c:c2:a9:7b:53:39:b5:7d:cc:d4:44:67:dd:a7:b2:
                    a1:6e:05:00:b7:72:43:ef:be:db:2a:3d:61:62:60:
                    78:29:a9:4b:51:cd:be:73:da:28:53:35:8a:e7:16:
                    46:f5:c7:d7:5c:6e:2d:ba:36:75:89:c7:12:8c:77:
                    e2:ba:6c:85:2d:0b:23:f8:97:99:49:b1:3f:1e:85:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E0:DB:3D:1D:75:AE:25:35:97:64:84:2C:5E:BA:02:CC:E4:A9:DA
            X509v3 Authority Key Identifier:
                keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139362e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:10:4f:fe:b3:a2:c6:29:7b:79:79:2b:28:4d:73:92:fd:bc:
         53:1a:c3:93:43:c2:69:a7:3a:fc:9f:80:39:b4:23:95:c7:f4:
         70:1e:e0:f6:e0:8a:e3:a0:66:54:07:a8:0a:49:e0:25:01:fc:
         8d:b5:d4:c0:f0:e4:27:81:00:a7:ab:ee:ad:25:c5:16:5c:3c:
         6b:bf:09:6f:b7:43:4a:af:33:68:c5:1b:74:db:3d:8c:7a:4f:
         aa:b2:6c:c9:93:41:3b:85:9d:59:a6:90:5b:4b:74:cb:e4:11:
         69:ab:ae:f9:b3:15:6e:8f:df:be:cb:cd:df:44:d7:f0:e4:e2:
         06:da:4b:70:2d:95:c8:22:ab:15:93:ee:d8:8b:3a:20:2c:e7:
         d7:ea:4b:fd:90:b5:11:08:d7:a4:30:22:6a:e7:91:8a:28:62:
         d6:2a:ee:47:57:55:5d:d7:8b:ba:7e:ce:a1:56:a9:d7:53:36:
         cb:e4:a6:f4:6b:86:3b:b6:46:7c:d3:65:0e:99:52:28:69:6b:
         b4:c0:14:ee:4f:30:56:dc:90:0a:68:69:8b:2d:d9:79:fc:a4:
         b9:fb:24:88:71:e2:22:88:2a:b3:95:ad:28:39:bc:6e:20:02:
         42:0e:ce:5b:43:42:57:67:e4:7d:d9:50:7f:8f:11:71:78:64:
         9c:99:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:53 2026 by rpki-client