Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139392e302f32342d3234203d3e203538353532.roa
File:                     3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          I7aNpMfH7ZHP4Lp/vWgPFU8KVrb9zX35ePeEEjLzIes=
Subject key identifier:   0A:02:F2:A0:32:62:97:68:BE:5F:B4:91:BF:69:D0:9E:57:83:EC:5E
Certificate issuer:       /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial:       1F2938EBC50E2410D47EE5C54702210BC7816577
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139392e302f32342d3234203d3e203538353532.roa
Signing time:             Sun 03 May 2026 02:40:31 +0000
ROA not before:           Sun 03 May 2026 02:35:31 +0000
ROA not after:            Sun 02 May 2027 02:40:31 +0000
asID:                     58552
IP address blocks:        202.72.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
                          rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:29:38:eb:c5:0e:24:10:d4:7e:e5:c5:47:02:21:0b:c7:81:65:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
        Validity
            Not Before: May  3 02:35:31 2026 GMT
            Not After : May  2 02:40:31 2027 GMT
        Subject: CN=0A02F2A032629768BE5FB491BF69D09E5783EC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:9d:9e:c4:74:c4:6d:20:34:84:9f:c5:67:
                    92:38:06:fa:31:22:eb:cd:b8:b4:e7:58:90:fe:93:
                    94:ca:33:19:48:d9:f0:ac:b0:21:98:64:d5:8b:49:
                    68:04:9e:e5:43:61:0e:e1:85:a0:b2:ca:e9:67:fe:
                    30:6f:e9:48:b5:aa:f7:c5:fa:1e:ea:fb:23:80:c6:
                    35:5e:f2:ea:58:a8:68:25:47:4c:a6:93:24:c2:ce:
                    d7:27:1c:7e:36:3e:01:d1:8c:dc:6f:a2:62:a2:cf:
                    9d:90:ed:9b:b9:90:7a:c4:70:c1:6d:04:c5:e8:1c:
                    57:43:3d:d4:5a:47:c4:69:9c:04:d7:5f:c0:80:73:
                    33:fe:69:16:31:0b:a3:67:a6:8b:74:42:4c:6a:19:
                    1f:5b:7b:0e:75:ca:01:e1:38:e4:7b:e1:c7:84:7d:
                    3a:75:be:1c:83:5b:96:88:71:57:d4:c8:16:45:28:
                    d6:d6:66:e4:60:d8:b4:4f:c1:22:5d:31:ef:2a:3c:
                    fd:9e:60:b1:96:b4:fb:e9:82:af:24:0e:c3:6b:0a:
                    ff:09:3f:60:9f:8d:2d:6d:e2:d2:d4:e6:00:f4:34:
                    1c:f6:ca:a1:ad:41:11:7e:03:b8:a9:58:03:28:ca:
                    40:7b:83:ee:42:ff:27:a3:86:82:b8:90:1d:c3:6e:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:F2:A0:32:62:97:68:BE:5F:B4:91:BF:69:D0:9E:57:83:EC:5E
            X509v3 Authority Key Identifier:
                keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139392e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:a6:42:41:9e:42:ac:ab:f1:27:e2:70:d1:5c:2d:3e:55:
         80:9e:88:e9:35:38:b0:a5:b7:68:ee:11:fc:ae:e6:d0:b1:79:
         89:e2:95:58:7c:6b:e1:71:5e:7f:75:eb:1f:a0:3b:b6:0e:d6:
         a2:ae:84:2d:e9:37:f5:26:4c:e8:fd:43:64:d6:7c:ea:a6:dd:
         4b:73:8a:8b:23:59:1d:7f:1c:1b:92:2b:57:fd:a1:65:45:9f:
         17:70:96:24:eb:55:fa:7d:7d:b6:6b:f6:e0:97:75:16:e3:f4:
         58:4e:be:93:92:cb:28:57:21:e6:cd:2d:f9:76:ea:69:bd:45:
         83:8e:8f:8c:5c:b0:a9:5d:f1:7b:8b:bd:0d:e9:da:2f:66:0b:
         ae:f9:eb:cb:db:95:86:3f:15:7f:25:18:76:8a:63:c9:a5:ef:
         0b:06:e4:48:73:a6:32:f0:38:6c:8a:7b:b7:c6:37:8f:21:16:
         a7:a4:39:36:27:7d:f5:f6:17:54:c4:6e:a4:45:a9:39:a5:e9:
         ce:b8:3b:37:79:79:50:3c:89:dc:32:bb:27:37:b6:03:7f:43:
         a8:f4:30:7c:90:43:3e:b3:cc:73:cb:ca:80:12:c6:c6:72:f8:
         db:69:53:ed:16:47:bb:dd:81:2e:f1:1c:13:6d:15:98:ba:7c:
         85:2a:c9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:40 2026 by rpki-client