Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230322e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          08R8uow6CkDSzpj8I0I6g9tHwsOaR/O2coPRJDLApcU=
Subject key identifier:   30:C2:E0:D1:94:88:F8:B7:7C:E1:71:68:A6:BD:5E:DC:2F:60:DA:BD
Certificate issuer:       /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial:       2BC033D7C9F7FDB46840B5A8D5712E328278C2A9
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230322e302f32342d3234203d3e203138313533.roa
Signing time:             Sun 03 May 2026 02:40:33 +0000
ROA not before:           Sun 03 May 2026 02:35:33 +0000
ROA not after:            Sun 02 May 2027 02:40:33 +0000
asID:                     18153
IP address blocks:        202.72.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
                          rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c0:33:d7:c9:f7:fd:b4:68:40:b5:a8:d5:71:2e:32:82:78:c2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
        Validity
            Not Before: May  3 02:35:33 2026 GMT
            Not After : May  2 02:40:33 2027 GMT
        Subject: CN=30C2E0D19488F8B77CE17168A6BD5EDC2F60DABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:c5:d1:e3:ed:6e:0f:5c:1d:be:42:c7:fb:
                    79:76:bf:c3:a3:17:ff:a8:f9:fe:9b:63:72:91:1c:
                    f8:fd:40:c0:d4:40:80:07:ea:f5:72:95:bc:d1:4b:
                    7f:16:ff:06:c7:38:c4:54:ca:33:d0:c0:2b:c5:99:
                    c1:20:d8:eb:ac:01:a9:30:e3:cc:8f:75:7b:35:da:
                    f5:27:3f:6d:ca:8a:4e:b3:1e:e8:01:60:86:ed:e5:
                    1e:b7:9c:9f:fb:2a:f0:47:e1:c5:2b:9d:d5:63:df:
                    69:12:36:d2:79:06:64:47:8e:7f:96:3d:58:09:7e:
                    a4:df:55:56:54:3a:da:a6:b9:4c:da:5e:88:6d:ae:
                    23:10:9f:30:8f:fb:a3:05:3a:82:e9:f2:90:36:c1:
                    f8:8f:08:ad:5c:0a:cd:c4:49:84:f2:a2:4f:c6:02:
                    cf:5b:f0:23:96:80:3e:03:9f:36:f4:c3:86:61:62:
                    a8:4d:5a:2b:ce:6b:c9:43:9a:38:8f:90:e3:67:9a:
                    28:d9:cf:a9:3c:cb:9d:e1:ef:20:ea:34:b1:0f:a4:
                    03:ce:fb:8a:a3:e9:4c:87:69:e7:1a:f4:94:02:9e:
                    df:84:8f:9e:2a:e2:44:9b:02:c8:f3:c8:1f:68:99:
                    11:a7:01:14:cd:4b:ea:4f:c9:67:57:e8:e2:35:e4:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C2:E0:D1:94:88:F8:B7:7C:E1:71:68:A6:BD:5E:DC:2F:60:DA:BD
            X509v3 Authority Key Identifier:
                keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230322e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a6:db:dd:b0:a3:35:07:4b:93:52:33:3d:e5:30:d9:ed:6d:
         20:3e:5d:b4:5a:8b:de:1a:56:91:b6:56:10:af:c5:e0:80:7d:
         4d:89:13:da:8c:90:a9:9d:7f:5a:08:8a:05:42:80:66:71:ad:
         3d:75:93:27:aa:8b:04:12:3f:a7:34:a7:78:19:6b:86:f9:5e:
         f2:82:a1:7f:5b:f6:33:33:44:4b:c0:16:99:ae:3e:58:99:41:
         df:87:ff:1b:ea:05:19:3e:2a:34:8c:9b:40:d5:a2:fb:ea:32:
         c6:82:80:3d:f4:7e:1b:6f:0c:01:f9:f4:da:44:a0:77:71:a8:
         9d:60:9e:c5:b0:aa:50:0f:9a:4f:eb:23:fa:e2:50:ff:36:37:
         30:4c:80:51:9f:e4:66:4f:14:f3:1a:26:75:52:97:b9:2f:70:
         76:05:21:42:ce:f9:29:c3:54:72:6d:ba:18:8e:7d:2b:70:bb:
         13:eb:b0:ef:23:72:62:99:e3:86:ab:c1:86:0e:60:27:cd:7d:
         86:16:9d:4b:d6:26:16:8f:53:0f:9d:c1:18:3b:28:3f:87:09:
         89:1d:f5:46:1a:19:3f:d4:3a:0e:1c:dc:22:64:9b:43:a0:76:
         31:47:67:90:6b:a5:a7:a3:9e:5b:89:68:ff:92:47:78:03:89:
         0b:ce:c1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:31 2026 by rpki-client