Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa
File:                     3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (raw, json)
Hash identifier:          F2TMv35JZK5AIuzdcDqCbXvGPGE/OVFOpnP/LxPgY6M=
Subject key identifier:   04:0E:CF:CF:0E:3B:66:E6:71:08:17:DC:01:1E:68:3E:CB:35:2A:B8
Certificate issuer:       /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial:       011BFFCEC032551FDD82A1BE9BE9D04090ED8BBC
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa
Signing time:             Sun 03 May 2026 02:40:36 +0000
ROA not before:           Sun 03 May 2026 02:35:36 +0000
ROA not after:            Sun 02 May 2027 02:40:36 +0000
asID:                     58552
IP address blocks:        202.72.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
                          rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1b:ff:ce:c0:32:55:1f:dd:82:a1:be:9b:e9:d0:40:90:ed:8b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
        Validity
            Not Before: May  3 02:35:36 2026 GMT
            Not After : May  2 02:40:36 2027 GMT
        Subject: CN=040ECFCF0E3B66E6710817DC011E683ECB352AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:c9:26:bb:86:4c:49:20:af:6d:df:9e:5b:
                    82:12:46:e2:6c:3c:9c:66:cb:9f:4a:f5:45:09:a0:
                    e1:83:de:f7:f8:6f:c8:f0:f5:a6:8e:f6:cc:52:2a:
                    7c:4e:74:97:51:02:53:fa:c7:44:ef:f3:58:6c:6d:
                    8a:4e:66:3a:b9:56:b9:34:2e:5b:cd:ad:83:a0:41:
                    33:c7:14:bb:5b:26:f8:ed:f0:dd:e9:fb:ae:bf:8f:
                    f7:7d:a3:d8:e1:cd:62:1f:32:03:59:5e:1b:7f:96:
                    86:90:5c:1c:dd:5f:d4:5b:19:d6:e2:de:fa:c0:e1:
                    96:f7:4e:75:88:6a:41:4d:16:d9:a8:29:78:26:6e:
                    57:ad:71:af:be:05:a7:cf:a5:9e:5a:ff:67:02:54:
                    0f:ed:d0:f0:a4:f7:70:4c:58:8b:a5:58:eb:ed:fb:
                    d3:77:cc:6d:df:2a:61:38:26:ff:33:d1:ae:f7:6f:
                    8b:29:ff:13:94:cb:77:b4:6a:7d:a9:fb:35:33:ab:
                    35:6f:a4:aa:b9:7a:ad:9a:c5:79:a1:7a:69:d2:05:
                    16:25:e4:e3:95:76:e2:1a:ea:9d:e9:6e:6f:0e:84:
                    dc:a8:68:a0:9c:19:59:8b:3f:cd:13:e0:5a:8d:29:
                    cf:82:84:9e:88:8a:ab:51:f2:62:37:65:2c:3d:eb:
                    bf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0E:CF:CF:0E:3B:66:E6:71:08:17:DC:01:1E:68:3E:CB:35:2A:B8
            X509v3 Authority Key Identifier:
                keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:bf:e2:77:91:e3:b9:05:82:96:49:13:04:8e:3d:cd:85:39:
         98:06:07:89:bc:f2:d2:60:c6:83:17:c4:ee:7d:ac:f5:d7:6d:
         49:f2:4a:ed:02:79:6f:4d:62:46:8e:3b:72:45:17:fd:c6:3f:
         e9:c4:c4:a0:bd:ad:03:12:ec:e6:84:e6:20:c2:c1:55:1f:20:
         5a:97:3b:c2:c1:87:80:bd:5a:19:2f:66:3f:ca:83:51:88:e6:
         89:4c:bb:c1:fa:33:8b:40:90:88:55:b3:7f:60:75:86:93:b0:
         94:7d:58:04:fe:df:2e:ce:5c:e9:bf:fa:e1:d1:1e:bd:3e:6d:
         c0:2a:36:ad:72:4a:57:94:3a:4a:26:f7:a5:bd:42:88:43:3e:
         9e:fb:a2:fa:d7:ac:05:80:57:d9:9c:d9:ba:47:c4:82:88:22:
         83:d7:8a:2d:7c:b3:3c:c2:6b:ee:56:18:f7:f9:c9:83:22:c1:
         cb:9e:5a:b1:97:73:6a:8b:df:be:4b:4e:a8:0b:7d:1e:9f:ab:
         4b:cb:1d:d4:fc:d1:0f:1b:e1:d9:5d:ec:58:53:15:1f:8e:aa:
         b5:a9:76:53:2d:8d:4a:3d:39:f7:49:86:8a:9c:b2:31:25:2c:
         e8:48:81:2e:c4:92:82:8c:4b:d0:51:d2:51:10:c9:8c:24:c5:
         74:24:0f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:04 2026 by rpki-client