Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32342d3234203d3e203538353532.roa
File:                     3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          8elAsNukKO5kSDzzuWo1Aj5s9RVKBqJn0R9tAyalsQM=
Subject key identifier:   0C:4B:B3:66:57:9A:8A:BC:1C:36:C3:6A:D8:8B:F1:7A:A2:76:51:E6
Certificate issuer:       /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial:       036F9E1BAAB20CAB8DA342D33A2C96018A77E5C5
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32342d3234203d3e203538353532.roa
Signing time:             Sun 03 May 2026 02:40:30 +0000
ROA not before:           Sun 03 May 2026 02:35:30 +0000
ROA not after:            Sun 02 May 2027 02:40:30 +0000
asID:                     58552
IP address blocks:        202.72.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
                          rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6f:9e:1b:aa:b2:0c:ab:8d:a3:42:d3:3a:2c:96:01:8a:77:e5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
        Validity
            Not Before: May  3 02:35:30 2026 GMT
            Not After : May  2 02:40:30 2027 GMT
        Subject: CN=0C4BB366579A8ABC1C36C36AD88BF17AA27651E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:58:94:3f:26:1c:d2:28:70:e7:18:66:aa:
                    e1:0a:55:8c:c7:1e:d8:d4:b6:45:82:31:53:71:66:
                    35:70:b5:f5:65:c5:85:af:85:43:fa:d5:33:60:4e:
                    c8:9f:dc:09:bc:33:ea:59:a8:bb:f4:1c:4a:9c:92:
                    e7:cb:e3:96:ab:b4:26:93:c4:39:50:3a:74:b0:a8:
                    a7:0d:61:2c:db:c8:b1:2a:ee:57:49:59:65:fa:69:
                    99:11:4d:ca:12:12:f4:5e:fa:17:31:ef:8b:30:2a:
                    57:ed:05:f1:dc:68:70:7e:0c:aa:a0:62:09:1a:90:
                    d5:fe:42:22:34:73:28:41:b5:20:cf:8d:fe:27:97:
                    7e:c3:cf:2a:07:f9:b8:6d:6d:95:5b:5a:a3:e3:86:
                    34:ac:88:d4:dd:5c:6d:0c:f4:21:6c:ea:66:5d:50:
                    46:57:3a:2b:96:34:e1:32:ad:9b:08:b9:90:1f:80:
                    84:ab:80:d6:c8:52:5f:cb:3f:0b:56:aa:e6:a5:d2:
                    8e:bd:c0:2c:71:37:ae:14:0b:2f:6a:bc:e6:7d:26:
                    53:a1:6e:8a:2c:ef:89:da:74:b3:bf:8c:62:36:87:
                    c0:3c:2d:79:c9:3b:54:dd:75:92:30:07:39:fa:c0:
                    c5:2b:f2:93:61:74:63:d1:93:6b:49:e6:1e:e3:af:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4B:B3:66:57:9A:8A:BC:1C:36:C3:6A:D8:8B:F1:7A:A2:76:51:E6
            X509v3 Authority Key Identifier:
                keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:4c:f0:71:25:01:ea:09:8f:31:5c:90:36:ac:5f:07:6b:62:
         28:fc:bd:95:30:4c:13:ed:98:4e:2f:51:e5:e8:69:1e:db:43:
         3d:e8:3e:04:8b:57:23:fa:05:87:5f:35:89:15:68:ba:8c:fc:
         a8:65:6b:a7:e2:3b:56:cf:96:a6:48:e8:e4:59:e5:4a:3a:60:
         b7:2e:99:f4:18:43:ba:b4:73:b7:2a:6e:75:08:2f:ce:aa:aa:
         84:e5:03:ed:69:be:2f:3a:2c:93:8c:62:db:64:aa:b9:99:cc:
         be:88:66:1a:03:fe:c3:55:62:f3:13:95:21:30:e5:24:3e:3a:
         86:ae:48:cc:1b:9b:2f:f6:4c:5a:48:92:f7:be:e9:1f:b3:22:
         a8:3f:86:db:79:02:7b:70:19:5e:58:bd:45:74:3e:e3:e6:f7:
         83:92:7b:20:b2:ee:92:3b:84:3d:91:a7:66:8d:3c:cc:0e:90:
         6c:a6:fa:a8:1e:59:a9:16:aa:e9:70:e6:17:5b:9d:0d:38:db:
         ff:32:2c:4f:35:03:4f:ba:44:dc:e7:26:7e:34:9d:80:04:b7:
         8b:91:7b:ea:6d:08:12:c2:ca:a0:27:5c:0f:87:53:16:eb:9a:
         0a:20:f6:72:4a:4e:2a:d9:9c:9b:10:5d:b6:6f:f1:9a:31:21:
         67:fa:a9:74
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUA2+eG6qyDKuNo0LTOiyWAYp35cUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3QUIxMzM1QzRFMDdDNkQzNDYxMERBNUI5MjBDNDk2
RjZCNjFEMDAeFw0yNjA1MDMwMjM1MzBaFw0yNzA1MDIwMjQwMzBaMDMxMTAvBgNV
BAMTKDBDNEJCMzY2NTc5QThBQkMxQzM2QzM2QUQ4OEJGMTdBQTI3NjUxRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdXliUPyYc0ihw5xhmquEKVYzH
HtjUtkWCMVNxZjVwtfVlxYWvhUP61TNgTsif3Am8M+pZqLv0HEqckufL45artCaT
xDlQOnSwqKcNYSzbyLEq7ldJWWX6aZkRTcoSEvRe+hcx74swKlftBfHcaHB+DKqg
YgkakNX+QiI0cyhBtSDPjf4nl37DzyoH+bhtbZVbWqPjhjSsiNTdXG0M9CFs6mZd
UEZXOiuWNOEyrZsIuZAfgISrgNbIUl/LPwtWqual0o69wCxxN64UCy9qvOZ9JlOh
boos74nadLO/jGI2h8A8LXnJO1TddZIwBzn6wMUr8pNhdGPRk2tJ5h7jr4FfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUDEuzZleairwcNsNq2IvxeqJ2UeYwHwYDVR0j
BBgwFoAULnqxM1xOB8bTRhDaW5IMSW9rYdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjlhY2I0YTgtNzgwNC00NTI2LTg0ZDItODY5YjkxYTY3MTlkLzAvMkU3QUIxMzM1
QzRFMDdDNkQzNDYxMERBNUI5MjBDNDk2RjZCNjFEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yRTdBQjEzMzVDNEUwN0M2RDM0NjEwREE1QjkyMEM0OTZGNkI2
MUQwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04
NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzIzMDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpIzDANBgkqhkiG
9w0BAQsFAAOCAQEAB0zwcSUB6gmPMVyQNqxfB2tiKPy9lTBME+2YTi9R5ehpHttD
Peg+BItXI/oFh181iRVouoz8qGVrp+I7Vs+Wpkjo5FnlSjpgty6Z9BhDurRztypu
dQgvzqqqhOUD7Wm+Lzosk4xi22SquZnMvohmGgP+w1Vi8xOVITDlJD46hq5IzBub
L/ZMWkiS977pH7MiqD+G23kCe3AZXli9RXQ+4+b3g5J7ILLukjuEPZGnZo08zA6Q
bKb6qB5ZqRaq6XDmF1udDTjb/zIsTzUDT7pE3OcmfjSdgAS3i5F76m0IEsLKoCdc
D4dTFuuaCiD2ckpOKtmcmxBdtm/xmjEhZ/qpdA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:19:17 2026 by rpki-client