Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          rYb9medyxCLAhcgseCZT0SUDS0jCzHAqSI7lOKhEDGA=
Subject key identifier:   83:C2:E2:0D:EA:0F:40:CC:68:C6:69:38:F2:90:6C:96:D5:0B:20:9A
Certificate issuer:       /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial:       1D5624C171F83F2B0524DAAAD479F2BF1E22B9BE
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa
Signing time:             Sun 03 May 2026 02:40:31 +0000
ROA not before:           Sun 03 May 2026 02:35:31 +0000
ROA not after:            Sun 02 May 2027 02:40:31 +0000
asID:                     18153
IP address blocks:        202.72.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
                          rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:56:24:c1:71:f8:3f:2b:05:24:da:aa:d4:79:f2:bf:1e:22:b9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
        Validity
            Not Before: May  3 02:35:31 2026 GMT
            Not After : May  2 02:40:31 2027 GMT
        Subject: CN=83C2E20DEA0F40CC68C66938F2906C96D50B209A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:04:2f:d5:af:66:bd:76:c2:c4:7e:70:60:
                    fd:d0:4d:b9:16:c0:54:b9:32:44:24:5f:07:b6:3e:
                    ef:57:78:07:be:a7:2d:a9:4b:74:7d:8e:8f:d3:19:
                    59:5a:6d:ce:58:b3:43:6d:13:6a:c3:1b:80:3f:9e:
                    51:12:ad:41:12:c3:c2:7e:8e:dc:1b:3a:73:f6:2c:
                    0b:40:f8:b0:1d:b7:30:3f:67:b7:a0:9f:e6:4f:a8:
                    fb:2a:7f:cd:fa:68:c8:24:81:a9:ab:d2:c8:89:51:
                    0c:77:21:33:35:38:c5:a0:8e:26:f8:62:c8:63:ba:
                    bb:c6:10:68:74:7a:23:23:05:3b:3b:0d:0b:30:4d:
                    05:08:d1:1b:cf:3a:c0:ca:d9:b4:b4:29:b9:68:d4:
                    06:99:f3:b5:28:e0:c0:58:2a:32:47:a1:3f:5e:26:
                    25:6a:c6:81:3e:70:6a:c7:21:a2:64:99:0a:43:85:
                    e3:8b:08:9f:c5:0a:41:97:92:ee:a1:95:48:d7:d2:
                    df:c2:6c:f1:d2:f2:0b:df:c7:f0:41:60:db:c5:fa:
                    b8:fd:33:a1:7b:7f:06:02:a3:41:81:a7:ea:27:67:
                    64:2a:df:80:56:73:9b:9d:78:02:b7:c8:74:65:bd:
                    0c:0a:7c:eb:70:a0:af:18:e6:66:b1:a3:6e:ab:64:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C2:E2:0D:EA:0F:40:CC:68:C6:69:38:F2:90:6C:96:D5:0B:20:9A
            X509v3 Authority Key Identifier:
                keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:bb:eb:71:61:84:ce:be:90:c3:42:21:d9:bb:1c:21:8e:8e:
         bb:bb:1d:71:43:d7:c1:8d:39:bc:4f:16:3f:65:af:10:d0:fe:
         ba:16:cc:cc:0c:d8:46:48:e0:3e:97:4b:61:a9:cc:5b:44:8d:
         06:e2:6c:b2:61:e8:a9:29:8f:f7:2b:92:81:19:75:a3:6b:b1:
         7a:db:49:d5:03:c6:cc:5f:f1:04:22:7c:0b:bc:05:28:73:f1:
         f7:db:85:a9:2d:7a:9d:b8:54:70:04:4b:47:32:0c:77:b4:26:
         36:65:2f:0d:25:99:fb:51:48:c6:34:93:90:b7:b5:ed:3f:67:
         e2:2a:7d:75:0e:41:01:0d:61:29:9b:5c:60:26:b3:b6:cb:ac:
         cd:60:a7:47:4b:db:10:41:4b:2b:53:ab:2f:bb:92:f6:07:37:
         5e:2a:18:6b:59:d9:de:82:0f:c3:9d:4e:e6:02:37:12:c5:e7:
         ad:81:f5:ac:63:7e:a9:16:91:58:65:f3:1a:30:fa:fc:6d:f7:
         91:5f:02:c3:d5:00:a8:e3:64:f0:6f:bb:e6:d4:eb:70:e3:37:
         cf:2b:ee:7c:b1:7a:74:83:d7:4e:0f:e0:ed:23:4c:11:08:75:
         8c:10:df:82:13:b9:85:8c:73:76:a2:ae:53:0b:99:2a:04:47:
         26:6d:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:51 2026 by rpki-client