Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230372e302f32342d3234203d3e203538333839.roa
File:                     3230322e37322e3230372e302f32342d3234203d3e203538333839.roa (raw, json)
Hash identifier:          WHBbJGZmdQKaYyhDTGiF9nJvtfUgtNB8fOyt7IgLmpo=
Subject key identifier:   9A:3E:A8:CC:D4:02:CF:72:63:C1:23:E6:5D:5B:7F:F6:44:BB:1A:04
Certificate issuer:       /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial:       30DD9B12D3010047EE7E6519639C9BB32C4C4030
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230372e302f32342d3234203d3e203538333839.roa
Signing time:             Sun 03 May 2026 02:40:34 +0000
ROA not before:           Sun 03 May 2026 02:35:34 +0000
ROA not after:            Sun 02 May 2027 02:40:34 +0000
asID:                     58389
IP address blocks:        202.72.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
                          rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:dd:9b:12:d3:01:00:47:ee:7e:65:19:63:9c:9b:b3:2c:4c:40:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
        Validity
            Not Before: May  3 02:35:34 2026 GMT
            Not After : May  2 02:40:34 2027 GMT
        Subject: CN=9A3EA8CCD402CF7263C123E65D5B7FF644BB1A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a6:4f:f7:12:5a:b5:56:15:96:07:e8:8f:10:
                    7d:ff:87:c5:47:7f:e4:cd:91:47:72:8a:00:d4:00:
                    29:b2:a1:f4:b8:ac:c0:07:86:f7:e8:05:26:de:eb:
                    47:db:ad:0c:cf:0d:df:6f:1a:6e:a8:19:59:b0:c9:
                    4d:18:c1:e6:4c:79:13:49:04:d8:15:78:27:0b:e9:
                    7c:26:a4:29:9c:ea:5b:74:b2:90:3a:40:0d:6a:e7:
                    64:ca:91:b1:0e:03:50:b7:07:4e:6e:1d:d6:d7:97:
                    2d:01:07:e7:78:9d:77:8c:7d:de:ab:c5:7d:29:e3:
                    02:c0:d6:78:6b:52:27:5d:cc:99:a0:1c:8e:bb:39:
                    a1:0d:89:4d:ad:d8:a5:d0:5d:98:50:63:5f:31:bb:
                    fd:24:81:be:82:ff:80:d1:41:16:00:b7:c3:57:5f:
                    86:6b:39:17:3f:51:b6:2a:7e:a8:ae:fe:c3:1d:e5:
                    69:ba:28:69:7c:89:69:db:ff:a3:ae:53:07:9f:a1:
                    00:1b:05:ae:b3:05:a6:c1:dd:1f:b1:f5:88:17:44:
                    66:92:60:86:b7:6b:56:2c:ee:6a:ae:87:27:d6:6b:
                    2a:75:71:da:fb:3a:c6:f2:59:1d:be:56:c6:9a:3a:
                    e0:2d:21:1f:6a:16:42:c2:b3:57:e2:6d:43:35:d1:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3E:A8:CC:D4:02:CF:72:63:C1:23:E6:5D:5B:7F:F6:44:BB:1A:04
            X509v3 Authority Key Identifier:
                keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230372e302f32342d3234203d3e203538333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:22:bd:dc:d3:87:46:ff:55:56:57:50:89:16:48:d0:c1:ee:
         56:9e:41:3b:68:46:4c:2a:30:21:26:a8:53:61:bb:00:7f:6a:
         b8:66:90:59:b9:35:13:ce:ac:ac:eb:c6:b6:99:81:cd:a9:58:
         ce:dd:04:3c:e4:a0:e6:fe:8b:43:16:6a:bb:0f:be:ef:5f:18:
         93:01:71:31:68:9e:07:be:b4:0b:36:a5:2a:b9:f2:a6:ce:df:
         90:33:e4:9c:0d:bc:84:14:0d:ec:68:01:ff:c7:de:5c:2c:d3:
         a4:62:81:a5:e1:1b:5a:ee:8e:0b:68:c9:6f:a0:4b:59:c6:1f:
         ea:bc:05:fd:83:90:4f:35:fd:96:a9:18:c9:57:e5:d6:9d:45:
         f0:20:3c:db:ea:f4:77:0b:e4:cb:22:cc:7f:dd:d9:bc:42:5f:
         08:c0:ff:5e:1b:de:70:f3:f8:da:ce:34:05:56:94:81:34:77:
         34:b6:ad:60:24:ba:cb:8f:a3:da:7f:1f:52:7e:5b:34:a8:d5:
         1a:1c:15:41:52:4d:c6:47:df:44:93:09:f1:9c:65:c2:40:0b:
         b3:72:24:67:95:03:8d:7a:4b:b2:ad:3e:39:8b:e4:6e:d5:7d:
         03:a7:53:0a:8a:fe:05:5e:ee:40:0c:4d:24:71:f6:95:3e:e5:
         0e:87:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:15 2026 by rpki-client