Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36362e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e36362e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          bAiWHLTdRVWm3EKVOPaVRyGKs6RrUZdpen99ggO8mDs=
Subject key identifier:   76:2A:93:E1:C0:DB:8C:D2:62:A1:3D:C1:BE:4F:F6:ED:06:85:8C:4B
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       6CA020A3F6AC09CEDE2BBC91433AC4C0651BD6B2
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36362e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:41:57 +0000
ROA not before:           Sun 03 May 2026 02:36:57 +0000
ROA not after:            Sun 02 May 2027 02:41:57 +0000
asID:                     23695
IP address blocks:        202.173.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a0:20:a3:f6:ac:09:ce:de:2b:bc:91:43:3a:c4:c0:65:1b:d6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:36:57 2026 GMT
            Not After : May  2 02:41:57 2027 GMT
        Subject: CN=762A93E1C0DB8CD262A13DC1BE4FF6ED06858C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:81:c2:2a:ef:b7:41:b3:02:6d:3f:0f:f9:
                    46:87:b0:f7:36:23:98:7d:a4:62:12:89:2c:e4:b0:
                    bb:86:6e:6e:b6:89:2c:01:88:e9:20:c9:d7:68:6b:
                    23:57:6c:d3:75:d4:50:eb:01:ae:35:ba:70:39:5f:
                    9b:82:ef:d0:cc:d9:50:ab:cd:9a:64:d4:e3:be:df:
                    fe:46:93:56:46:fe:ff:b9:14:3a:6b:60:f9:18:a1:
                    10:ad:3e:2b:c9:c7:88:86:c0:4f:06:9f:60:68:b6:
                    cb:48:ab:d3:f1:3d:a1:6d:e2:03:3a:ea:11:54:a8:
                    45:ca:7d:16:c3:93:8e:e0:41:a3:2d:ac:da:4e:76:
                    18:bf:e8:be:ab:84:92:ab:16:42:00:3d:9e:7b:11:
                    cc:bc:2a:3c:c7:9f:f5:2d:a7:54:e1:86:6a:ce:c0:
                    99:7d:76:b3:45:f4:5e:8f:63:cd:65:4c:47:96:84:
                    4a:58:ca:e5:87:90:de:b2:42:0f:b8:a0:8c:44:a8:
                    af:b7:f5:60:b2:74:ee:af:30:4d:bd:33:8e:8c:a4:
                    d4:ae:20:54:bb:54:62:59:bf:a6:60:07:8d:a7:08:
                    55:24:0c:d6:66:34:d5:f4:bb:4d:86:30:92:55:19:
                    7f:2d:af:0a:60:37:68:73:33:54:ce:af:1c:50:7c:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2A:93:E1:C0:DB:8C:D2:62:A1:3D:C1:BE:4F:F6:ED:06:85:8C:4B
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36362e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:89:68:61:f3:c9:6d:0a:c1:c9:88:c0:55:d6:df:3f:6d:
         cd:c2:0c:99:26:70:96:80:10:67:eb:3d:5f:ee:2e:19:2c:28:
         1c:62:a5:47:19:40:ab:5f:cb:f3:e2:23:63:2e:4c:3a:ed:a8:
         30:73:6b:1d:3c:27:38:cb:88:08:7c:75:c6:54:84:57:91:7b:
         5c:08:fd:fe:9d:73:12:f3:52:b5:66:81:54:85:87:52:3a:66:
         8e:80:35:22:ce:51:db:6a:0b:4f:f4:f8:6c:52:7c:8a:4f:3e:
         d7:a8:16:bd:63:3b:66:33:9f:8e:1f:62:25:e5:d9:47:35:12:
         81:9b:ab:83:13:38:04:73:81:7c:d1:f4:da:5e:84:b4:89:76:
         3a:3b:47:79:fe:14:85:4d:c9:d7:e5:32:9a:aa:58:f7:15:0d:
         2b:7f:b6:70:70:59:86:ef:f6:be:c9:9e:0d:c1:be:e6:d3:c4:
         e1:36:3e:f5:d4:a4:d8:33:e1:30:3d:4e:52:bb:05:be:a7:19:
         af:91:6e:e0:75:57:57:84:9a:42:e6:80:9a:1c:d1:be:de:0f:
         85:c6:8d:b1:f2:8c:78:92:59:f8:3b:cd:11:35:1a:2b:cc:93:
         93:ea:25:3f:56:32:7f:2c:b5:66:58:7f:e5:7b:64:a1:5b:77:
         e2:cf:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:55 2026 by rpki-client