Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36372e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e36372e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          OSQg8zfswLuq3LsnqSEZGCpIjJecbgk7y0F6Is3KsmU=
Subject key identifier:   66:72:4D:47:13:5A:CE:A9:52:72:CB:94:73:8C:C6:2A:7E:83:D9:F8
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       028A7D3DE9CD91B50A369431602B31A4F5E44AB0
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36372e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:41:57 +0000
ROA not before:           Sun 03 May 2026 02:36:57 +0000
ROA not after:            Sun 02 May 2027 02:41:57 +0000
asID:                     23695
IP address blocks:        202.173.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8a:7d:3d:e9:cd:91:b5:0a:36:94:31:60:2b:31:a4:f5:e4:4a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:36:57 2026 GMT
            Not After : May  2 02:41:57 2027 GMT
        Subject: CN=66724D47135ACEA95272CB94738CC62A7E83D9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:4c:41:87:75:c5:a3:dc:7b:b5:7d:12:f0:
                    3e:78:03:67:7c:2c:cf:a5:38:cd:c0:d7:5a:76:32:
                    81:5c:68:41:5d:7a:18:08:5a:39:05:65:79:28:15:
                    1a:a3:59:be:99:f8:3b:bd:52:d5:17:8b:74:91:16:
                    a9:15:ae:9e:fc:5f:47:e0:68:1e:41:c5:b3:5e:41:
                    73:7d:fd:20:1d:c1:fa:2b:d0:87:4a:b2:a8:f2:3e:
                    a9:65:40:e2:96:57:89:d1:e5:19:51:fa:77:83:58:
                    23:28:00:b5:17:7f:42:92:72:55:57:a4:d9:de:d0:
                    82:a3:3a:66:7e:52:69:fa:7f:73:32:66:b2:bb:7f:
                    13:9e:71:db:43:24:a9:d4:77:fc:77:89:51:0a:9b:
                    fe:dd:a4:01:4f:5e:6a:02:52:7f:5d:7a:b8:a2:45:
                    e6:3f:e7:c4:ca:7f:1f:14:41:0a:1f:55:0b:bf:a3:
                    c2:77:9a:88:26:19:24:11:f9:0c:56:38:cb:79:87:
                    ce:05:72:04:94:4a:73:5c:84:31:55:18:ed:6a:58:
                    9b:d9:8c:70:97:08:1c:5f:73:7f:47:87:0d:bd:b2:
                    a1:1c:1f:6f:99:27:5f:ef:e4:b0:3d:c7:4f:79:21:
                    21:9d:89:62:5e:1d:de:34:ce:64:f0:60:9b:f4:4c:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:72:4D:47:13:5A:CE:A9:52:72:CB:94:73:8C:C6:2A:7E:83:D9:F8
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36372e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:33:c2:da:f3:85:95:a8:12:8f:67:5b:d2:25:0f:62:a0:ae:
         84:6c:47:84:95:b8:72:f4:0a:71:7a:30:70:de:c8:d9:eb:51:
         56:bb:af:14:1d:af:14:16:b9:86:eb:20:4b:cd:5d:20:cc:6a:
         6e:12:74:e2:23:c4:ad:d2:09:c8:6e:b5:19:94:f7:81:d4:24:
         f3:58:78:71:ba:f8:47:b0:a1:76:68:92:0b:3c:98:ed:c5:08:
         8d:20:22:bb:d7:bf:a2:ce:4e:bc:83:fd:91:a7:69:70:7b:b3:
         7e:c2:e9:0a:b4:3a:78:d9:99:4c:a4:75:ab:b4:77:60:8a:3e:
         81:72:20:c2:08:b5:74:2e:88:7b:95:d6:05:e9:cc:09:6d:6a:
         b6:11:3e:78:14:d6:14:5b:0a:1e:92:3c:25:ee:89:df:4d:d1:
         31:e1:a3:e3:47:83:d5:26:90:43:4c:d7:78:a1:c9:1d:60:5f:
         76:4b:7d:d9:7a:f4:4b:4c:5a:a8:4d:00:10:62:fd:0e:bb:18:
         a0:c0:57:eb:db:88:75:88:f3:88:45:f1:df:17:3c:75:8f:7c:
         f3:12:bd:c9:f7:11:91:da:2d:46:2a:6f:e9:65:0e:f8:db:da:
         9c:f5:2d:c3:cc:95:69:01:21:df:0f:b4:02:3e:b0:c0:75:27:
         06:39:69:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:46 2026 by rpki-client