Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37322e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e37322e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          2zmJmWfAYb7geUAr85lE5DJITrLeg3wtHhl3b8oCfe4=
Subject key identifier:   18:C4:03:8A:2C:15:33:8F:63:86:09:23:77:CB:16:4D:9B:3E:CB:B8
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       2EFC48BAA199DDAB74600A73187C0F29EA504933
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37322e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:41:58 +0000
ROA not before:           Sun 03 May 2026 02:36:58 +0000
ROA not after:            Sun 02 May 2027 02:41:58 +0000
asID:                     23695
IP address blocks:        202.173.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fc:48:ba:a1:99:dd:ab:74:60:0a:73:18:7c:0f:29:ea:50:49:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:36:58 2026 GMT
            Not After : May  2 02:41:58 2027 GMT
        Subject: CN=18C4038A2C15338F6386092377CB164D9B3ECBB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:d6:00:c4:a1:26:a9:4a:8a:7e:c9:d1:b8:
                    db:32:41:2a:f9:ff:ff:ec:24:85:16:72:10:6c:fd:
                    ba:21:0d:73:1a:d8:73:f0:f6:08:8d:43:f8:9a:a0:
                    18:70:20:c9:e0:c3:58:10:a9:47:00:ef:a9:f8:61:
                    13:df:bf:e6:67:65:df:f5:95:91:ed:0b:cb:1f:08:
                    c6:e2:21:eb:52:11:42:95:11:9c:d4:d5:af:ce:3a:
                    49:0b:cd:54:4c:c9:8f:19:be:dd:f6:77:58:50:60:
                    3f:b7:b0:67:69:1b:0f:ca:e6:b7:fb:1b:c4:d5:55:
                    0b:ed:8b:8d:8d:a9:54:38:11:0d:20:b5:36:0f:44:
                    6a:d5:37:5d:8b:4c:6c:16:ab:20:5c:04:9f:ee:7f:
                    0f:db:f5:04:ea:ad:7e:70:16:97:84:b5:70:f5:7c:
                    53:e2:0b:56:18:3c:30:cb:ee:e2:2c:3b:1f:2c:87:
                    c8:e2:75:8a:e7:8a:57:47:3f:21:c2:65:51:52:60:
                    c0:f4:68:49:c1:a8:5f:fe:79:ab:ab:f5:f4:f0:23:
                    32:a2:7f:df:84:90:a3:20:a7:e2:83:42:be:56:41:
                    58:52:3c:19:9a:f8:45:00:77:a8:d7:79:6a:40:38:
                    83:73:e4:4a:f3:d7:bd:2e:f7:fe:e8:49:3d:76:93:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C4:03:8A:2C:15:33:8F:63:86:09:23:77:CB:16:4D:9B:3E:CB:B8
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37322e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:16:43:5f:dd:6c:2a:68:c9:bf:11:5e:12:01:0e:1c:2e:
         50:ea:ac:3d:a7:11:7b:d3:96:75:bf:28:17:05:75:6e:f2:28:
         97:d3:d7:fa:cf:20:04:24:6b:c3:45:b2:69:d8:01:90:77:a9:
         16:a4:c1:34:f0:17:00:d3:d5:5d:d7:79:0a:72:49:59:e0:a8:
         f2:b2:64:46:1c:a9:77:c0:ac:7f:8c:d8:5c:cb:b0:c4:5f:7c:
         56:12:f1:e4:76:f6:f0:7f:59:4e:f2:db:47:a9:be:e8:4c:9f:
         df:c3:21:ae:d2:20:c0:eb:36:21:50:60:0d:1b:7f:ac:4a:63:
         2d:fb:d9:91:ff:ca:a2:ff:16:47:70:e5:8a:69:ed:81:79:a9:
         ab:4e:d1:31:00:cc:c5:af:d1:69:ac:5f:85:5a:cf:5f:3d:49:
         bd:95:38:a1:77:85:e9:3a:72:5e:2e:d8:43:77:13:1e:4c:c3:
         57:08:dd:56:7f:6b:ad:d0:ca:cc:0d:3c:5d:52:0f:0d:5d:56:
         ad:46:bc:c5:cd:fc:a3:d9:82:55:11:e1:53:4d:a7:25:1b:75:
         b2:74:76:16:65:b9:f1:ef:2e:89:89:7a:e9:0a:f8:3a:2d:f5:
         c9:78:54:9f:6c:41:d4:cd:4b:85:8e:72:db:bd:01:2f:9d:da:
         fc:80:4e:90
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULvxIuqGZ3at0YApzGHwPKepQSTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE2RjNCNDdCQjAyMUM2MUQyNjhGMEE0REJFQTE1NjlG
MDlGM0U1RTAeFw0yNjA1MDMwMjM2NThaFw0yNzA1MDIwMjQxNThaMDMxMTAvBgNV
BAMTKDE4QzQwMzhBMkMxNTMzOEY2Mzg2MDkyMzc3Q0IxNjREOUIzRUNCQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClT9YAxKEmqUqKfsnRuNsyQSr5
///sJIUWchBs/bohDXMa2HPw9giNQ/iaoBhwIMngw1gQqUcA76n4YRPfv+ZnZd/1
lZHtC8sfCMbiIetSEUKVEZzU1a/OOkkLzVRMyY8Zvt32d1hQYD+3sGdpGw/K5rf7
G8TVVQvti42NqVQ4EQ0gtTYPRGrVN12LTGwWqyBcBJ/ufw/b9QTqrX5wFpeEtXD1
fFPiC1YYPDDL7uIsOx8sh8jidYrnildHPyHCZVFSYMD0aEnBqF/+eaur9fTwIzKi
f9+EkKMgp+KDQr5WQVhSPBma+EUAd6jXeWpAOINz5Erz170u9/7oST12k0fJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGMQDiiwVM49jhgkjd8sWTZs+y7gwHwYDVR0j
BBgwFoAUsW87R7sCHGHSaPCk2+oVafCfPl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmYwZjJiZDktNDJhZS00NDlhLThkNTctYjI2ZGEwNGQ3ZWUxLzAvQjE2RjNCNDdC
QjAyMUM2MUQyNjhGMEE0REJFQTE1NjlGMDlGM0U1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMTZGM0I0N0JCMDIxQzYxRDI2OEYwQTREQkVBMTU2OUYwOUYz
RTVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04
ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzNzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtSDANBgkqhkiG
9w0BAQsFAAOCAQEAMqMWQ1/dbCpoyb8RXhIBDhwuUOqsPacRe9OWdb8oFwV1bvIo
l9PX+s8gBCRrw0WyadgBkHepFqTBNPAXANPVXdd5CnJJWeCo8rJkRhypd8Csf4zY
XMuwxF98VhLx5Hb28H9ZTvLbR6m+6Eyf38MhrtIgwOs2IVBgDRt/rEpjLfvZkf/K
ov8WR3DlimntgXmpq07RMQDMxa/RaaxfhVrPXz1JvZU4oXeF6TpyXi7YQ3cTHkzD
VwjdVn9rrdDKzA08XVIPDV1WrUa8xc38o9mCVRHhU02nJRt1snR2FmW58e8uiYl6
6Qr4Oi31yXhUn2xB1M1LhY5y270BL53a/IBOkA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:44:06 2026 by rpki-client