Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37352e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e37352e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          RGtG8nInTiCLOyxPQ0KSnc8TbDSg79XTW9QtuThT7fE=
Subject key identifier:   56:8A:DA:3D:76:48:F7:AC:2E:13:69:C6:28:06:B7:D2:DA:C5:9B:40
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       71DCE610CFC1FB5B9BA1290DDCE52EF74F987E76
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37352e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:42:02 +0000
ROA not before:           Sun 03 May 2026 02:37:02 +0000
ROA not after:            Sun 02 May 2027 02:42:02 +0000
asID:                     23695
IP address blocks:        202.173.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:dc:e6:10:cf:c1:fb:5b:9b:a1:29:0d:dc:e5:2e:f7:4f:98:7e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:37:02 2026 GMT
            Not After : May  2 02:42:02 2027 GMT
        Subject: CN=568ADA3D7648F7AC2E1369C62806B7D2DAC59B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:f6:f1:bb:82:df:e9:13:a5:b8:cd:1c:b8:
                    1b:c1:3d:fa:6d:eb:5d:31:94:54:f0:a4:e2:a5:44:
                    1b:2b:f0:e5:f9:29:c9:05:b4:63:6f:4d:fd:da:be:
                    8d:17:c0:ac:da:a0:f4:32:df:31:b6:30:f3:c8:6e:
                    56:2e:65:cc:86:3c:6e:6f:01:dc:8c:6e:7a:d1:3e:
                    a7:5b:84:41:9e:90:19:16:85:b6:39:f3:81:b6:31:
                    73:7f:dc:39:ba:84:4d:0e:76:20:06:e6:cd:3e:bd:
                    ea:ac:f9:9a:0c:a4:93:ca:3f:9c:36:84:a9:44:2f:
                    6c:e5:0c:4d:08:5e:6f:70:58:8f:30:0e:b3:e0:73:
                    16:bc:b3:2c:b9:dd:da:0c:11:dd:98:bb:46:1c:e4:
                    14:ae:85:05:15:ae:f8:26:12:9d:5f:08:df:4a:f2:
                    e3:6b:c9:ea:38:10:54:ad:e0:94:ec:3f:84:d9:ef:
                    70:b0:4b:e6:38:49:06:52:ae:78:ec:2c:39:a4:a4:
                    fb:63:5e:e8:f5:82:7d:a9:da:b4:92:c8:98:8f:b5:
                    e3:bf:fe:33:8a:f5:7f:3a:39:8c:f5:ae:d6:75:62:
                    ab:4b:db:2d:55:61:6f:16:c9:fe:1a:0d:e1:5f:d3:
                    72:5a:4a:d6:9f:dd:cb:e4:50:5e:14:9b:14:c2:6f:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8A:DA:3D:76:48:F7:AC:2E:13:69:C6:28:06:B7:D2:DA:C5:9B:40
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37352e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c5:07:0f:d2:00:9c:2b:d1:ec:b7:94:63:6d:23:fe:c6:11:
         57:e6:0f:30:cf:c1:71:86:0d:11:70:64:57:08:e4:2b:18:c8:
         ff:6b:51:ca:b8:93:71:99:d3:ca:cd:ad:a8:f8:7d:ca:73:f2:
         ad:60:d5:4a:75:2c:7f:79:32:4c:37:f9:ab:1b:00:41:f3:86:
         b5:c4:ef:7c:03:ac:12:cd:81:45:64:76:b5:0b:1a:53:e4:e4:
         df:9e:e0:0f:bf:ec:8d:cd:54:b6:70:01:d9:9d:8f:49:8a:12:
         89:06:4b:7b:0a:61:ff:9b:ca:96:d1:a7:dd:c0:ac:8d:5b:3e:
         a2:f7:11:c9:7b:58:cd:dd:fb:f5:9e:96:27:b1:36:fb:a6:97:
         de:3f:50:93:da:ef:96:db:3b:c7:f6:38:e2:ac:53:b0:c3:db:
         28:4f:cc:85:8f:72:87:5d:46:c0:56:b4:cb:b8:89:67:98:65:
         2f:a5:ce:cb:75:2e:3d:6a:e5:da:1d:59:5b:25:6a:20:f0:aa:
         f3:90:ef:b7:69:02:b5:58:f0:eb:7a:be:f3:d5:40:07:ac:65:
         d1:7b:8a:9a:47:0b:c4:1c:11:f2:d0:b3:5b:ad:75:d2:b0:7d:
         8f:71:dc:48:d2:b5:26:4d:82:5c:49:ac:d9:1b:ca:d9:04:83:
         6d:89:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:04 2026 by rpki-client