Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37382e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e37382e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          HLsQI2aRAmhXNprdG1hucxHsDfdk4EFFS9agYhQFVMM=
Subject key identifier:   EB:F7:A8:66:A3:64:70:BE:67:B6:23:54:70:4B:91:E4:30:DA:27:8C
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       2467CD857E652870E7B0ED398E8D13D229FB6009
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37382e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:42:01 +0000
ROA not before:           Sun 03 May 2026 02:37:01 +0000
ROA not after:            Sun 02 May 2027 02:42:01 +0000
asID:                     23695
IP address blocks:        202.173.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:67:cd:85:7e:65:28:70:e7:b0:ed:39:8e:8d:13:d2:29:fb:60:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:37:01 2026 GMT
            Not After : May  2 02:42:01 2027 GMT
        Subject: CN=EBF7A866A36470BE67B62354704B91E430DA278C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:fd:34:6c:d1:b1:b4:03:ec:86:b1:c9:a4:
                    b5:b1:0d:58:be:1a:88:ea:b5:9c:28:b5:6d:d5:d5:
                    a8:ee:a9:b2:cd:39:10:77:98:1d:a6:b8:e3:cd:1f:
                    65:3b:e8:67:24:ee:d0:e3:0e:68:ef:d6:49:f2:de:
                    a7:d9:d8:32:d6:81:32:ae:51:5f:1a:4b:90:38:e6:
                    0b:f5:e6:99:2a:67:4e:d7:03:ff:86:25:8d:59:e5:
                    e8:11:62:54:75:ab:74:1a:b3:0d:f9:12:fb:0b:a9:
                    d5:21:73:2b:77:ab:33:60:cd:fc:9e:ee:d1:3f:3f:
                    7f:1d:ef:dd:0b:a3:01:a6:ca:f8:36:a4:26:1b:c3:
                    55:28:c5:0c:a9:69:91:02:6b:54:62:4b:1b:76:d3:
                    04:80:99:e6:2a:5e:95:e3:05:0b:1c:67:4a:79:74:
                    bf:78:3d:bc:b2:5c:da:a5:b8:0e:33:64:e5:e8:73:
                    47:7d:f4:4c:c4:6e:87:5d:b9:f0:b3:3e:06:1d:19:
                    a5:88:d3:d8:59:6a:35:bc:1d:33:d6:3e:a7:f8:3c:
                    ad:2c:ac:37:b5:cb:d5:c8:e9:db:4d:f3:31:78:58:
                    a6:b7:7c:7a:9b:89:4d:6c:31:8a:90:43:81:62:96:
                    0d:b6:c8:4c:de:1e:28:40:12:ef:31:1c:16:64:b9:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F7:A8:66:A3:64:70:BE:67:B6:23:54:70:4B:91:E4:30:DA:27:8C
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37382e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:7a:9b:e8:fe:5d:df:bf:8e:bb:99:a5:fc:6e:5b:5c:65:5d:
         c1:be:44:90:ca:5b:cd:58:57:bb:60:c3:4e:68:56:2f:f0:8f:
         4a:4e:8a:fe:cf:25:08:7b:88:96:f7:a9:81:73:34:81:47:6a:
         3f:9f:8b:5e:b0:76:be:ad:b1:3e:20:49:2c:61:ba:3f:5f:d6:
         6f:7a:6c:7a:2e:f5:3a:2f:60:84:e2:22:e2:08:46:ee:79:7c:
         4d:ce:6b:90:35:2d:5c:9b:a5:04:15:4c:c2:ac:21:ad:81:f6:
         af:22:6d:02:16:3f:5f:97:19:93:87:35:3b:49:e1:6e:45:e8:
         21:17:87:34:d8:53:a1:a1:f2:fe:69:eb:65:34:4a:4c:53:0d:
         a5:2d:f6:30:58:24:43:07:0c:0a:3b:ef:79:d3:c7:94:a2:d1:
         80:ad:e9:70:57:59:c6:f0:ad:f1:4c:5a:2e:e7:85:17:9d:56:
         8c:2b:6c:df:27:12:75:be:86:cc:8f:7b:67:87:b4:e9:be:4f:
         f9:bc:bc:7b:7f:c4:78:62:f9:0e:f7:0e:5f:a9:61:3c:a9:22:
         d1:38:b4:34:82:fc:62:12:85:1a:a4:8b:e5:1d:0d:dd:91:f3:
         32:4d:c5:ad:bb:4d:24:df:9d:dd:0b:78:65:38:ef:6d:1e:50:
         f1:50:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:06 2026 by rpki-client