Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38302e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e38302e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          qCmg+2kdcy+v7rH5/1TSzbj3MEd3GQJUG1eOofG7vco=
Subject key identifier:   9E:23:23:0B:74:3E:04:BF:4D:44:5F:22:0E:75:DF:DB:33:45:2C:99
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       0F832CE1CF7B2F9082BD439308C36291484894D8
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38302e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:41:56 +0000
ROA not before:           Sun 03 May 2026 02:36:56 +0000
ROA not after:            Sun 02 May 2027 02:41:56 +0000
asID:                     23695
IP address blocks:        202.173.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:83:2c:e1:cf:7b:2f:90:82:bd:43:93:08:c3:62:91:48:48:94:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:36:56 2026 GMT
            Not After : May  2 02:41:56 2027 GMT
        Subject: CN=9E23230B743E04BF4D445F220E75DFDB33452C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:17:ef:48:c0:b3:d4:0e:ca:e9:dd:65:9e:
                    86:1e:53:fe:26:aa:64:47:31:a9:4c:40:f7:3d:a2:
                    c3:18:76:3c:bd:95:01:99:2b:2b:a8:c3:92:1b:07:
                    78:6a:a1:3e:56:12:fd:9e:35:11:59:b8:cb:fa:91:
                    8d:56:9c:d4:60:ac:c2:ca:5f:1a:5b:9b:9e:b5:e3:
                    39:bd:50:1d:02:95:32:3c:86:fd:50:02:cb:ed:d1:
                    a0:04:cb:27:44:6b:40:44:c8:43:88:fa:e7:d1:a5:
                    78:fe:27:d1:f3:a5:29:e1:33:01:fd:6e:ed:fe:16:
                    00:4e:85:f9:ec:70:10:0b:27:77:a6:ef:a4:c0:10:
                    06:13:74:fa:1c:77:10:f3:5c:3c:f8:11:54:b4:34:
                    d6:57:ed:e4:d9:5b:22:46:88:02:4a:90:5d:63:75:
                    90:3a:eb:56:4d:fd:8f:dd:6f:89:c5:31:a3:aa:c1:
                    5a:dc:76:a3:3f:f6:d2:69:9f:b1:e6:51:a1:84:cb:
                    fe:49:fd:1f:40:7f:7a:14:ab:07:f3:40:5f:b4:85:
                    3b:02:b3:76:23:10:63:a4:9a:09:c8:2d:03:3c:a9:
                    55:34:a2:1b:be:52:7a:31:85:4e:8e:1f:09:60:1e:
                    4b:38:44:83:d9:8a:2e:a2:03:d6:02:b5:29:51:b7:
                    72:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:23:23:0B:74:3E:04:BF:4D:44:5F:22:0E:75:DF:DB:33:45:2C:99
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38302e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:96:dc:39:35:9b:44:84:af:69:4b:db:11:5e:d5:e1:bf:89:
         10:0a:e7:74:b3:40:d7:92:e7:58:b6:e9:19:b8:09:9c:84:ea:
         05:e8:f5:ea:5e:fa:de:b6:69:9a:b9:3b:61:30:bd:39:a2:5f:
         97:00:f9:5d:bd:0b:03:b8:46:bf:16:cc:da:cd:93:c7:22:50:
         8c:b2:a3:95:86:fe:ad:97:bf:21:d3:82:ce:95:64:b5:0b:78:
         3d:9c:79:db:7c:69:17:59:d7:98:68:85:75:11:ea:ff:61:64:
         4b:d9:03:dd:dd:c0:ee:5e:67:7f:f6:2b:da:fa:3d:91:ac:33:
         95:ba:86:3b:8b:5a:62:e5:4d:c4:ec:97:42:4d:12:39:b9:3c:
         8d:c4:83:77:1f:fb:b7:b1:d4:50:2a:b2:e2:72:d2:6d:2b:07:
         62:cb:3f:68:bf:3c:c3:84:19:68:e8:5d:a2:3e:02:b4:2b:40:
         19:ff:95:1c:13:dc:9c:0f:07:67:25:2b:f5:11:c0:fa:e4:ca:
         6f:f5:4d:b4:45:52:1c:7a:76:49:25:a2:1c:e9:34:9e:a6:e0:
         89:f9:56:8c:77:98:a2:f6:f9:15:14:1d:be:2e:7d:6a:f9:c9:
         9c:65:68:59:d3:c8:b4:44:c4:37:15:61:ad:0c:2f:02:fc:a3:
         62:cb:75:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:19 2026 by rpki-client