Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38332e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e38332e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          L9/41HJ0IvQi6O0xxDbn47FOyT7XU6DPAh9PNdhvcjc=
Subject key identifier:   DA:52:1F:0E:7B:59:E8:E7:7A:33:1E:86:0C:09:08:93:4B:78:F8:16
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       42FA5C114C4BC9A1F8A9810E757C7E3F183AAD3A
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38332e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:41:58 +0000
ROA not before:           Sun 03 May 2026 02:36:58 +0000
ROA not after:            Sun 02 May 2027 02:41:58 +0000
asID:                     23695
IP address blocks:        202.173.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fa:5c:11:4c:4b:c9:a1:f8:a9:81:0e:75:7c:7e:3f:18:3a:ad:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:36:58 2026 GMT
            Not After : May  2 02:41:58 2027 GMT
        Subject: CN=DA521F0E7B59E8E77A331E860C0908934B78F816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:b2:2c:f3:b2:30:00:7f:49:4d:42:72:f7:
                    db:61:ec:75:94:e5:11:86:09:b6:57:00:31:1f:05:
                    69:b4:92:4b:9e:d4:de:b8:76:3d:62:72:b9:e4:e2:
                    f9:b5:c2:3e:ab:9b:bb:30:c9:24:cb:b3:0c:27:5b:
                    cf:8a:51:6a:a0:3f:37:61:1d:62:05:88:6c:ab:47:
                    1c:d0:0c:a6:6c:69:39:3e:8a:91:b0:9e:00:c4:e9:
                    1f:0d:8b:65:50:1d:1f:55:43:62:a3:b6:fc:1f:43:
                    ad:50:4f:ea:7c:8a:8c:9c:41:6e:35:2f:3e:df:da:
                    a4:66:b6:4e:e9:c4:4c:ea:ac:dd:62:2c:32:7b:1d:
                    1a:44:6f:68:82:d5:1b:3f:1a:00:e2:61:14:62:25:
                    9c:75:e7:6f:98:0f:f3:56:14:99:83:66:d3:8f:a3:
                    9e:89:ad:14:31:47:5c:b4:54:e2:39:df:37:8e:95:
                    65:77:8a:c8:da:fc:9c:4a:c5:dc:59:30:b5:68:ea:
                    93:fd:bc:9d:15:6d:2a:2c:60:ce:f2:64:21:5e:41:
                    ed:6b:19:2b:f1:1d:44:02:fa:54:c4:fb:f9:ee:70:
                    10:d9:91:9d:e3:86:8b:48:e4:a9:02:29:08:b6:de:
                    d2:ba:bd:d7:c8:61:e9:c8:b2:ed:96:be:e1:3d:d6:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:52:1F:0E:7B:59:E8:E7:7A:33:1E:86:0C:09:08:93:4B:78:F8:16
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38332e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:97:da:b6:22:ab:43:fc:c6:64:83:ff:2a:17:e6:7b:7d:b0:
         c4:cf:8b:d4:d5:53:e9:70:19:e3:a4:b6:6c:83:f4:5e:05:72:
         e0:06:8a:ff:bd:18:4a:ab:ae:cd:8f:0a:15:c6:e0:c8:f0:e2:
         c3:15:31:27:b3:b8:ab:c4:71:78:aa:ee:fa:ee:78:7a:fe:20:
         01:fa:19:eb:46:4e:98:52:81:a7:26:46:ac:69:f2:6a:50:16:
         28:3e:4b:5f:7b:c5:27:b9:b5:a4:c5:70:81:99:6d:69:e7:b0:
         8b:e1:b9:f6:9a:65:10:2e:7d:31:9f:e2:9a:4d:63:5a:f3:40:
         60:a5:2f:09:e2:2d:1a:40:4a:0c:6a:b9:c3:81:2c:30:48:ae:
         72:21:c6:3f:4e:29:7b:d3:30:67:dc:03:66:17:f4:e8:08:c0:
         0b:32:66:61:4a:2a:d6:88:06:cc:98:a7:ff:a3:ef:33:24:fa:
         e5:a0:5e:75:c1:31:27:d7:f6:64:40:11:5d:79:cf:0b:2c:4a:
         27:45:52:af:16:27:24:eb:64:b2:0c:0c:13:44:3d:04:e8:8e:
         de:e5:fe:d1:cd:66:74:fd:1c:14:93:21:e1:5c:41:e1:03:16:
         46:05:0e:5c:01:bf:65:c8:47:d9:00:a9:21:cf:80:06:c1:b1:
         95:4f:12:6f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQvpcEUxLyaH4qYEOdXx+Pxg6rTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE2RjNCNDdCQjAyMUM2MUQyNjhGMEE0REJFQTE1NjlG
MDlGM0U1RTAeFw0yNjA1MDMwMjM2NThaFw0yNzA1MDIwMjQxNThaMDMxMTAvBgNV
BAMTKERBNTIxRjBFN0I1OUU4RTc3QTMzMUU4NjBDMDkwODkzNEI3OEY4MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ97Is87IwAH9JTUJy99th7HWU
5RGGCbZXADEfBWm0kkue1N64dj1icrnk4vm1wj6rm7swySTLswwnW8+KUWqgPzdh
HWIFiGyrRxzQDKZsaTk+ipGwngDE6R8Ni2VQHR9VQ2KjtvwfQ61QT+p8ioycQW41
Lz7f2qRmtk7pxEzqrN1iLDJ7HRpEb2iC1Rs/GgDiYRRiJZx152+YD/NWFJmDZtOP
o56JrRQxR1y0VOI53zeOlWV3isja/JxKxdxZMLVo6pP9vJ0VbSosYM7yZCFeQe1r
GSvxHUQC+lTE+/nucBDZkZ3jhotI5KkCKQi23tK6vdfIYenIsu2WvuE91sF/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU2lIfDntZ6Od6Mx6GDAkIk0t4+BYwHwYDVR0j
BBgwFoAUsW87R7sCHGHSaPCk2+oVafCfPl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmYwZjJiZDktNDJhZS00NDlhLThkNTctYjI2ZGEwNGQ3ZWUxLzAvQjE2RjNCNDdC
QjAyMUM2MUQyNjhGMEE0REJFQTE1NjlGMDlGM0U1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMTZGM0I0N0JCMDIxQzYxRDI2OEYwQTREQkVBMTU2OUYwOUYz
RTVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04
ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzODMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtUzANBgkqhkiG
9w0BAQsFAAOCAQEAdJfatiKrQ/zGZIP/Khfme32wxM+L1NVT6XAZ46S2bIP0XgVy
4AaK/70YSquuzY8KFcbgyPDiwxUxJ7O4q8RxeKru+u54ev4gAfoZ60ZOmFKBpyZG
rGnyalAWKD5LX3vFJ7m1pMVwgZltaeewi+G59pplEC59MZ/imk1jWvNAYKUvCeIt
GkBKDGq5w4EsMEiuciHGP04pe9MwZ9wDZhf06AjACzJmYUoq1ogGzJin/6PvMyT6
5aBedcExJ9f2ZEARXXnPCyxKJ0VSrxYnJOtksgwME0Q9BOiO3uX+0c1mdP0cFJMh
4VxB4QMWRgUOXAG/ZchH2QCpIc+ABsGxlU8Sbw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:10 2026 by rpki-client