Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38352e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e38352e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          CaQQTf2021vDeSQ8k41sP44ABCjhhuIDpJFeceHfCq8=
Subject key identifier:   C3:EA:40:8A:7C:A9:17:8F:8D:2B:89:23:55:B7:17:38:58:BE:1C:0C
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       555FDCB36B0704D517082677D5F3900AA969BF03
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38352e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:41:59 +0000
ROA not before:           Sun 03 May 2026 02:36:59 +0000
ROA not after:            Sun 02 May 2027 02:41:59 +0000
asID:                     23695
IP address blocks:        202.173.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5f:dc:b3:6b:07:04:d5:17:08:26:77:d5:f3:90:0a:a9:69:bf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:36:59 2026 GMT
            Not After : May  2 02:41:59 2027 GMT
        Subject: CN=C3EA408A7CA9178F8D2B892355B7173858BE1C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:28:ac:7f:6b:0a:1e:2a:7b:05:00:de:4d:30:
                    e2:b2:80:ad:98:13:3f:66:b3:d0:cd:03:2e:a2:8f:
                    30:1b:a0:c8:58:36:47:54:ca:6c:ad:35:e3:ae:24:
                    11:27:d5:1b:ac:8f:d4:75:35:45:5d:65:db:7c:b8:
                    3c:21:ae:a4:8c:ff:60:c8:2e:d4:16:95:2d:e7:e2:
                    1e:ed:97:58:07:12:56:81:66:ef:3d:77:e3:3b:15:
                    b0:d9:4d:49:3a:0c:72:83:81:05:ea:fe:a5:3e:8d:
                    d5:20:12:d2:39:0e:28:60:36:80:f4:7b:01:9f:c9:
                    98:8c:69:65:6b:15:af:f2:94:46:9f:69:07:64:44:
                    2d:71:21:80:22:2b:69:22:a7:1a:4c:36:d1:75:db:
                    bb:a5:cb:41:f3:6c:a5:c4:a3:7a:d2:79:2c:e6:45:
                    b8:38:be:07:9b:6c:74:bd:e6:8a:c2:05:99:75:d8:
                    1b:77:3d:94:c4:1e:32:93:b6:6d:26:d8:ce:eb:38:
                    35:66:3a:f9:6a:99:26:94:84:56:d8:4d:56:48:92:
                    ca:71:ca:65:38:d9:b0:34:50:b2:de:a3:b6:0e:a4:
                    ad:ed:68:9f:a9:39:02:37:d9:fc:05:b4:ba:f4:aa:
                    f2:4a:be:93:ef:36:0e:5e:e2:3b:f1:8d:a8:c7:f1:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:40:8A:7C:A9:17:8F:8D:2B:89:23:55:B7:17:38:58:BE:1C:0C
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38352e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:5c:69:bd:2b:b1:1e:e7:ef:0e:fa:30:3b:39:c9:81:21:c5:
         56:a2:53:83:20:2f:59:e4:4f:21:3b:9d:39:f2:a5:74:a3:ad:
         33:e2:31:2e:f8:b7:ea:60:4e:35:67:11:de:ec:86:da:08:d2:
         e4:37:08:0c:97:8c:37:80:3a:27:84:82:19:1a:76:d9:29:13:
         bc:72:26:8c:e1:6a:69:be:7f:86:f9:73:20:da:61:12:dc:d5:
         97:9d:2c:01:b9:64:82:99:8e:2e:c6:73:a9:d8:c5:cb:41:f7:
         c1:f1:b1:93:9e:08:87:f0:e5:0d:86:53:7f:ab:e2:6c:db:de:
         f6:51:c8:10:67:92:a3:09:2d:38:ac:f6:30:06:1a:9d:72:4b:
         96:54:06:e4:ac:37:6b:48:70:39:5b:03:50:1b:df:68:c9:ec:
         b7:ad:3a:b4:de:44:77:75:f6:04:72:1a:7b:4d:cf:ca:9e:b1:
         fd:92:60:6d:56:60:1b:a9:62:00:de:e7:50:10:5a:bf:63:34:
         cb:26:0d:3f:60:70:5a:d9:26:1b:67:1b:b0:4a:00:c9:38:b2:
         76:c8:33:0f:21:24:fd:48:16:69:ae:99:12:59:73:be:47:90:
         5c:6e:ba:d5:28:c3:69:9c:78:0e:38:0c:7a:da:6b:a4:79:cd:
         27:8c:52:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:57 2026 by rpki-client