Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38372e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e38372e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          jCfwrRycE8FTo6GABwIw2MdaCznQM7t5u6VgZpyL7dA=
Subject key identifier:   66:E4:AB:BB:41:7C:90:23:35:0D:E0:8F:E0:27:92:60:CC:69:0D:75
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       66F5AD62D4087ECE3A31AE7E5CD76A6D96BAD9FE
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38372e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:42:05 +0000
ROA not before:           Sun 03 May 2026 02:37:05 +0000
ROA not after:            Sun 02 May 2027 02:42:05 +0000
asID:                     23695
IP address blocks:        202.173.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f5:ad:62:d4:08:7e:ce:3a:31:ae:7e:5c:d7:6a:6d:96:ba:d9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:37:05 2026 GMT
            Not After : May  2 02:42:05 2027 GMT
        Subject: CN=66E4ABBB417C9023350DE08FE0279260CC690D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:b0:23:32:40:f1:87:59:42:f5:eb:57:20:
                    c3:67:b5:48:c0:eb:56:55:35:0a:f7:87:e8:b5:1b:
                    6e:7c:01:c1:17:29:9b:3a:67:46:be:18:6d:8e:4e:
                    f1:c3:a9:96:11:37:3e:73:dd:fd:09:81:99:5d:b1:
                    15:43:02:23:e3:17:81:bb:48:fd:2f:3a:58:42:77:
                    62:76:19:3a:9e:46:74:5b:bc:25:29:f1:d7:99:29:
                    07:cf:aa:c6:a3:dc:cb:87:9b:fd:10:8c:4c:e0:3c:
                    47:b0:f0:ea:9d:98:fa:ea:63:bb:5c:b1:21:41:3a:
                    7f:a9:84:9e:7f:d0:35:f5:a0:80:2d:ac:ee:e1:c2:
                    37:cc:a4:50:96:cf:79:a0:ac:75:06:d8:76:dc:19:
                    d6:a4:33:b7:07:a7:43:ce:d5:fb:68:77:4a:dc:0e:
                    27:2d:80:3e:42:0a:64:1e:e9:5c:e3:87:da:c7:b9:
                    89:bd:f7:6a:fb:69:5d:91:bb:37:1c:05:c8:06:6a:
                    61:0a:85:a6:02:c1:13:b0:68:30:4e:39:43:51:52:
                    ca:c3:76:e0:20:12:f2:c5:b8:ea:d4:bc:f5:a0:56:
                    84:76:ca:88:6e:d5:30:02:1d:8f:ad:1e:03:a6:60:
                    91:d1:5b:fa:5c:92:13:4a:2b:c4:67:1f:15:fb:69:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E4:AB:BB:41:7C:90:23:35:0D:E0:8F:E0:27:92:60:CC:69:0D:75
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38372e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:ff:36:40:20:2c:ce:64:27:6d:b0:01:bf:b2:a0:7d:fe:02:
         96:db:7b:9e:db:07:db:74:7e:fa:a5:09:5e:c9:2f:1c:05:08:
         6b:bc:58:73:0f:ec:1a:a9:ed:09:50:9a:86:80:be:b0:5c:bc:
         3b:9a:18:fe:52:70:aa:1b:15:b8:84:21:20:6d:34:2a:8b:f8:
         4c:ef:0e:62:7f:04:50:c1:58:60:8a:af:1b:3c:29:32:6a:6c:
         3a:83:05:33:02:a4:72:d1:96:0c:9a:0b:b3:9c:a9:fb:f6:ce:
         ab:5a:d0:80:d5:d5:67:c8:b3:a7:6e:08:74:fa:25:f7:bd:fc:
         d9:e1:54:33:71:ee:b1:56:50:9b:90:22:85:a4:28:23:dd:03:
         e8:99:52:95:8f:2b:62:b7:5e:f1:e2:bd:1e:d4:fd:8b:8f:27:
         60:89:01:f0:28:2a:40:ae:0f:8d:3b:05:d9:96:69:26:1d:35:
         a0:e8:11:ce:9a:13:eb:e1:b0:df:94:e1:ae:1c:d0:f2:e2:b5:
         21:d4:e3:cb:0e:4a:69:0e:4a:c0:c2:89:e4:fb:02:bb:a3:cc:
         85:7b:58:da:67:70:ec:83:ce:dc:d3:26:b1:94:ff:8b:81:3e:
         95:ce:80:b4:76:fe:3e:6a:aa:02:bd:d1:7f:34:27:8d:47:b8:
         7b:5a:2f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:44 2026 by rpki-client