Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39332e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e39332e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          ypV37OXUNQUOZSxfQ+Cr5A1xF/k/6BPjFWYxcO2LC4k=
Subject key identifier:   84:7C:EB:2E:08:1E:F1:3F:C2:48:81:4F:00:AB:98:BA:87:20:8C:50
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       0720EA9884B31A751FE105312A1FB01B2A6EE45A
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39332e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:41:58 +0000
ROA not before:           Sun 03 May 2026 02:36:58 +0000
ROA not after:            Sun 02 May 2027 02:41:58 +0000
asID:                     23695
IP address blocks:        202.173.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:20:ea:98:84:b3:1a:75:1f:e1:05:31:2a:1f:b0:1b:2a:6e:e4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:36:58 2026 GMT
            Not After : May  2 02:41:58 2027 GMT
        Subject: CN=847CEB2E081EF13FC248814F00AB98BA87208C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:75:f6:c7:db:9c:24:a6:22:17:07:6b:58:
                    b4:89:cc:69:44:3a:bc:61:59:54:bb:64:04:ce:04:
                    f6:00:be:76:92:8b:b0:00:39:8d:95:16:0a:db:c1:
                    e1:90:7c:4f:e2:1e:9a:28:fa:7d:c3:ef:42:de:99:
                    5d:06:71:93:c0:c5:8e:4c:28:91:fa:6c:5c:84:c6:
                    34:9e:e4:e0:a1:fa:f6:cd:f2:60:3c:e0:10:79:77:
                    d1:e0:01:e5:61:d7:1a:8d:c7:ef:0f:e4:48:b1:0e:
                    8d:c6:e4:84:ae:d7:5f:67:e8:c4:22:88:97:f0:02:
                    3a:54:a3:4c:94:69:17:06:04:d4:1c:4d:b6:bf:12:
                    a6:45:e7:59:ca:ad:0e:f0:d3:56:59:cb:9d:90:8d:
                    a4:f7:fb:f2:ab:7b:56:fa:73:2d:0e:1c:7c:5c:62:
                    90:70:79:ea:72:eb:92:43:4c:0a:ec:e3:c5:58:79:
                    d0:f2:6c:d4:e4:7b:f0:27:c7:ae:83:29:a6:60:27:
                    22:d2:97:d4:db:8f:80:b2:e6:ab:9d:13:60:5e:4a:
                    5d:5c:c2:a9:dd:dd:26:1a:5e:18:c1:34:07:be:a9:
                    46:24:59:29:fb:fe:37:59:b3:48:e5:e0:3c:b5:fb:
                    f7:2c:8a:c2:f3:71:f7:28:63:91:8d:14:4e:66:22:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7C:EB:2E:08:1E:F1:3F:C2:48:81:4F:00:AB:98:BA:87:20:8C:50
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39332e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:89:9a:93:52:6c:87:2d:15:2e:eb:dc:f7:5b:7e:b6:0b:0a:
         ad:20:ff:ed:3b:4a:5b:ea:7d:ac:1a:21:ff:a4:93:19:bf:c5:
         82:13:99:53:cc:59:6b:40:7d:22:01:e1:aa:4b:5d:93:01:f6:
         3e:92:89:de:a4:83:22:69:dc:a5:b7:c4:bc:e9:b7:78:41:62:
         ee:c3:d4:98:9c:6b:a5:7a:87:79:45:12:8a:63:c8:cc:ab:98:
         54:b3:73:c8:45:a9:f4:22:50:3c:5d:97:c7:96:61:0e:56:75:
         e3:8e:bb:9c:3c:40:9a:55:da:82:2f:b8:98:35:ee:b6:cf:6f:
         48:35:70:29:6a:5f:85:40:a0:05:49:36:46:a9:c2:1b:4f:08:
         c6:63:7a:f5:cb:50:28:72:21:92:04:9d:d3:e9:c7:c5:ce:97:
         0e:34:6e:62:ed:90:d3:68:bf:51:1e:66:b3:f6:54:10:0f:f4:
         b4:f1:e8:4c:dd:66:78:24:68:63:00:b0:7f:f9:6a:27:6d:c9:
         2b:4e:82:79:30:9d:68:1c:6a:dd:75:bb:1d:ed:4b:1e:27:4a:
         6f:37:a5:7c:56:58:59:c5:51:0c:78:b0:c0:a7:02:04:da:b5:
         e4:55:83:39:ca:94:30:b5:40:5b:f4:31:62:f2:83:86:0a:d8:
         c5:e8:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:29 2026 by rpki-client