Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39352e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e39352e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          IxSe3Xr1qddMwZDfLIWYsSivDYhp37EtqjK86ZCa4Ps=
Subject key identifier:   36:DF:D4:40:7D:6A:48:B5:47:32:BA:2C:46:18:48:CB:AC:BB:0F:BA
Certificate issuer:       /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial:       1C06DCCEC948F55F2A8CE27584E59581CB36F909
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39352e302f32342d3234203d3e203233363935.roa
Signing time:             Sun 03 May 2026 02:41:58 +0000
ROA not before:           Sun 03 May 2026 02:36:58 +0000
ROA not after:            Sun 02 May 2027 02:41:58 +0000
asID:                     23695
IP address blocks:        202.173.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:06:dc:ce:c9:48:f5:5f:2a:8c:e2:75:84:e5:95:81:cb:36:f9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
        Validity
            Not Before: May  3 02:36:58 2026 GMT
            Not After : May  2 02:41:58 2027 GMT
        Subject: CN=36DFD4407D6A48B54732BA2C461848CBACBB0FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:4b:ab:be:db:f7:5d:7e:8b:1b:23:e4:8c:
                    1f:9b:aa:38:a5:8a:fc:c1:38:2c:0c:02:dc:f4:3f:
                    d0:46:5b:ed:8b:6d:7e:0f:76:1b:37:ac:34:2e:a7:
                    9f:ce:a7:53:36:a5:86:43:1f:97:41:f1:76:9e:1e:
                    e2:83:14:a3:db:42:31:0f:bc:c8:aa:3a:63:36:c5:
                    21:ba:95:53:b8:76:d3:bc:9f:6e:0e:c4:8a:a7:7a:
                    ff:75:83:88:8e:28:91:67:fb:6e:bd:7e:bc:c7:4f:
                    5f:52:af:b1:28:81:83:30:54:8b:94:21:13:43:d2:
                    ea:5d:9e:7d:ef:aa:af:97:e3:13:2b:15:6b:93:e9:
                    fc:c1:89:a6:47:63:fb:01:c7:54:5d:f5:1e:f1:03:
                    d3:68:f9:23:fa:7b:80:af:2e:6b:90:96:29:b0:88:
                    00:e4:6a:98:eb:03:96:44:fc:86:7f:3c:51:36:bc:
                    68:d8:63:df:9f:ed:1c:78:f0:09:35:7b:25:d5:6f:
                    cc:c2:e7:e5:29:f4:4d:62:85:9c:07:90:98:39:f4:
                    1e:6d:7f:90:58:b8:cd:0b:48:a4:e6:a7:ea:49:97:
                    82:6b:0c:92:2c:f8:f3:3b:a1:cc:97:ee:0a:55:c7:
                    f1:13:c9:ce:df:14:2a:0d:11:e8:25:f7:83:fb:ae:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DF:D4:40:7D:6A:48:B5:47:32:BA:2C:46:18:48:CB:AC:BB:0F:BA
            X509v3 Authority Key Identifier:
                keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39352e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:24:4b:c0:53:7f:b9:e2:df:10:c5:45:69:33:b2:69:cc:d0:
         05:27:ca:2e:f6:19:76:23:57:48:3f:20:df:05:36:9e:f7:77:
         3d:22:8c:96:23:e0:ba:fb:f7:25:e8:8f:53:27:c1:3c:b5:93:
         35:79:4f:5e:00:6e:79:d3:98:53:a6:cf:db:a5:d8:ca:66:31:
         86:c3:0e:dd:20:af:b9:c9:71:7a:71:85:a2:e5:44:d6:5e:d5:
         f4:ea:ea:4f:aa:14:7e:f8:48:3e:2b:b8:be:92:14:c4:19:0d:
         7f:e4:c4:6f:26:b9:85:14:58:36:dc:37:89:3f:a7:6f:65:6e:
         a1:5b:db:28:c8:36:77:8a:b5:da:d9:de:68:48:30:a0:43:81:
         6f:2c:93:aa:9b:51:c0:92:64:c1:a0:4e:f6:74:ca:c0:09:84:
         55:1c:e7:e1:be:52:7e:93:cd:43:e5:de:70:a5:bc:98:44:46:
         ec:2e:20:51:71:04:45:8f:03:80:ba:f2:e6:65:0f:a1:58:19:
         bc:ed:b3:2d:eb:8a:19:ad:e1:bd:3e:12:7f:02:62:54:b6:23:
         15:f7:11:37:8c:ae:69:e3:c4:50:a1:72:ef:95:c5:e7:53:b5:
         70:f7:23:cc:97:82:fc:49:b1:21:17:0a:9c:f8:ee:b7:35:36:
         6b:11:57:3e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHAbczslI9V8qjOJ1hOWVgcs2+QkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE2RjNCNDdCQjAyMUM2MUQyNjhGMEE0REJFQTE1NjlG
MDlGM0U1RTAeFw0yNjA1MDMwMjM2NThaFw0yNzA1MDIwMjQxNThaMDMxMTAvBgNV
BAMTKDM2REZENDQwN0Q2QTQ4QjU0NzMyQkEyQzQ2MTg0OENCQUNCQjBGQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY3kurvtv3XX6LGyPkjB+bqjil
ivzBOCwMAtz0P9BGW+2LbX4Pdhs3rDQup5/Op1M2pYZDH5dB8XaeHuKDFKPbQjEP
vMiqOmM2xSG6lVO4dtO8n24OxIqnev91g4iOKJFn+269frzHT19Sr7EogYMwVIuU
IRND0updnn3vqq+X4xMrFWuT6fzBiaZHY/sBx1Rd9R7xA9No+SP6e4CvLmuQlimw
iADkapjrA5ZE/IZ/PFE2vGjYY9+f7Rx48Ak1eyXVb8zC5+Up9E1ihZwHkJg59B5t
f5BYuM0LSKTmp+pJl4JrDJIs+PM7ocyX7gpVx/ETyc7fFCoNEegl94P7rj8DAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUNt/UQH1qSLVHMrosRhhIy6y7D7owHwYDVR0j
BBgwFoAUsW87R7sCHGHSaPCk2+oVafCfPl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmYwZjJiZDktNDJhZS00NDlhLThkNTctYjI2ZGEwNGQ3ZWUxLzAvQjE2RjNCNDdC
QjAyMUM2MUQyNjhGMEE0REJFQTE1NjlGMDlGM0U1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMTZGM0I0N0JCMDIxQzYxRDI2OEYwQTREQkVBMTU2OUYwOUYz
RTVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04
ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzOTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtXzANBgkqhkiG
9w0BAQsFAAOCAQEAfiRLwFN/ueLfEMVFaTOyaczQBSfKLvYZdiNXSD8g3wU2nvd3
PSKMliPguvv3JeiPUyfBPLWTNXlPXgBuedOYU6bP26XYymYxhsMO3SCvuclxenGF
ouVE1l7V9OrqT6oUfvhIPiu4vpIUxBkNf+TEbya5hRRYNtw3iT+nb2VuoVvbKMg2
d4q12tneaEgwoEOBbyyTqptRwJJkwaBO9nTKwAmEVRzn4b5SfpPNQ+XecKW8mERG
7C4gUXEERY8DgLry5mUPoVgZvO2zLeuKGa3hvT4SfwJiVLYjFfcRN4yuaePEUKFy
75XF51O1cPcjzJeC/EmxIRcKnPjutzU2axFXPg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:15:54 2026 by rpki-client