Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31362e302f32322d3232203d3e203538383136.roa
File:                     3230322e37332e31362e302f32322d3232203d3e203538383136.roa (raw, json)
Hash identifier:          2CBq7CJqMO2kYj61oODd7yEjxUNN9n5m99U1MTMFCWc=
Subject key identifier:   3D:01:96:5C:B8:34:01:3F:C8:66:49:00:C7:71:81:6D:03:6F:20:24
Certificate issuer:       /CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
Certificate serial:       2E627B1931E9BDCBD27EB860B579EAA203266673
Authority key identifier: 92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31362e302f32322d3232203d3e203538383136.roa
Signing time:             Sun 03 May 2026 02:42:14 +0000
ROA not before:           Sun 03 May 2026 02:37:14 +0000
ROA not after:            Sun 02 May 2027 02:42:14 +0000
asID:                     58816
IP address blocks:        202.73.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl
                          rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:62:7b:19:31:e9:bd:cb:d2:7e:b8:60:b5:79:ea:a2:03:26:66:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
        Validity
            Not Before: May  3 02:37:14 2026 GMT
            Not After : May  2 02:42:14 2027 GMT
        Subject: CN=3D01965CB834013FC8664900C771816D036F2024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:2b:25:7c:e3:8e:a5:e3:6d:12:37:f0:13:
                    63:ed:f9:be:57:6a:26:5f:8b:ee:70:d5:08:4e:20:
                    d2:6b:56:f0:e4:a2:0c:03:4b:f6:df:31:85:c5:d8:
                    9d:be:fc:66:5e:96:de:53:f2:92:af:ec:d0:c2:81:
                    de:14:7d:d1:17:31:e4:06:bd:64:b1:35:7f:c0:59:
                    1d:19:0f:ce:6c:c1:db:0c:d3:7e:48:42:06:b3:a2:
                    d2:3a:d1:65:a8:82:66:b4:ae:c0:a8:87:fd:95:4a:
                    47:a0:86:af:07:72:38:7b:43:b2:45:a4:5d:c7:1e:
                    84:85:e3:b0:99:21:b0:41:12:a1:c6:2f:b5:fc:62:
                    90:82:7f:a1:ed:7c:9e:5c:92:df:91:e6:a3:04:65:
                    0c:62:4b:62:1e:0b:eb:3c:48:9c:5d:bb:76:6b:b6:
                    93:c4:71:3d:3a:ac:f7:33:2f:6c:c9:52:d1:9e:da:
                    68:40:34:1c:58:16:40:10:44:40:ff:8c:5d:37:83:
                    27:07:f1:37:4b:b0:1f:ed:d8:08:d9:0d:26:a5:56:
                    73:16:17:df:68:fe:47:8d:bc:21:7b:f8:62:c7:77:
                    4c:78:72:12:5b:c8:dd:05:bb:e2:65:c3:ea:3c:fb:
                    c2:39:fb:5e:f7:fc:27:fa:20:5e:a4:2e:55:f7:02:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:01:96:5C:B8:34:01:3F:C8:66:49:00:C7:71:81:6D:03:6F:20:24
            X509v3 Authority Key Identifier:
                keyid:92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31362e302f32322d3232203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:23:74:fd:82:ae:d2:e6:cb:b1:66:28:1a:05:59:d7:02:07:
         39:8f:7d:c5:c0:0c:cb:4c:32:a1:68:7c:2a:98:8d:b2:dd:2a:
         a8:55:9c:9a:41:1a:6d:7d:1d:ba:04:a2:25:95:ae:8a:b9:21:
         ae:1d:5e:52:22:2a:30:61:4d:2b:cb:61:bd:e8:5d:e7:1d:3e:
         86:9d:d2:bc:f4:cc:89:b3:c0:52:ea:8e:fd:d9:dd:8d:0f:0f:
         e1:af:1b:f9:c7:0b:61:c6:e3:bd:85:8b:f1:74:84:e3:67:da:
         42:67:34:d6:7b:f2:ba:9a:05:c7:9c:b9:05:66:30:ef:d2:53:
         45:56:ae:93:db:cb:d2:04:c6:95:44:92:43:ab:a5:02:a5:54:
         f4:2c:3b:28:30:a2:ab:92:2a:04:73:7a:6d:e6:a7:3c:b7:fb:
         9c:b4:5d:62:f4:d1:0d:7a:b5:af:f0:b6:2a:e7:45:15:1f:dd:
         0b:2d:fa:2d:23:37:f1:97:df:25:7a:67:a7:af:4a:f2:46:bb:
         ed:8c:ea:c6:d1:0a:be:34:05:ce:4d:1d:46:d0:24:e7:cd:16:
         0c:9b:d3:15:1b:9d:28:eb:9e:81:d7:ee:db:2f:83:ed:4c:19:
         5b:b4:64:fd:c2:80:65:ba:70:56:29:fe:ed:0b:43:a7:94:de:
         68:23:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:00 2026 by rpki-client