Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31372e302f32342d3234203d3e203538383136.roa
File:                     3230322e37332e31372e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          AkUZFCetdycaS/D0x2tQa/hOzn3gjk7dlXtNQsLsElE=
Subject key identifier:   9A:B7:DA:42:24:20:61:CE:66:4F:B4:D9:9B:31:AE:11:D6:C2:E9:53
Certificate issuer:       /CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
Certificate serial:       458D5BE9536F8FB927026A5C147F1A4942DBFE79
Authority key identifier: 92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31372e302f32342d3234203d3e203538383136.roa
Signing time:             Sun 03 May 2026 02:42:12 +0000
ROA not before:           Sun 03 May 2026 02:37:12 +0000
ROA not after:            Sun 02 May 2027 02:42:12 +0000
asID:                     58816
IP address blocks:        202.73.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl
                          rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8d:5b:e9:53:6f:8f:b9:27:02:6a:5c:14:7f:1a:49:42:db:fe:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
        Validity
            Not Before: May  3 02:37:12 2026 GMT
            Not After : May  2 02:42:12 2027 GMT
        Subject: CN=9AB7DA42242061CE664FB4D99B31AE11D6C2E953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:35:86:80:e9:62:a2:6f:93:fe:61:a6:e3:
                    bb:b2:9b:1a:d3:96:61:ea:cf:d4:ef:ec:d8:70:6f:
                    e6:02:b7:86:04:61:b5:32:0f:c2:23:d1:27:6d:26:
                    aa:71:12:46:4d:72:01:c8:bb:1a:cb:06:37:17:07:
                    ef:c1:8a:cd:92:e6:75:00:93:ed:f2:30:3f:1d:9b:
                    26:87:34:67:d0:48:d9:01:76:ba:37:f6:9f:36:32:
                    44:d5:93:29:b5:90:e6:cf:dc:6e:1d:f5:20:39:1e:
                    b0:ea:bf:20:4b:75:44:9d:e2:63:ea:43:8e:21:30:
                    fc:12:3b:d9:cc:5a:9f:2c:a8:04:db:9d:56:2d:03:
                    58:a9:54:b2:12:c4:21:f2:7d:ce:4f:1d:5a:e3:29:
                    76:e9:79:e5:e8:1e:c5:ca:15:ec:f9:53:9c:0b:d2:
                    91:49:e8:b2:3e:66:b7:ae:1f:5a:d0:6f:f2:af:e6:
                    22:80:16:79:64:46:b9:b8:97:b2:50:ca:99:33:6b:
                    16:1e:97:b1:8f:4d:23:91:ed:3d:1e:1d:be:75:46:
                    04:e4:47:5f:2a:26:d3:1b:93:56:37:05:b2:17:0a:
                    d9:60:5e:64:8a:bb:ab:14:84:03:7c:d4:fd:da:df:
                    8d:92:39:54:73:eb:89:35:c0:e0:c4:84:5d:cf:1d:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B7:DA:42:24:20:61:CE:66:4F:B4:D9:9B:31:AE:11:D6:C2:E9:53
            X509v3 Authority Key Identifier:
                keyid:92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31372e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:be:56:e5:5e:b7:38:86:9c:d8:f1:08:68:52:d4:43:df:4e:
         42:b0:4d:bf:04:c5:11:d9:24:47:6f:90:20:a0:1a:8c:e1:a3:
         a2:43:6c:a4:59:4d:4e:98:b1:3e:e5:3c:ac:4d:d3:99:82:d5:
         50:1c:2a:02:36:db:03:2c:77:00:81:de:75:d2:47:ac:52:2d:
         39:cf:1a:2a:48:cc:41:16:76:39:fb:f7:26:eb:79:88:77:4c:
         5b:12:6f:90:dd:61:94:34:a0:f9:52:3a:d6:f6:7c:57:19:53:
         dd:bb:eb:4f:94:a1:89:d8:13:87:91:b5:22:1c:35:38:b8:b0:
         4c:e2:e7:4c:e1:ab:62:e4:e8:de:ba:e2:52:6b:75:28:d2:65:
         43:74:7f:e7:c3:e8:e7:72:a9:45:54:62:a0:76:a7:ba:32:08:
         f5:84:60:39:35:4a:37:3a:0a:bf:59:28:71:fa:77:4e:a0:94:
         e8:ce:39:7c:dc:66:c0:fa:2a:3f:b0:db:a4:7a:3c:a9:d7:28:
         61:cc:92:88:ab:b4:36:7d:dc:3a:1c:d2:27:59:50:54:58:f3:
         57:fc:de:0b:78:44:21:be:60:93:7e:1e:e3:73:01:ea:69:c8:
         94:d7:5c:31:88:5b:57:c2:08:75:39:b6:7d:c1:61:20:9b:ce:
         e9:87:7d:4d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIURY1b6VNvj7knAmpcFH8aSULb/nkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJEOTFDNzhDRUQzMjBCOTBCRjY1NjJEMUI1NTZBRTky
MThGNzRBMTAeFw0yNjA1MDMwMjM3MTJaFw0yNzA1MDIwMjQyMTJaMDMxMTAvBgNV
BAMTKDlBQjdEQTQyMjQyMDYxQ0U2NjRGQjREOTlCMzFBRTExRDZDMkU5NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mjWGgOliom+T/mGm47uymxrT
lmHqz9Tv7Nhwb+YCt4YEYbUyD8Ij0SdtJqpxEkZNcgHIuxrLBjcXB+/Bis2S5nUA
k+3yMD8dmyaHNGfQSNkBdro39p82MkTVkym1kObP3G4d9SA5HrDqvyBLdUSd4mPq
Q44hMPwSO9nMWp8sqATbnVYtA1ipVLISxCHyfc5PHVrjKXbpeeXoHsXKFez5U5wL
0pFJ6LI+ZreuH1rQb/Kv5iKAFnlkRrm4l7JQypkzaxYel7GPTSOR7T0eHb51RgTk
R18qJtMbk1Y3BbIXCtlgXmSKu6sUhAN81P3a342SOVRz64k1wODEhF3PHQx1AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUmrfaQiQgYc5mT7TZmzGuEdbC6VMwHwYDVR0j
BBgwFoAUktkceM7TILkL9lYtG1Vq6SGPdKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmZjM2NiYzQtODg4My00MTFjLTg3NmUtZTllMjNhOGQ4YWQ5LzAvOTJEOTFDNzhD
RUQzMjBCOTBCRjY1NjJEMUI1NTZBRTkyMThGNzRBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MkQ5MUM3OENFRDMyMEI5MEJGNjU2MkQxQjU1NkFFOTIxOEY3
NEExLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04
NzZlLWU5ZTIzYThkOGFkOS8wLzMyMzAzMjJlMzczMzJlMzEzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzODMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKSREwDQYJKoZIhvcN
AQELBQADggEBAGC+VuVetziGnNjxCGhS1EPfTkKwTb8ExRHZJEdvkCCgGozho6JD
bKRZTU6YsT7lPKxN05mC1VAcKgI22wMsdwCB3nXSR6xSLTnPGipIzEEWdjn79ybr
eYh3TFsSb5DdYZQ0oPlSOtb2fFcZU92760+UoYnYE4eRtSIcNTi4sEzi50zhq2Lk
6N664lJrdSjSZUN0f+fD6OdyqUVUYqB2p7oyCPWEYDk1Sjc6Cr9ZKHH6d06glOjO
OXzcZsD6Kj+w26R6PKnXKGHMkoirtDZ93Doc0idZUFRY81f83gt4RCG+YJN+HuNz
AeppyJTXXDGIW1fCCHU5tn3BYSCbzumHfU0=
-----END CERTIFICATE-----
Generated at Wed May 13 00:13:35 2026 by rpki-client