Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32312e302f32342d3234203d3e203538383136.roa
File:                     3230322e37332e32312e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          OWKFOPqM47oKaa5PB7tr8foWyQKgdIsa8VGenOJpaiE=
Subject key identifier:   DA:4B:F5:A0:AE:4F:E2:1F:C2:D3:AC:D5:02:6B:D5:45:0C:94:1F:7C
Certificate issuer:       /CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
Certificate serial:       6B02AB958F15D0508F47C1FF2DD681702FB0B3E8
Authority key identifier: 92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32312e302f32342d3234203d3e203538383136.roa
Signing time:             Sun 03 May 2026 02:42:17 +0000
ROA not before:           Sun 03 May 2026 02:37:17 +0000
ROA not after:            Sun 02 May 2027 02:42:17 +0000
asID:                     58816
IP address blocks:        202.73.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl
                          rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:02:ab:95:8f:15:d0:50:8f:47:c1:ff:2d:d6:81:70:2f:b0:b3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
        Validity
            Not Before: May  3 02:37:17 2026 GMT
            Not After : May  2 02:42:17 2027 GMT
        Subject: CN=DA4BF5A0AE4FE21FC2D3ACD5026BD5450C941F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:ce:60:cd:0e:38:a6:32:f8:c3:9a:af:4f:
                    2e:b3:84:85:f3:02:8c:fa:1a:68:c5:94:7f:61:c0:
                    49:73:d5:c5:9d:be:2e:c5:d7:41:3f:a6:13:28:b4:
                    1f:30:45:0c:1c:71:14:39:2e:7a:e6:30:e6:c3:63:
                    6d:fe:0b:b2:3f:73:53:6c:df:44:35:7a:b4:a1:21:
                    ac:30:94:b5:c1:b0:3e:be:d2:f8:11:a5:03:ba:5e:
                    83:ff:91:3e:70:13:8b:d7:6f:5f:b4:74:1c:ac:48:
                    9d:b3:fa:19:18:ad:22:48:64:78:8c:c2:6b:72:82:
                    e5:c7:fd:84:7e:5d:00:ff:a3:ce:99:79:d6:53:53:
                    4b:8e:0e:5e:0c:15:ce:22:f7:e6:0c:ff:58:7e:37:
                    64:ee:64:46:2d:a6:d5:b6:7c:48:93:57:1f:51:98:
                    22:1f:89:2a:6d:d4:bf:36:23:14:67:0c:2f:5b:3c:
                    66:b6:fa:43:fa:94:94:d2:38:a3:bc:03:cf:2f:3e:
                    8e:10:ea:32:8a:75:5b:2f:11:ee:e3:57:a6:c9:2f:
                    46:18:a4:58:ca:94:a3:18:bc:03:9c:e7:5e:2d:e1:
                    56:87:30:2f:68:87:1c:58:90:40:69:8d:12:9c:c9:
                    1e:9c:1f:71:7e:e7:da:dd:d7:55:6c:f3:fc:df:a2:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4B:F5:A0:AE:4F:E2:1F:C2:D3:AC:D5:02:6B:D5:45:0C:94:1F:7C
            X509v3 Authority Key Identifier:
                keyid:92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32312e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:72:0d:b2:3c:35:1e:a9:75:ea:47:9d:92:15:b3:05:81:
         06:55:a3:40:4b:c6:6a:29:f4:4c:8c:7f:97:54:55:d4:3a:31:
         5f:fe:98:a9:2a:17:b7:b7:f9:db:71:ad:3f:4d:e7:f3:77:a2:
         aa:07:08:dc:c8:27:a2:8f:e6:01:18:29:a3:5b:09:8b:00:f1:
         67:77:f8:f2:d0:20:e9:23:5e:52:b8:e1:15:5f:68:7e:1d:2a:
         c9:92:9f:f5:b0:67:5f:ad:c0:4b:d3:ee:6f:83:12:53:9b:26:
         e7:cb:37:f5:08:f9:4f:b0:c6:e5:1d:5f:9a:fe:e0:33:58:5e:
         3b:5b:0f:d2:7c:71:19:fb:89:09:61:0a:d3:31:5f:7f:0f:c8:
         b9:e5:fe:93:f2:20:ff:ea:bf:c4:5f:29:9d:9c:73:a1:19:56:
         06:e6:20:8d:d6:57:88:18:ca:67:9a:10:ae:01:10:6d:23:4e:
         a8:91:3d:91:b7:18:e4:49:d8:4a:12:dc:f9:4b:3b:05:56:5d:
         24:1c:e5:ef:3b:97:92:fa:da:85:48:1e:3d:4e:c2:ee:70:96:
         28:76:5e:67:37:4c:16:a4:ca:ae:28:32:15:1d:72:21:23:6d:
         7b:70:a4:6d:90:db:e2:0a:c6:6c:f6:df:a6:18:df:99:5a:f6:
         98:ee:a5:90
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUawKrlY8V0FCPR8H/LdaBcC+ws+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJEOTFDNzhDRUQzMjBCOTBCRjY1NjJEMUI1NTZBRTky
MThGNzRBMTAeFw0yNjA1MDMwMjM3MTdaFw0yNzA1MDIwMjQyMTdaMDMxMTAvBgNV
BAMTKERBNEJGNUEwQUU0RkUyMUZDMkQzQUNENTAyNkJENTQ1MEM5NDFGN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJc5gzQ44pjL4w5qvTy6zhIXz
Aoz6GmjFlH9hwElz1cWdvi7F10E/phMotB8wRQwccRQ5LnrmMObDY23+C7I/c1Ns
30Q1erShIawwlLXBsD6+0vgRpQO6XoP/kT5wE4vXb1+0dBysSJ2z+hkYrSJIZHiM
wmtyguXH/YR+XQD/o86ZedZTU0uODl4MFc4i9+YM/1h+N2TuZEYtptW2fEiTVx9R
mCIfiSpt1L82IxRnDC9bPGa2+kP6lJTSOKO8A88vPo4Q6jKKdVsvEe7jV6bJL0YY
pFjKlKMYvAOc514t4VaHMC9ohxxYkEBpjRKcyR6cH3F+59rd11Vs8/zfov5VAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU2kv1oK5P4h/C06zVAmvVRQyUH3wwHwYDVR0j
BBgwFoAUktkceM7TILkL9lYtG1Vq6SGPdKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmZjM2NiYzQtODg4My00MTFjLTg3NmUtZTllMjNhOGQ4YWQ5LzAvOTJEOTFDNzhD
RUQzMjBCOTBCRjY1NjJEMUI1NTZBRTkyMThGNzRBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MkQ5MUM3OENFRDMyMEI5MEJGNjU2MkQxQjU1NkFFOTIxOEY3
NEExLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04
NzZlLWU5ZTIzYThkOGFkOS8wLzMyMzAzMjJlMzczMzJlMzIzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzODMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKSRUwDQYJKoZIhvcN
AQELBQADggEBAB3ecg2yPDUeqXXqR52SFbMFgQZVo0BLxmop9EyMf5dUVdQ6MV/+
mKkqF7e3+dtxrT9N5/N3oqoHCNzIJ6KP5gEYKaNbCYsA8Wd3+PLQIOkjXlK44RVf
aH4dKsmSn/WwZ1+twEvT7m+DElObJufLN/UI+U+wxuUdX5r+4DNYXjtbD9J8cRn7
iQlhCtMxX38PyLnl/pPyIP/qv8RfKZ2cc6EZVgbmII3WV4gYymeaEK4BEG0jTqiR
PZG3GORJ2EoS3PlLOwVWXSQc5e87l5L62oVIHj1Owu5wlih2Xmc3TBakyq4oMhUd
ciEjbXtwpG2Q2+IKxmz236YY35la9pjupZA=
-----END CERTIFICATE-----
Generated at Wed May 13 00:14:02 2026 by rpki-client