Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e203435373036.roa
File:                     3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (raw, json)
Hash identifier:          PwwIV0M1bktSo20UeNkcLhDf5y3VQGfSd2Gx4evwdcY=
Subject key identifier:   2C:BA:1B:1C:AD:83:41:87:DC:26:20:5E:DA:5F:02:41:4F:55:23:D4
Certificate issuer:       /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial:       162E5FCE10625E42EA2967D600754CF9E5301AFA
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e203435373036.roa
Signing time:             Sun 03 May 2026 02:44:06 +0000
ROA not before:           Sun 03 May 2026 02:39:06 +0000
ROA not after:            Sun 02 May 2027 02:44:06 +0000
asID:                     45706
IP address blocks:        202.43.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
                          rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 06:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2e:5f:ce:10:62:5e:42:ea:29:67:d6:00:75:4c:f9:e5:30:1a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
        Validity
            Not Before: May  3 02:39:06 2026 GMT
            Not After : May  2 02:44:06 2027 GMT
        Subject: CN=2CBA1B1CAD834187DC26205EDA5F02414F5523D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:f7:c6:4a:0c:4a:c1:ba:0d:9c:55:4f:55:
                    03:46:72:dd:d7:5a:34:16:17:4f:4b:fe:61:f9:97:
                    10:14:e1:60:86:c0:b7:21:35:80:d2:91:a5:b6:86:
                    20:b8:a6:76:4a:94:df:b7:29:68:97:9c:0c:7a:bc:
                    2b:77:2a:39:85:14:a9:0f:1c:70:20:d6:10:98:9f:
                    97:ad:23:31:9f:ae:8a:ee:ed:87:c4:55:16:0a:46:
                    cf:69:37:18:e9:df:bc:74:81:05:b7:88:45:92:d8:
                    d7:cd:12:17:ea:0b:80:41:85:20:00:2b:21:9c:4e:
                    3b:90:1f:1f:9f:4d:e3:85:b7:5b:9e:bd:f6:53:1a:
                    86:85:45:c2:b7:fb:3c:41:1e:34:b4:40:68:7b:70:
                    d8:80:f8:fb:d4:14:dc:6c:2a:b9:47:ff:3f:a1:43:
                    cb:cc:8b:a8:84:db:52:26:6a:3a:62:4f:68:69:e6:
                    de:4e:9d:ff:58:b4:ca:de:35:76:0b:92:34:a1:5e:
                    54:85:3a:fd:07:83:0c:dd:05:6c:be:9b:80:66:5a:
                    c1:c9:9a:e2:c3:de:ca:1b:8d:e4:1f:a7:5d:04:23:
                    2b:d6:8f:b1:71:05:06:a2:d5:f8:59:bd:57:11:1a:
                    c2:a4:cc:d7:d4:28:71:8d:72:ff:e8:21:c5:9c:d2:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BA:1B:1C:AD:83:41:87:DC:26:20:5E:DA:5F:02:41:4F:55:23:D4
            X509v3 Authority Key Identifier:
                keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e203435373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:1f:f6:87:80:c0:d5:a2:ac:82:9d:80:56:bc:30:5d:e8:50:
         5b:9f:8d:f5:85:93:07:44:30:c7:12:9b:39:8e:43:56:8a:36:
         9e:da:a6:64:38:8d:c7:30:94:fa:ac:e1:54:57:2a:30:12:50:
         38:59:86:be:9c:80:39:d2:b0:41:72:09:10:e0:c4:d7:58:20:
         fe:9a:37:bd:bb:cc:a4:be:67:b0:85:15:51:d6:53:3e:a1:ca:
         b6:0e:6c:ed:70:13:7a:81:bd:1f:9c:3e:9c:db:31:b4:5d:04:
         6b:8f:46:4a:ac:6f:19:05:81:35:f8:ef:23:db:0c:5c:01:f8:
         68:5e:9f:b4:d7:52:b3:a2:7c:b1:ef:38:a6:e9:14:d8:23:42:
         81:43:91:c1:ce:b2:f9:59:04:9a:3a:96:09:8a:86:fb:99:8b:
         db:9b:49:f8:43:7f:61:b3:65:1e:f6:03:53:3d:39:b8:db:67:
         6e:c9:46:17:83:35:72:54:d0:fa:3e:77:72:7b:a1:61:62:df:
         c6:7b:2f:10:08:58:8a:ad:61:5d:39:43:57:47:d5:57:10:a1:
         a9:11:50:08:65:26:61:7b:b6:65:01:9a:d7:bd:c3:ac:cd:26:
         cb:1c:b1:0c:bb:e8:25:48:9c:3e:32:f4:3e:e9:59:3b:73:9f:
         58:8c:9f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:50:02 2026 by rpki-client