Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230322e36322e31322e302f32322d3234203d3e203234353233.roa
File:                     3230322e36322e31322e302f32322d3234203d3e203234353233.roa (raw, json)
Hash identifier:          XN1DjcwbwL8FbCvRk5cbd36XlAVTMcArigukWUmV4y4=
Subject key identifier:   19:D5:AC:E2:A7:76:6A:89:DF:BE:34:2F:05:2D:C8:F1:E0:F9:D0:85
Certificate issuer:       /CN=9541F7A7495AA8918A6FE15016CB396EF2733922
Certificate serial:       167A02ECA4F70EAFA70699921BE3C3B1B3162F4E
Authority key identifier: 95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230322e36322e31322e302f32322d3234203d3e203234353233.roa
Signing time:             Sun 03 May 2026 02:49:52 +0000
ROA not before:           Sun 03 May 2026 02:44:52 +0000
ROA not after:            Sun 02 May 2027 02:49:52 +0000
asID:                     24523
IP address blocks:        202.62.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl
                          rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7a:02:ec:a4:f7:0e:af:a7:06:99:92:1b:e3:c3:b1:b3:16:2f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9541F7A7495AA8918A6FE15016CB396EF2733922
        Validity
            Not Before: May  3 02:44:52 2026 GMT
            Not After : May  2 02:49:52 2027 GMT
        Subject: CN=19D5ACE2A7766A89DFBE342F052DC8F1E0F9D085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:14:d5:91:4a:a7:90:70:20:87:e9:e3:a6:
                    0c:d8:fd:b0:4e:8c:53:7c:f6:63:6d:ec:9c:13:c1:
                    73:21:ae:d6:f3:d0:95:1d:90:16:88:b8:d8:a3:ce:
                    44:68:ba:a7:5f:21:f6:fc:c9:02:9a:fa:52:b6:17:
                    23:0e:c3:67:39:4b:c5:6e:99:9e:32:96:5c:3b:37:
                    0e:55:05:ad:bb:af:8f:fc:38:09:29:e2:fc:da:35:
                    64:a2:1f:e6:b3:df:07:7a:f7:b6:23:ee:2a:ce:9f:
                    a5:66:cf:ac:21:2e:8f:a8:97:be:7a:14:fe:00:ca:
                    91:dc:91:c4:d8:bd:a4:8c:57:fd:9e:9a:ab:42:18:
                    9d:15:34:63:3a:ae:57:f0:f4:9a:fe:e3:5e:8d:72:
                    4f:ce:29:f4:6b:6d:19:47:85:9c:73:60:5c:cc:1f:
                    1d:83:59:08:fc:68:24:27:b4:d9:05:85:42:a9:1f:
                    71:1c:27:36:df:34:2c:f7:f6:f0:ef:7f:f2:8c:ff:
                    47:7e:01:7c:ec:7a:9e:de:01:95:d6:b2:0d:59:96:
                    12:6b:96:0b:d7:d6:a5:e2:84:9d:d7:8a:dd:6d:e1:
                    2b:81:65:02:d7:65:34:1a:54:a1:e8:bc:5a:d8:e7:
                    c1:55:ea:24:98:60:31:c1:33:eb:aa:03:2a:14:8c:
                    4d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D5:AC:E2:A7:76:6A:89:DF:BE:34:2F:05:2D:C8:F1:E0:F9:D0:85
            X509v3 Authority Key Identifier:
                keyid:95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230322e36322e31322e302f32322d3234203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:48:9d:b2:39:9d:c3:25:8a:68:46:0d:d4:15:1c:5e:fc:2e:
         2f:be:a5:09:98:fc:b5:88:ba:95:cf:49:79:10:79:08:f5:e0:
         df:b5:35:39:23:35:95:be:62:5f:35:27:fe:72:db:ee:41:1b:
         85:ae:cb:c5:e5:52:7c:53:79:ec:2b:f1:e3:f5:fa:0e:9e:bc:
         02:9e:aa:6c:4e:e7:b8:ee:be:4c:b1:04:78:ed:d3:f5:d1:8b:
         8d:31:b3:cd:41:5a:8c:0d:24:3e:a8:53:88:1a:57:e2:b3:16:
         aa:f0:cc:81:86:0d:2e:ab:86:d1:f9:7c:a7:91:1e:d3:86:65:
         e4:12:64:1f:08:f1:a9:5d:b7:73:ef:9b:5b:46:d3:19:9a:a1:
         6d:f0:7f:bd:a7:49:e5:86:69:e4:f0:c9:40:f8:3f:0a:ce:71:
         26:a3:89:25:34:37:95:0d:54:59:a3:e1:9a:b1:8c:23:82:3e:
         a8:b7:b1:a0:b5:e7:ec:f5:c2:73:64:dc:ab:96:ce:d9:14:50:
         79:fa:49:78:82:6c:fc:2e:1b:0c:39:4f:4b:6c:4e:1f:ef:64:
         1f:d3:bd:64:c9:bc:68:62:4b:73:be:a9:da:6f:2d:80:f4:2a:
         16:ef:71:f3:3f:9a:2c:dd:c2:72:7b:3b:33:b5:10:e2:04:8b:
         be:3d:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:04 2026 by rpki-client