Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36392e302f32342d3234203d3e203538383234.roa
File:                     3230322e34372e36392e302f32342d3234203d3e203538383234.roa (raw, json)
Hash identifier:          hckkq02XRYgJlnAzu/9EknR4UtscF0rzhrTYRy722CI=
Subject key identifier:   94:9E:BD:CF:4D:B9:86:9F:82:2A:EA:3C:C8:8E:2F:84:1E:32:B7:40
Certificate issuer:       /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial:       3013F84D88ED7D19DBB2CA8C9C84E99B87BC4D32
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36392e302f32342d3234203d3e203538383234.roa
Signing time:             Sun 03 May 2026 02:50:17 +0000
ROA not before:           Sun 03 May 2026 02:45:17 +0000
ROA not after:            Sun 02 May 2027 02:50:17 +0000
asID:                     58824
IP address blocks:        202.47.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
                          rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:13:f8:4d:88:ed:7d:19:db:b2:ca:8c:9c:84:e9:9b:87:bc:4d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
        Validity
            Not Before: May  3 02:45:17 2026 GMT
            Not After : May  2 02:50:17 2027 GMT
        Subject: CN=949EBDCF4DB9869F822AEA3CC88E2F841E32B740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:49:41:36:5f:05:05:fb:8c:ba:7f:f2:0e:
                    76:15:f3:51:81:59:0a:09:74:e2:f7:b8:a1:45:de:
                    4e:d8:75:dd:8d:0c:3d:43:6f:4a:0a:a7:6d:56:91:
                    0a:d9:31:91:25:45:35:a4:52:ec:65:ae:63:7a:a0:
                    b8:4c:d2:fe:84:3a:bb:a4:38:6c:d5:76:03:8d:94:
                    eb:54:f2:4c:d5:69:68:55:05:d8:71:85:34:f3:5b:
                    86:42:cf:eb:7b:f9:79:13:45:06:00:e0:91:57:a7:
                    87:49:c6:22:24:30:fe:4a:2a:31:49:c8:0b:54:b9:
                    6d:26:3f:15:96:3d:de:c3:db:51:0d:64:98:34:cb:
                    8c:ce:0a:5e:a0:18:33:9c:6e:e3:60:18:cd:a0:14:
                    f3:dc:63:81:54:d3:00:04:0e:6a:52:35:d2:0c:e3:
                    ff:6f:d8:a4:5a:0c:43:a4:85:3d:6a:44:9a:af:5f:
                    5f:54:97:27:9e:c2:12:7f:a4:f1:7a:7c:63:bb:0d:
                    dc:c3:f1:b9:89:e8:f4:b1:c3:b5:09:33:ca:b5:cc:
                    90:26:ed:23:43:19:bd:b1:cf:db:c2:61:21:1d:cf:
                    5f:c6:38:53:69:62:b2:25:57:f9:2a:55:aa:00:34:
                    09:e7:7f:31:6c:7f:c9:61:a5:12:7d:9b:bf:79:68:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9E:BD:CF:4D:B9:86:9F:82:2A:EA:3C:C8:8E:2F:84:1E:32:B7:40
            X509v3 Authority Key Identifier:
                keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36392e302f32342d3234203d3e203538383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:a5:aa:66:1a:65:f7:7b:b0:8c:01:7f:c8:cc:f6:85:13:16:
         d9:b6:00:aa:45:ba:63:bf:a5:7c:16:a1:0e:96:f4:9a:a1:3f:
         4d:34:57:78:95:1c:a7:42:da:f8:af:48:78:66:61:57:3c:98:
         83:f8:0b:80:ff:23:6f:84:de:34:6d:03:d6:76:01:17:41:97:
         fd:ab:04:7a:80:8f:16:07:d7:7d:19:9a:ee:30:0e:2a:c6:89:
         9b:06:5a:5c:ca:da:74:75:7b:01:f5:a9:48:83:a1:17:bb:71:
         3e:ad:14:8b:27:84:d8:dc:11:5a:4e:ee:0a:0b:d3:5c:92:14:
         b6:c5:63:17:65:c4:c2:32:86:57:ef:ae:5a:c3:86:b4:86:7f:
         e9:c0:24:d8:be:fa:3d:1d:78:ba:60:cc:17:ee:1e:30:78:96:
         20:88:17:7f:bb:2e:34:1c:8d:88:09:08:ef:47:fa:56:74:5f:
         5d:7e:6a:ec:0c:7a:10:46:e9:1f:d4:fb:12:f2:7e:39:dc:ee:
         a1:31:46:32:95:0a:19:26:70:b2:f6:08:c6:ad:5e:4d:34:50:
         74:92:92:f1:a3:f0:17:8e:18:ad:2a:ec:e6:99:8f:7e:b2:e9:
         43:09:f9:f7:50:e0:5d:1f:b5:95:d3:e6:55:42:b5:26:ef:43:
         19:fc:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:13 2026 by rpki-client