Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa
File:                     3230322e34372e37362e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier:          5gPZbP/w4/MmG8I5sUQS4naw/B65ACqlsUQX0W56RzA=
Subject key identifier:   94:47:76:38:2F:8D:D6:AC:AC:E4:92:83:73:60:8A:B2:C3:D2:24:07
Certificate issuer:       /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial:       05893C6FEBD27A241AA9D096A194EBC2D6BBE3CD
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa
Signing time:             Sun 03 May 2026 02:50:22 +0000
ROA not before:           Sun 03 May 2026 02:45:22 +0000
ROA not after:            Sun 02 May 2027 02:50:22 +0000
asID:                     17671
IP address blocks:        202.47.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
                          rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:89:3c:6f:eb:d2:7a:24:1a:a9:d0:96:a1:94:eb:c2:d6:bb:e3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
        Validity
            Not Before: May  3 02:45:22 2026 GMT
            Not After : May  2 02:50:22 2027 GMT
        Subject: CN=944776382F8DD6ACACE4928373608AB2C3D22407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:64:f9:4f:d9:7f:a4:00:fe:94:bf:9f:a1:
                    7b:7e:68:1c:93:26:76:aa:45:01:f5:2f:4d:69:43:
                    a8:d9:86:7b:58:e5:a7:fd:2d:68:26:e8:7d:c9:a6:
                    62:ad:80:b8:08:37:d6:23:d5:97:c8:9f:0a:0a:33:
                    e5:24:ec:8f:c8:e7:a9:05:d0:f9:eb:99:4d:2c:40:
                    d5:66:d4:45:95:81:ba:d7:77:be:c6:0d:72:cb:53:
                    1b:21:99:5e:b1:c8:37:1b:e9:7b:b5:6b:e2:0e:13:
                    2c:cf:14:ba:f5:33:e3:d3:0f:4a:1e:6a:ca:9f:aa:
                    9c:5c:70:30:94:83:b7:d6:76:f2:64:a2:31:a5:e1:
                    ae:e6:ab:e7:65:97:4b:8f:e7:76:2d:da:68:70:a9:
                    bb:ca:e0:16:3b:ff:5c:bf:f3:ba:10:05:48:cc:eb:
                    75:82:30:99:59:18:4b:c7:4a:8a:67:04:2c:e2:96:
                    38:95:e5:44:f1:35:47:85:91:30:20:24:79:c7:a4:
                    50:54:9b:58:f7:77:f2:c5:32:47:d3:5b:fc:d8:bd:
                    b0:ee:6b:f9:49:c1:fa:47:61:30:a2:d0:de:c8:a3:
                    f0:ce:29:32:4b:75:4f:f2:2c:09:e4:22:07:4d:b6:
                    16:9d:f8:d3:2f:52:1f:9c:4d:81:0a:2e:c1:03:0e:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:47:76:38:2F:8D:D6:AC:AC:E4:92:83:73:60:8A:B2:C3:D2:24:07
            X509v3 Authority Key Identifier:
                keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:2d:90:be:00:92:55:81:80:4c:7e:f9:00:e2:56:0a:1a:83:
         81:1c:ca:64:93:e0:e9:26:57:87:b6:df:75:7f:9c:d5:87:a8:
         c2:76:cf:07:78:5a:a8:aa:9a:50:3f:1b:fd:f1:18:9a:fd:6c:
         6b:10:3d:b8:41:76:02:68:01:53:b0:f3:07:57:3f:b8:35:01:
         f2:9f:51:55:0b:57:2e:ce:7e:de:98:37:1e:1a:af:ed:f2:48:
         a9:c3:72:db:f8:82:8f:62:f3:ac:b0:a1:f3:3b:1c:a4:86:bb:
         c7:d5:17:3c:ad:96:46:18:b2:de:0d:a4:0f:9a:8e:a5:4f:b6:
         d9:be:d9:6a:8a:00:0b:2f:48:a2:72:b9:6a:66:39:c3:59:56:
         09:fd:41:48:42:fc:68:91:01:99:1a:93:40:88:ad:e1:62:44:
         5c:99:bc:7b:15:c8:6b:ae:a9:cc:50:87:9b:67:58:b0:9a:f4:
         f5:e4:0e:b4:f7:c3:0b:8f:64:30:1b:9c:62:db:08:49:ee:61:
         43:a8:1f:16:54:67:6c:ef:d7:df:44:ab:4e:86:da:cc:2d:84:
         92:be:d1:86:8b:6f:42:5a:95:ca:3e:64:bd:16:df:f6:8e:f5:
         fe:f8:c2:dd:1e:f0:c0:68:cc:60:fe:a4:e2:c5:47:71:b9:ab:
         7c:05:2f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:15 2026 by rpki-client