Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31362e302f32332d3234203d3e203233393530.roa
File:                     3230322e35312e31362e302f32332d3234203d3e203233393530.roa (raw, json)
Hash identifier:          NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=
Subject key identifier:   F5:2C:AB:3D:27:47:2A:3B:ED:E0:7B:7A:24:A2:32:72:EF:97:0D:2B
Certificate issuer:       /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515
Certificate serial:       56564F739359604E5259EF2BDB020492731DE3BF
Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31362e302f32332d3234203d3e203233393530.roa
Signing time:             Sun 03 May 2026 02:53:48 +0000
ROA not before:           Sun 03 May 2026 02:48:48 +0000
ROA not after:            Sun 02 May 2027 02:53:48 +0000
asID:                     23950
IP address blocks:        202.51.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl
                          rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:56:4f:73:93:59:60:4e:52:59:ef:2b:db:02:04:92:73:1d:e3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515
        Validity
            Not Before: May  3 02:48:48 2026 GMT
            Not After : May  2 02:53:48 2027 GMT
        Subject: CN=F52CAB3D27472A3BEDE07B7A24A23272EF970D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:10:13:d4:02:1a:f8:c7:1d:26:73:5a:07:
                    68:4a:71:e6:e3:e1:27:65:ba:2b:49:11:6b:74:6f:
                    07:59:e9:b5:95:c0:99:f3:1f:ab:9b:b5:3d:c4:07:
                    a2:40:fc:6b:4b:b1:86:4d:ba:f6:6c:88:12:1a:4f:
                    77:9a:2f:99:ef:0d:24:92:11:78:81:91:69:ab:54:
                    c1:55:83:38:7b:e4:57:6a:c7:f9:ba:b6:8a:56:82:
                    7d:4d:4d:1a:1b:d2:12:ab:44:f2:81:77:55:23:fb:
                    bd:af:5e:e2:b2:4e:d5:5d:d7:a8:cc:f4:e7:d1:45:
                    5f:91:f8:95:a4:52:3b:56:37:d9:13:c6:28:c2:62:
                    b0:8f:0a:3a:36:43:be:a7:e1:70:2f:14:c6:ac:39:
                    69:9c:6b:e4:75:88:37:7c:73:27:5c:31:3b:17:18:
                    ce:d0:f0:4b:4f:38:e1:0a:96:5f:dd:e2:35:11:5e:
                    14:f4:a3:c9:5c:77:af:29:cd:34:ad:d5:f1:38:fa:
                    61:86:42:76:c2:52:dc:28:c0:a2:66:7c:a0:96:89:
                    9c:21:8c:5e:46:66:22:0a:32:d3:5b:ea:8a:82:2b:
                    c1:e2:4e:6c:9f:32:9d:5b:37:e8:19:e0:3c:60:50:
                    68:d9:ad:0e:89:6e:34:95:71:6d:ea:d0:a2:60:a4:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2C:AB:3D:27:47:2A:3B:ED:E0:7B:7A:24:A2:32:72:EF:97:0D:2B
            X509v3 Authority Key Identifier:
                keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31362e302f32332d3234203d3e203233393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:90:b0:95:28:e4:0d:b9:a0:73:d8:94:d4:a7:ef:d2:bd:51:
         05:13:7f:03:a5:95:4a:9e:5e:fa:ff:8e:9a:d9:31:19:89:35:
         39:db:d7:49:b6:11:7a:7b:01:3c:81:ea:a6:6c:8c:0f:aa:a7:
         bc:9e:7a:0f:6d:79:b1:af:24:77:8b:14:0d:fb:80:41:3f:9f:
         59:79:35:cf:03:76:67:56:cf:e0:c0:12:28:85:0a:da:82:76:
         91:e2:26:64:68:73:db:38:37:2e:fd:2a:7d:6c:57:a3:5c:85:
         e2:cc:cc:98:7c:d7:75:b0:dd:ca:88:3c:b9:1d:e5:a7:72:6f:
         a8:a1:47:3b:5e:e6:6f:73:ec:5b:65:3b:58:24:10:d2:1b:41:
         51:06:99:97:b3:97:5b:6c:59:fe:ba:54:1e:e4:45:11:cf:2b:
         ef:3b:99:67:ff:b1:36:8e:a8:f6:44:45:4d:00:f6:24:8a:ce:
         46:9e:ac:d9:22:8b:06:35:3d:7c:48:b3:9d:fd:28:1b:fe:d2:
         fa:07:7c:10:a2:ad:4e:1a:46:05:eb:3b:a9:a5:25:9f:4c:9d:
         e8:99:13:38:e7:ad:dd:57:9b:11:7f:60:ee:b2:b2:df:24:f4:
         1a:c3:63:e9:a2:68:e0:3c:9a:07:62:5f:fa:4b:14:da:4f:9f:
         62:c6:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:39:55 2026 by rpki-client