Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31392e302f32342d3234203d3e203233393530.roa
File:                     3230322e35312e31392e302f32342d3234203d3e203233393530.roa (raw, json)
Hash identifier:          kEQuuE3MZPluiYnypOmYBPYLGkYCAstrSIg304qTUMU=
Subject key identifier:   EA:B0:D8:4B:77:EF:6B:09:B6:06:62:F6:6C:9E:30:74:C0:40:4E:F6
Certificate issuer:       /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515
Certificate serial:       69E4781751806241D7B8B5A36EF253D8AE2A42D3
Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31392e302f32342d3234203d3e203233393530.roa
Signing time:             Sun 03 May 2026 02:53:48 +0000
ROA not before:           Sun 03 May 2026 02:48:48 +0000
ROA not after:            Sun 02 May 2027 02:53:48 +0000
asID:                     23950
IP address blocks:        202.51.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl
                          rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e4:78:17:51:80:62:41:d7:b8:b5:a3:6e:f2:53:d8:ae:2a:42:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515
        Validity
            Not Before: May  3 02:48:48 2026 GMT
            Not After : May  2 02:53:48 2027 GMT
        Subject: CN=EAB0D84B77EF6B09B60662F66C9E3074C0404EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:68:a8:02:0b:b3:45:77:ce:c8:f0:9c:31:
                    0b:e6:b8:07:48:e2:61:da:35:46:3b:f1:d3:a4:11:
                    58:d6:47:36:19:c6:b2:21:fe:49:3b:bb:a5:93:7b:
                    06:ab:cd:cd:b1:42:9d:fc:b3:2a:cf:76:25:2c:e3:
                    3c:50:1b:5b:0d:55:c4:74:96:11:56:68:98:9b:06:
                    bb:33:34:97:3d:db:ba:44:32:c8:59:5e:bf:64:21:
                    3b:79:9d:14:61:4b:fc:72:28:f3:6f:0a:d8:b4:c3:
                    b4:29:38:79:76:49:bb:82:03:c0:2c:45:85:0e:09:
                    7e:13:28:db:4f:98:50:2b:75:e6:56:91:d8:05:b2:
                    b2:93:f3:2b:7b:70:54:76:88:91:73:21:b1:fd:d4:
                    56:7d:3f:ab:5a:8a:8b:6e:63:03:97:28:96:eb:7f:
                    19:e9:4b:00:5e:6f:f4:b0:8c:fc:75:3a:fb:ab:de:
                    dd:43:1e:b2:6a:83:5c:78:7b:db:7b:ed:f4:1d:3b:
                    d4:00:4a:05:fc:46:4f:84:fc:3a:2b:bd:3e:31:71:
                    ec:35:9c:a5:5c:44:31:65:3e:cb:ab:ac:da:ca:3d:
                    97:be:f6:f7:1d:ac:e1:a3:d6:6e:4c:b9:c7:9d:a8:
                    63:d5:07:50:2f:30:d1:bc:6d:2b:1a:5b:3c:92:98:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B0:D8:4B:77:EF:6B:09:B6:06:62:F6:6C:9E:30:74:C0:40:4E:F6
            X509v3 Authority Key Identifier:
                keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31392e302f32342d3234203d3e203233393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3a:3e:10:2b:df:07:14:51:ae:65:b7:3e:80:0f:73:a7:55:
         18:ac:57:c8:02:0b:b2:9c:53:d6:6d:4d:85:ed:2e:cb:75:20:
         60:8a:e5:f2:9a:74:ab:af:c4:ee:57:7e:d5:9e:36:82:19:8f:
         32:67:25:e2:84:70:0a:af:5f:a4:e8:87:6f:06:4b:68:bd:2c:
         3c:1f:b1:ea:82:81:80:bd:73:ff:69:bc:69:d2:7d:c2:c1:c4:
         da:a8:eb:eb:08:20:35:df:8a:3b:09:08:11:3a:16:e7:2d:4f:
         0c:0c:bb:6a:c6:38:ac:db:51:45:19:cd:13:79:38:04:02:f9:
         95:00:06:1e:b5:f5:e9:ee:5b:e4:7b:a0:78:5c:95:da:13:f1:
         f4:a2:85:d5:43:f1:aa:a6:1f:81:f3:2e:7d:bf:c4:6e:b0:80:
         d8:b3:4f:66:46:2c:71:50:7e:80:ac:a3:2e:45:a2:26:49:f0:
         ce:95:8d:5d:33:59:c9:a3:72:40:5f:29:0e:3d:80:04:50:be:
         3b:51:a4:3a:10:3a:b1:08:d0:79:d1:7f:7c:46:0f:2a:e8:01:
         6f:98:2e:fb:78:50:3f:29:67:2c:5d:ab:f8:07:ec:db:ad:f9:
         ac:c6:66:e4:2d:3b:2a:bd:91:1f:74:c9:32:a2:1a:a9:d1:67:
         e0:c3:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:01 2026 by rpki-client