Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e302e302f32342d3234203d3e2037353837.roa
File:                     3230322e3138302e302e302f32342d3234203d3e2037353837.roa (raw, json)
Hash identifier:          45WbWMcKeFCrPpVTXhHkMcLTBSuk6N5adzCUQo/XdPw=
Subject key identifier:   BE:2C:0D:4D:1B:FE:E0:95:6A:D0:D7:B6:5F:EF:40:48:76:F6:39:AD
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       63BEFDDE48FAA8888E230A76325CC172022B8C8A
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e302e302f32342d3234203d3e2037353837.roa
Signing time:             Sun 03 May 2026 02:55:45 +0000
ROA not before:           Sun 03 May 2026 02:50:45 +0000
ROA not after:            Sun 02 May 2027 02:55:45 +0000
asID:                     7587
IP address blocks:        202.180.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:be:fd:de:48:fa:a8:88:8e:23:0a:76:32:5c:c1:72:02:2b:8c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:45 2026 GMT
            Not After : May  2 02:55:45 2027 GMT
        Subject: CN=BE2C0D4D1BFEE0956AD0D7B65FEF404876F639AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:8c:f2:02:72:68:8c:48:ad:69:02:90:db:
                    d8:b2:4f:84:b0:02:59:9e:31:6f:c2:22:c3:bd:d9:
                    40:e2:57:d3:bb:28:29:af:4d:bf:d7:39:cb:5d:54:
                    96:41:06:56:f2:e5:f1:bb:d7:41:02:04:29:d7:0d:
                    98:10:b0:84:5a:ed:4e:cc:10:a6:36:64:44:27:32:
                    ea:3a:af:81:f0:d6:f7:01:b1:62:26:cc:56:1c:26:
                    66:36:e4:25:2d:ee:cd:5c:25:43:1b:be:00:7f:cf:
                    40:d1:a0:29:eb:8a:62:43:c4:51:b6:31:d0:77:07:
                    c0:89:fd:75:43:14:e1:52:6f:9f:c8:b3:d5:8c:36:
                    2c:04:43:a6:24:f4:4d:5b:3a:bc:98:30:96:78:da:
                    fa:a2:0a:22:17:d6:a0:cc:f1:90:30:4a:9d:41:63:
                    28:8c:ba:f5:5f:01:04:cf:3c:5c:cf:42:27:fb:3d:
                    17:eb:db:59:79:45:3e:02:f8:3e:99:0a:a0:86:38:
                    00:aa:c9:76:ff:14:18:6a:7e:26:ab:38:28:80:45:
                    63:24:ae:4e:af:5d:86:73:7d:75:fc:29:26:0d:2c:
                    c2:aa:d7:1b:e1:93:f8:89:cb:04:04:23:0f:f8:e3:
                    b1:29:a8:ca:0d:09:66:86:6d:40:83:0b:17:3f:3f:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2C:0D:4D:1B:FE:E0:95:6A:D0:D7:B6:5F:EF:40:48:76:F6:39:AD
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e302e302f32342d3234203d3e2037353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:5b:98:25:e0:23:cd:ec:81:72:6b:2b:b5:5c:2f:12:73:4c:
         f4:7d:13:95:5f:ec:f1:35:f9:26:b1:41:a3:99:1a:66:7c:f4:
         9a:e7:26:34:33:23:83:41:23:29:b5:7c:54:96:7d:cb:86:35:
         34:cf:f5:8e:3d:24:4f:5a:30:57:3b:9d:f8:41:c5:a3:ee:4b:
         0a:0c:48:ff:ab:b9:2a:ed:08:ea:d8:68:b0:c7:a7:47:e6:bf:
         bb:7b:2c:e9:e0:a7:45:bf:b6:e5:94:31:1a:92:87:a4:d5:3f:
         3a:fb:ac:99:b6:e5:22:f8:f6:66:18:cd:88:9e:69:b7:2e:28:
         f0:87:45:52:cb:9c:b1:0c:be:5f:6e:4a:e9:86:59:96:97:71:
         61:dc:59:12:9c:f8:96:01:e2:31:ea:2c:69:93:6b:b9:a5:62:
         8d:47:1f:cd:d7:4c:c1:1f:e8:db:bd:70:28:5f:e8:b8:67:0e:
         be:63:a6:ef:53:36:f6:fe:62:a0:35:a7:d9:f4:9c:5c:f7:91:
         bf:b2:20:a0:82:6c:dd:8d:2d:01:7a:4b:eb:5b:c5:48:c0:b3:
         93:70:94:d6:97:bd:1c:92:e2:da:53:e6:93:14:a3:d3:58:3e:
         e4:cb:53:c6:6d:d9:ea:99:89:e5:2f:0c:95:79:39:20:24:3b:
         86:55:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:19 2026 by rpki-client