Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e312e302f32342d3234203d3e2037353837.roa
File:                     3230322e3138302e312e302f32342d3234203d3e2037353837.roa (raw, json)
Hash identifier:          gPbGzeqFwHYLDGzFogRo8W1Ry/yCp4EwuhMQI23YMLc=
Subject key identifier:   E1:3A:7B:00:6A:CB:9B:AD:71:3A:47:CC:A6:BF:29:26:F6:E8:00:62
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       1EAC4F028D1BAF046C5E037046F7CBDFF0269C73
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e312e302f32342d3234203d3e2037353837.roa
Signing time:             Sun 03 May 2026 02:55:44 +0000
ROA not before:           Sun 03 May 2026 02:50:44 +0000
ROA not after:            Sun 02 May 2027 02:55:44 +0000
asID:                     7587
IP address blocks:        202.180.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ac:4f:02:8d:1b:af:04:6c:5e:03:70:46:f7:cb:df:f0:26:9c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:44 2026 GMT
            Not After : May  2 02:55:44 2027 GMT
        Subject: CN=E13A7B006ACB9BAD713A47CCA6BF2926F6E80062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:3f:79:b7:7d:36:03:75:ae:ca:8a:79:2d:
                    89:92:47:b9:c3:fb:51:f9:15:53:20:1c:ba:19:38:
                    7e:f1:b3:44:a6:9e:51:a1:96:a2:23:38:0a:d0:f1:
                    44:56:f7:e0:7a:b9:87:2d:db:6c:47:05:47:43:91:
                    f0:32:3f:a2:0e:fb:c4:37:ca:6f:67:c5:c7:7f:12:
                    7f:c1:8c:bf:5c:5b:58:62:5f:75:06:54:72:10:68:
                    3b:44:a8:6c:20:bb:41:bf:64:b7:4a:00:88:eb:e2:
                    6d:4a:93:fb:f2:64:0b:90:2a:c9:0b:25:37:ee:79:
                    82:c2:48:ee:b5:5d:32:bc:cd:11:65:bf:88:0a:02:
                    95:44:b3:dc:0f:68:da:ee:73:58:28:c2:23:96:84:
                    e3:da:95:96:3c:d7:fd:50:45:53:f9:74:73:6d:12:
                    e6:2e:30:80:fd:5c:07:27:c9:47:9a:6d:f2:61:1a:
                    a9:05:78:2b:f4:98:fe:f8:55:d0:34:8f:da:d4:14:
                    d3:d8:bb:b2:e6:7d:11:ad:39:08:27:95:5b:99:20:
                    d6:ec:0d:e8:6c:02:7e:3c:78:62:97:74:70:b8:73:
                    d3:26:d6:39:4a:05:f8:c3:98:61:4a:b1:1a:87:80:
                    ee:46:e5:d5:bb:aa:d0:2c:bd:2a:88:a1:65:d2:6e:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3A:7B:00:6A:CB:9B:AD:71:3A:47:CC:A6:BF:29:26:F6:E8:00:62
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e312e302f32342d3234203d3e2037353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:86:9d:b7:d2:ae:5b:71:8c:89:8c:78:76:b0:54:9c:31:e6:
         65:9b:ea:93:5c:a5:58:62:a8:c9:09:c5:8e:17:62:c5:e6:4a:
         7b:08:90:a8:1a:84:cb:2f:29:63:f9:fe:b4:ac:5f:f3:63:09:
         78:1a:8f:e8:1d:e1:63:57:6d:a8:3f:91:14:60:80:47:be:cd:
         e2:10:a1:bd:89:18:bf:43:44:36:5a:b7:69:64:fb:fe:3c:f4:
         6f:c3:75:20:f9:d6:19:40:f7:56:ed:f4:7d:86:f1:3a:2c:2c:
         12:c2:88:56:1d:9d:37:07:a7:6c:cd:aa:f4:07:1f:12:e8:d5:
         a4:01:9a:8b:09:1d:5e:cc:d2:f2:50:a8:c0:23:16:92:09:4a:
         93:04:6a:49:ad:d8:ea:38:21:f0:73:f6:7e:56:54:9f:4d:03:
         b8:a0:37:f5:aa:15:28:dd:71:c8:3f:99:ae:9a:36:66:d4:6f:
         80:46:cc:37:74:14:95:16:ba:a6:fb:0a:94:fa:5d:fe:9c:5f:
         f7:2b:1c:63:4e:82:e2:d7:fc:c5:8e:0f:91:20:31:99:5f:05:
         ea:bd:a7:fd:3a:cf:37:dd:ed:c8:1b:11:5f:5d:cc:aa:10:a1:
         78:54:d7:51:2b:1b:2c:4c:9c:b8:8c:40:d7:e0:f1:0c:b0:09:
         2b:d9:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:19 2026 by rpki-client