Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31312e302f32342d3234203d3e203338373539.roa
File:                     3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier:          bkuXcKf7rKcFVgTYTYwC4lX5McMr7dzcQ9LhU0QIXCA=
Subject key identifier:   F9:44:C2:19:E7:27:F2:E0:92:23:8B:08:96:C9:27:2E:3F:D3:96:7E
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       0B997F55F045AE7B1471BFB634538DBE37A3F46B
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31312e302f32342d3234203d3e203338373539.roa
Signing time:             Sun 03 May 2026 02:55:48 +0000
ROA not before:           Sun 03 May 2026 02:50:48 +0000
ROA not after:            Sun 02 May 2027 02:55:48 +0000
asID:                     38759
IP address blocks:        202.180.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:99:7f:55:f0:45:ae:7b:14:71:bf:b6:34:53:8d:be:37:a3:f4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:48 2026 GMT
            Not After : May  2 02:55:48 2027 GMT
        Subject: CN=F944C219E727F2E092238B0896C9272E3FD3967E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:8a:6e:a1:41:28:b8:ee:f5:5b:4f:82:45:
                    c2:4d:35:09:fb:f8:a8:68:8b:88:cc:7b:d5:c3:94:
                    3c:7d:b4:55:e6:1d:d0:24:e8:c8:cf:03:73:ad:21:
                    93:40:5b:16:57:06:d8:32:88:cf:51:e6:e4:06:0d:
                    d1:ed:ed:b8:67:e6:5e:8a:cc:0c:c6:39:2e:f6:eb:
                    15:81:3f:4a:ba:f2:e0:be:54:7c:07:68:da:22:2a:
                    85:cd:0c:43:00:21:bb:ea:61:09:f5:1b:b1:7d:62:
                    94:06:d6:af:40:a3:2d:01:c8:5c:c3:4b:f5:e7:df:
                    23:fb:91:db:9f:72:59:44:5b:80:5f:7a:a8:52:5c:
                    c3:96:77:a7:92:e9:a6:87:ad:aa:5d:be:b1:98:e8:
                    d0:7c:16:13:b0:5c:37:40:db:09:9d:11:4e:ff:26:
                    76:e7:a4:da:f3:20:dc:d9:88:28:99:6e:60:59:d4:
                    70:29:6e:60:6c:ee:d6:89:ce:47:d2:af:7e:25:43:
                    b9:94:1b:00:be:99:c3:98:86:63:e7:e1:62:a9:e1:
                    1f:2a:d6:88:4a:01:2e:13:a6:5f:0d:24:92:03:95:
                    70:36:dd:82:a5:ad:9b:df:a7:75:15:58:9b:ce:c3:
                    82:f6:81:74:68:f5:53:2f:41:0d:83:f0:53:9d:c7:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:44:C2:19:E7:27:F2:E0:92:23:8B:08:96:C9:27:2E:3F:D3:96:7E
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31312e302f32342d3234203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ee:d8:43:25:a7:fc:d9:55:3c:75:b8:1a:06:76:d7:3c:63:
         a6:b4:a2:52:34:59:b8:e3:b4:b4:5d:61:7b:c1:03:7f:27:93:
         f7:f0:11:08:c1:7b:1c:d7:7f:e5:a1:4f:d4:da:e2:52:20:48:
         e7:d8:f7:50:71:8c:f6:b6:44:01:7f:71:1d:e0:42:46:fc:3a:
         9a:e7:b6:46:85:09:6a:de:b0:86:2b:33:23:5f:e6:01:68:01:
         a8:9f:a4:c2:d1:30:4c:e6:74:74:f0:fd:0e:b1:1f:be:63:96:
         ab:b1:f8:4e:41:dc:3f:b4:9c:5f:17:b8:70:b6:b8:36:fc:b4:
         d7:d9:98:b4:5d:5f:f9:17:81:47:dd:66:7f:0e:9d:7b:c0:9f:
         99:d9:d7:46:f1:33:1b:2c:75:e0:6e:1a:c9:98:05:6b:9b:0d:
         b7:55:0d:2b:b8:f2:d3:85:dc:97:61:43:dc:0d:d4:57:d2:a2:
         74:0d:84:a9:cb:85:56:36:94:75:1a:68:50:66:ff:69:80:6c:
         24:7a:5d:c9:b1:23:6d:db:2b:72:6a:c2:12:80:60:47:5a:e9:
         95:a0:26:e2:b4:40:83:a6:fc:af:93:1b:89:27:50:cf:2e:ea:
         b0:2e:7b:1d:61:c9:f8:05:02:2f:3b:d0:40:c3:f8:97:44:3e:
         18:e4:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:09 2026 by rpki-client