Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31322e302f32342d3234203d3e203338373539.roa
File:                     3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier:          tlnA8054TEaiL5K5Or4iY0Fk6myjyN9Bm0Btn/pblxM=
Subject key identifier:   00:4C:E2:8C:FE:A4:51:FB:1A:55:9D:50:51:C6:A4:F8:6D:82:43:C6
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       1A7B25694177CF3487F5638EC9A54181868E507E
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31322e302f32342d3234203d3e203338373539.roa
Signing time:             Sun 03 May 2026 02:55:44 +0000
ROA not before:           Sun 03 May 2026 02:50:44 +0000
ROA not after:            Sun 02 May 2027 02:55:44 +0000
asID:                     38759
IP address blocks:        202.180.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7b:25:69:41:77:cf:34:87:f5:63:8e:c9:a5:41:81:86:8e:50:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:44 2026 GMT
            Not After : May  2 02:55:44 2027 GMT
        Subject: CN=004CE28CFEA451FB1A559D5051C6A4F86D8243C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:75:38:b7:d0:83:74:40:6a:dc:d0:e4:9d:54:
                    97:ee:6f:f6:d9:39:9e:91:1b:59:cd:af:65:d2:db:
                    79:95:42:74:cd:31:58:8e:ee:09:b0:5a:bc:6a:e3:
                    39:b2:09:a3:b5:17:d4:82:1a:45:70:87:98:78:59:
                    6f:68:94:77:29:16:cd:e1:7d:2c:b7:97:a8:8a:31:
                    c4:de:02:d8:b4:f3:f3:a3:23:d1:33:0c:56:94:28:
                    78:85:fb:e3:70:13:38:42:57:d6:90:59:2b:a5:ee:
                    35:cf:4b:64:33:e7:4c:18:b4:7c:cc:86:9b:eb:96:
                    03:99:b6:73:25:e7:5b:21:1d:1b:6b:5f:c6:95:73:
                    6d:e7:0f:b7:61:61:fe:ce:fe:12:4c:ca:2a:58:3c:
                    b6:be:ed:db:72:d6:88:8f:a8:fc:01:9b:e2:75:e7:
                    19:3d:5e:54:9e:16:cc:1f:27:15:d9:a5:5c:01:6c:
                    5d:16:f1:35:e8:7a:94:e8:52:21:49:72:d1:93:af:
                    6e:54:a5:35:31:ce:70:54:8e:32:fe:5d:f4:55:cb:
                    b3:e2:7e:1c:c6:04:5b:50:6e:0e:9d:ab:79:04:0d:
                    12:e4:1d:dc:69:e8:0a:d8:39:82:10:4e:15:75:12:
                    f0:f8:b3:87:05:32:44:b3:39:50:9d:64:7c:b0:ef:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4C:E2:8C:FE:A4:51:FB:1A:55:9D:50:51:C6:A4:F8:6D:82:43:C6
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31322e302f32342d3234203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:1d:91:17:95:ed:38:90:39:5b:da:da:36:b3:9e:09:e2:a0:
         7a:2a:45:d9:04:b4:57:f7:76:c8:95:10:ee:75:ed:88:19:06:
         a7:b7:13:af:50:75:97:aa:4f:ad:db:cd:1a:72:dd:8d:83:21:
         75:05:e2:02:fb:6b:1c:04:f5:62:fc:ec:ca:89:29:88:cd:ff:
         0e:ce:1c:43:68:91:25:a5:5d:a5:d4:c4:91:00:ef:23:b5:e5:
         f7:58:29:14:c4:d1:cd:33:48:be:3d:c2:fc:b3:d1:1e:c9:a8:
         07:94:f0:ca:1d:cf:9e:d9:3c:7d:31:11:52:9f:4c:df:84:8e:
         87:bd:a3:8d:9b:5f:ae:59:47:54:dd:3b:3d:f7:83:ae:c3:82:
         cb:fc:af:64:0f:2b:43:26:70:33:f5:1f:93:34:b3:81:53:09:
         bb:96:9f:10:67:af:63:5b:85:b7:77:8f:a3:d4:ec:15:18:b9:
         70:6a:d6:70:58:a5:6f:53:11:c9:14:f8:2c:6b:ed:3e:cb:7e:
         94:2b:ef:f9:4d:a9:e5:e5:71:d9:71:b8:5b:78:fb:91:a5:28:
         93:5f:07:91:6d:12:85:c4:9d:71:70:07:04:9f:8b:92:d7:1c:
         11:52:f3:48:f3:fc:9c:a7:9d:3a:c9:e8:d6:d8:8b:00:af:2f:
         50:7e:25:ed
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGnslaUF3zzSH9WOOyaVBgYaOUH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIwNjJBMEE4QTcwOEY2NTQ2MDZBMjUyRUZCRDMxRjgx
RDczODMxNTAeFw0yNjA1MDMwMjUwNDRaFw0yNzA1MDIwMjU1NDRaMDMxMTAvBgNV
BAMTKDAwNENFMjhDRkVBNDUxRkIxQTU1OUQ1MDUxQzZBNEY4NkQ4MjQzQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmdTi30IN0QGrc0OSdVJfub/bZ
OZ6RG1nNr2XS23mVQnTNMViO7gmwWrxq4zmyCaO1F9SCGkVwh5h4WW9olHcpFs3h
fSy3l6iKMcTeAti08/OjI9EzDFaUKHiF++NwEzhCV9aQWSul7jXPS2Qz50wYtHzM
hpvrlgOZtnMl51shHRtrX8aVc23nD7dhYf7O/hJMyipYPLa+7dty1oiPqPwBm+J1
5xk9XlSeFswfJxXZpVwBbF0W8TXoepToUiFJctGTr25UpTUxznBUjjL+XfRVy7Pi
fhzGBFtQbg6dq3kEDRLkHdxp6ArYOYIQThV1EvD4s4cFMkSzOVCdZHyw74zvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUAEzijP6kUfsaVZ1QUcak+G2CQ8YwHwYDVR0j
BBgwFoAUAgYqCopwj2VGBqJS770x+B1zgxUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTEyZjIyOGMtZGYyMC00NzI4LTlmOTYtOGZhYTEzNDAwMTdhLzAvMDIwNjJBMEE4
QTcwOEY2NTQ2MDZBMjUyRUZCRDMxRjgxRDczODMxNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMjA2MkEwQThBNzA4RjY1NDYwNkEyNTJFRkJEMzFGODFENzM4
MzE1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ExMmYyMjhjLWRmMjAtNDcyOC05
Zjk2LThmYWExMzQwMDE3YS8wLzMyMzAzMjJlMzEzODMwMmUzMTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMq0DDANBgkqhkiG
9w0BAQsFAAOCAQEASR2RF5XtOJA5W9raNrOeCeKgeipF2QS0V/d2yJUQ7nXtiBkG
p7cTr1B1l6pPrdvNGnLdjYMhdQXiAvtrHAT1YvzsyokpiM3/Ds4cQ2iRJaVdpdTE
kQDvI7Xl91gpFMTRzTNIvj3C/LPRHsmoB5Twyh3Pntk8fTERUp9M34SOh72jjZtf
rllHVN07PfeDrsOCy/yvZA8rQyZwM/UfkzSzgVMJu5afEGevY1uFt3ePo9TsFRi5
cGrWcFilb1MRyRT4LGvtPst+lCvv+U2p5eVx2XG4W3j7kaUok18HkW0ShcSdcXAH
BJ+LktccEVLzSPP8nKedOsno1tiLAK8vUH4l7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:04 2026 by rpki-client