Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31332e302f32342d3234203d3e203338373539.roa
File:                     3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier:          clTahx455UxlkJYNDCM/wq9LWiMSO2WARDzZ8Sig5Fk=
Subject key identifier:   DA:56:2B:16:00:29:E6:B5:56:29:FE:C1:0F:70:89:89:0D:77:17:48
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       010952137A428A5E9E3638F088F2BC6EBDCB150A
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31332e302f32342d3234203d3e203338373539.roa
Signing time:             Sun 03 May 2026 02:55:50 +0000
ROA not before:           Sun 03 May 2026 02:50:50 +0000
ROA not after:            Sun 02 May 2027 02:55:50 +0000
asID:                     38759
IP address blocks:        202.180.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:09:52:13:7a:42:8a:5e:9e:36:38:f0:88:f2:bc:6e:bd:cb:15:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:50 2026 GMT
            Not After : May  2 02:55:50 2027 GMT
        Subject: CN=DA562B160029E6B55629FEC10F7089890D771748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:ea:61:1b:31:0e:99:6e:b0:2f:29:9f:39:
                    80:9d:15:4c:11:37:f5:80:69:0f:a8:59:ec:59:3b:
                    eb:73:f8:d7:87:6a:6b:f2:c6:54:f7:c6:60:b4:c1:
                    b6:c4:4d:3d:c4:60:f3:97:f2:e5:ff:cd:53:88:f2:
                    ab:33:1c:ad:6e:d4:1a:50:c9:2d:83:d7:64:da:3e:
                    6c:c2:d2:7e:de:6e:e5:ad:17:aa:cb:2b:48:1d:9a:
                    f7:97:94:69:06:c2:0b:a4:0b:4c:8c:ed:eb:32:94:
                    48:7f:d9:fe:20:7c:21:72:93:c2:c5:33:88:67:c3:
                    25:32:97:46:36:f8:78:18:54:de:30:df:b0:25:b9:
                    df:8d:00:80:01:2e:e5:3b:74:9d:72:ce:d4:d7:92:
                    99:23:f1:2d:c8:79:99:a0:89:1d:4f:1e:f2:f1:f3:
                    db:2c:b2:12:04:47:ff:51:e0:11:8d:d7:ae:73:e9:
                    28:42:95:46:21:3a:2a:b0:69:7f:20:ce:5b:09:7c:
                    99:28:1a:66:f7:a6:e1:30:8f:f8:d0:0e:35:12:da:
                    54:3b:ff:7d:96:9c:79:05:06:85:89:13:aa:65:c2:
                    f4:d9:14:73:9a:a7:bb:0b:5b:af:31:e8:79:63:d0:
                    b7:ac:83:39:c6:9c:16:55:c3:a9:8d:aa:9a:43:61:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:56:2B:16:00:29:E6:B5:56:29:FE:C1:0F:70:89:89:0D:77:17:48
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31332e302f32342d3234203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:d2:5b:09:df:b8:03:3f:01:b9:67:9a:8a:62:25:70:a4:
         8e:ed:0b:41:ac:08:f9:81:df:be:83:63:66:bc:85:d4:24:6a:
         e1:b1:a3:6b:a2:e7:5d:70:99:34:04:ef:80:f7:49:5b:61:bd:
         f1:62:ed:05:38:50:22:02:86:1a:ff:3f:48:92:c3:81:a4:ea:
         6a:ae:1e:01:82:be:20:04:50:12:4e:50:e1:00:29:37:71:f9:
         6b:97:9f:8f:9b:cb:1a:95:67:37:48:51:43:a1:89:d0:ad:d6:
         a9:cd:b4:f6:7b:3f:38:3e:ac:b8:61:58:6d:bb:46:bf:9f:04:
         b2:03:57:0a:3a:d1:dd:7d:86:8b:3b:8d:8c:2f:46:40:e3:ab:
         de:b7:62:3c:9f:16:ab:87:6b:4c:0e:e4:15:a5:61:ab:6d:b1:
         b1:ca:49:38:f6:4d:80:df:0a:70:a0:4f:49:48:8b:71:92:5c:
         87:2d:99:2f:d2:19:d1:20:b8:d2:2a:40:2f:4f:d6:f0:14:d2:
         3a:f9:8d:03:5e:42:cd:39:3c:b3:04:9a:8d:1f:69:1d:93:72:
         01:e5:3a:e6:0b:93:e1:44:12:ad:ca:31:be:ed:9b:79:4e:11:
         1a:79:be:3d:8e:cc:68:5d:96:03:19:52:d6:15:7d:18:c4:ea:
         27:b1:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:08 2026 by rpki-client