Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31362e302f32302d3234203d3e203338373538.roa
File:                     3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (raw, json)
Hash identifier:          39PppIz4okrDa5e/DjHZD/mvz7bxldZmw8H0oU4Mnxk=
Subject key identifier:   13:14:1F:38:76:C6:7E:48:75:43:D2:34:F2:86:42:DB:82:AD:0B:7A
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       47492896A17999CB66EDB2C5D02BFB0B6A51088B
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31362e302f32302d3234203d3e203338373538.roa
Signing time:             Sun 03 May 2026 02:55:50 +0000
ROA not before:           Sun 03 May 2026 02:50:50 +0000
ROA not after:            Sun 02 May 2027 02:55:50 +0000
asID:                     38758
IP address blocks:        202.180.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:49:28:96:a1:79:99:cb:66:ed:b2:c5:d0:2b:fb:0b:6a:51:08:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:50 2026 GMT
            Not After : May  2 02:55:50 2027 GMT
        Subject: CN=13141F3876C67E487543D234F28642DB82AD0B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:0b:de:46:b4:08:23:7c:6a:7f:ed:00:4a:
                    9d:ec:00:11:0a:1e:b7:84:0b:cf:1e:05:c2:76:7d:
                    93:6a:67:ad:8d:19:9c:8e:11:76:15:91:3e:c3:a2:
                    15:aa:72:a8:11:4c:73:d6:d2:03:ee:ad:b5:3b:16:
                    d9:68:42:e3:36:99:74:85:8e:a3:28:38:8d:40:dd:
                    04:79:20:e9:54:eb:fe:22:5f:71:02:a7:61:1e:1c:
                    e9:67:af:12:4e:92:80:49:95:59:4b:87:33:fc:9d:
                    08:52:4a:4a:d7:1f:4b:75:e0:35:bd:bc:3f:0c:1b:
                    54:a4:b9:f7:ea:a9:55:57:18:a6:a1:fb:f6:f6:5d:
                    c4:a3:1d:33:cf:f7:aa:01:2e:75:79:0c:39:e0:f2:
                    f5:b6:d2:08:9a:98:05:39:c5:29:72:17:f9:b0:38:
                    55:87:ac:e7:45:b1:90:b7:db:b9:26:9c:b6:5f:07:
                    b3:7a:93:b4:92:67:8d:f6:83:21:ff:6e:c8:48:01:
                    72:87:51:e9:b3:8b:79:f1:b1:9b:fb:f2:86:a7:16:
                    a4:7f:3d:12:e4:56:fb:0f:68:67:e8:c5:38:d3:3a:
                    06:62:e3:63:15:1e:ef:38:17:47:fc:1d:6b:f9:7d:
                    10:10:ce:83:6b:5e:fe:e7:d9:62:68:df:39:90:30:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:14:1F:38:76:C6:7E:48:75:43:D2:34:F2:86:42:DB:82:AD:0B:7A
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31362e302f32302d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:2a:b4:d5:6b:bb:12:f9:23:06:0b:a8:89:a5:ca:88:2b:e3:
         8f:ca:8a:82:02:67:b1:88:7a:14:57:ed:4e:94:99:64:f1:aa:
         71:d3:61:dd:31:96:9c:46:a8:0f:ac:5e:16:78:8f:d7:88:79:
         41:43:87:9f:35:39:dc:ae:a0:15:31:f3:36:04:1c:3b:12:19:
         b2:58:44:35:ec:70:1b:8f:62:3b:d1:4b:e4:b9:73:70:cb:5d:
         64:17:c5:64:4d:b5:ab:04:58:d6:90:bd:4f:0d:f9:4d:85:0e:
         da:b3:5e:be:70:1d:2e:87:86:d7:57:bd:fe:b4:d7:02:d8:20:
         ea:79:33:70:14:44:2c:02:76:5e:ca:8f:3e:81:63:63:38:33:
         db:5a:9c:22:4c:53:de:1d:49:a4:c4:45:d8:05:13:f3:b2:28:
         91:84:0a:1b:be:ae:cd:0e:68:7d:d9:c2:ac:32:02:0d:ac:50:
         54:43:4a:9a:f5:fb:a4:cc:70:c7:02:47:6d:e4:94:ab:44:7c:
         3b:5c:3f:80:81:ce:cb:90:70:47:03:10:20:34:6f:0d:86:68:
         6c:b1:fd:dd:97:50:f6:03:d9:72:70:a4:62:7f:64:86:ab:6b:
         8e:be:ba:ed:8e:62:6a:14:33:e6:f5:21:8c:39:38:e7:8c:16:
         e6:9b:90:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:18 2026 by rpki-client