Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e382e302f32342d3234203d3e203338373539.roa
File:                     3230322e3138302e382e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier:          EkpGc2+ARUZ09EgZQPHNvR6NBm18LA8bhuyzNll25bM=
Subject key identifier:   AA:DE:49:98:FF:8D:03:46:C8:91:FA:C7:FD:E5:D7:9D:C9:F5:20:2C
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       2FDAE1C88546A6D37FC201125CC9512EB0357DCA
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e382e302f32342d3234203d3e203338373539.roa
Signing time:             Sun 03 May 2026 02:55:48 +0000
ROA not before:           Sun 03 May 2026 02:50:48 +0000
ROA not after:            Sun 02 May 2027 02:55:48 +0000
asID:                     38759
IP address blocks:        202.180.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:da:e1:c8:85:46:a6:d3:7f:c2:01:12:5c:c9:51:2e:b0:35:7d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:48 2026 GMT
            Not After : May  2 02:55:48 2027 GMT
        Subject: CN=AADE4998FF8D0346C891FAC7FDE5D79DC9F5202C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:8d:b6:09:d5:6d:33:39:d2:7e:5d:f0:5b:
                    70:aa:3a:e1:27:4e:73:fc:0c:80:9e:22:93:59:49:
                    e1:9d:a5:46:9f:5c:de:be:8c:a7:31:1b:40:01:26:
                    90:c0:57:7b:59:76:af:5d:6f:dc:48:78:23:2a:a0:
                    c8:6a:49:e7:6e:60:a6:fa:92:e9:f4:96:94:f6:b1:
                    ad:4b:ef:72:ca:dd:27:58:a9:b9:97:ef:b3:5e:31:
                    df:e0:c6:3f:57:ac:b4:0c:f7:e4:45:1c:b4:8a:3e:
                    b2:d4:33:af:6e:6b:26:8c:0d:6f:3f:ee:71:a7:1c:
                    11:00:cf:af:f8:3d:92:54:e3:b1:9c:07:f0:dc:56:
                    4d:90:09:8c:78:20:ae:d8:cb:00:10:6b:5f:ec:76:
                    61:67:03:66:51:49:7c:30:13:04:e4:5d:72:87:d2:
                    b7:31:14:48:84:75:f2:6c:c0:b5:ba:27:c5:74:27:
                    5f:fc:66:10:28:a1:0d:1e:60:93:0a:02:f4:ed:7d:
                    58:2f:36:d7:01:23:42:e1:e2:42:c7:5f:9c:13:a2:
                    bc:0e:27:56:b1:9b:e8:3a:57:cc:38:0a:c4:fb:e1:
                    03:5a:a7:a3:42:ca:26:e2:47:ad:75:f1:1e:bd:59:
                    e7:67:32:01:35:78:16:20:e9:29:83:d2:c2:09:73:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DE:49:98:FF:8D:03:46:C8:91:FA:C7:FD:E5:D7:9D:C9:F5:20:2C
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e382e302f32342d3234203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:13:d3:71:8a:71:c1:2f:33:b3:36:e0:1e:43:f6:4d:87:be:
         53:25:84:85:e8:72:66:fc:56:ab:ba:df:0b:bd:3b:15:23:0f:
         bc:9c:ad:9d:2d:02:c6:18:44:75:2e:71:18:66:68:ef:ea:44:
         ef:50:5a:a0:d7:f6:e4:87:68:d6:60:70:c8:dd:e7:15:5f:36:
         23:7e:fc:10:3d:d8:a9:d0:71:cf:24:cb:17:7a:1b:d9:c6:a8:
         ec:3c:1d:66:93:b2:ba:92:9f:48:9b:61:41:4d:20:9b:55:82:
         c0:f0:bb:97:23:c5:e7:d5:bb:e5:2c:e4:78:c7:0c:a1:47:7d:
         16:dd:ea:8d:ef:c1:cf:65:ec:81:76:3c:e5:24:73:4c:57:fa:
         82:e7:f3:34:e8:c7:a5:54:e9:42:8e:2f:a6:98:18:54:0f:36:
         ac:0a:76:85:7d:c1:71:f6:31:d0:18:6d:c9:0c:06:49:67:08:
         ac:27:19:1c:10:db:fd:7a:b7:29:72:01:dc:a9:fd:22:20:59:
         2c:fd:4d:a0:c1:79:b2:bc:f3:f6:4b:00:1a:4f:93:ab:67:e3:
         b9:ea:f0:7f:1d:db:de:90:99:2d:73:af:07:3a:05:20:47:eb:
         81:28:12:f5:11:16:e7:87:e8:8a:e2:03:64:1f:e5:0e:45:1b:
         d1:2e:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:10 2026 by rpki-client