Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e392e302f32342d3234203d3e203338373539.roa
File:                     3230322e3138302e392e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier:          Q4I1ovKyT16FiPygNOO0hXygDOJfZQA7jOOYPptFFvM=
Subject key identifier:   42:DE:49:82:98:9A:05:8D:CB:77:19:5D:B3:EF:C3:9B:14:EB:4F:0F
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       434559908354953E8F0C93B3C382ADC70156077D
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e392e302f32342d3234203d3e203338373539.roa
Signing time:             Sun 03 May 2026 02:55:47 +0000
ROA not before:           Sun 03 May 2026 02:50:47 +0000
ROA not after:            Sun 02 May 2027 02:55:47 +0000
asID:                     38759
IP address blocks:        202.180.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:45:59:90:83:54:95:3e:8f:0c:93:b3:c3:82:ad:c7:01:56:07:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:47 2026 GMT
            Not After : May  2 02:55:47 2027 GMT
        Subject: CN=42DE4982989A058DCB77195DB3EFC39B14EB4F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:1a:11:79:40:eb:6b:01:c4:bc:51:e2:0a:
                    14:68:26:ef:d5:6a:d0:f5:cb:9c:3b:9a:9a:fa:d9:
                    2f:12:07:58:92:2e:aa:55:4f:ff:5f:a0:7d:b8:a3:
                    93:f3:67:24:ab:d1:8a:5f:4d:c8:53:df:78:4c:24:
                    58:1b:39:07:5a:13:91:52:88:70:a3:76:d4:df:fc:
                    3e:6e:53:b3:d2:20:eb:86:ba:72:26:00:80:8c:88:
                    51:d0:47:d6:bb:8c:1f:6a:85:59:50:fc:4f:9a:33:
                    95:1a:46:3d:d9:5f:3a:8d:35:6e:67:9b:b3:4a:53:
                    91:b1:77:de:b4:af:f1:22:8c:a1:70:41:bf:a7:a6:
                    90:7e:e4:9d:5c:fe:1d:00:0a:0c:af:4c:56:f6:36:
                    7b:ef:61:8b:41:25:b3:1e:00:64:fa:ee:ce:4e:aa:
                    dd:94:b1:41:72:86:31:eb:fc:08:59:f9:1f:21:6a:
                    5a:cd:c9:0e:3d:c6:31:4e:5c:b7:05:98:63:39:c3:
                    54:7c:4c:93:8a:37:70:f7:56:fd:7e:b4:e1:3f:61:
                    74:8e:74:34:b1:86:f0:34:6a:80:3b:3c:db:2a:c5:
                    7a:d9:44:ed:45:76:ab:44:fc:56:81:64:f2:c7:f8:
                    77:58:2c:a7:2a:cc:e8:fd:8e:73:88:ad:36:7f:6f:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DE:49:82:98:9A:05:8D:CB:77:19:5D:B3:EF:C3:9B:14:EB:4F:0F
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e392e302f32342d3234203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:aa:fe:6b:11:09:5d:63:8c:90:f4:43:fc:09:05:a9:67:47:
         e2:7b:4a:da:a8:8d:79:3e:67:ec:0b:07:a4:12:aa:b5:bd:d6:
         21:35:1e:c5:5b:50:49:db:d2:31:c4:14:56:e9:25:8b:97:1e:
         a9:2d:85:99:76:6a:12:49:5c:14:40:d3:f0:74:cd:76:a1:7e:
         13:d4:dc:2e:06:9e:71:86:49:bf:a8:60:cc:c6:6d:70:0f:f3:
         4a:a0:f5:0a:e2:e8:db:07:b4:ee:fa:9a:12:c8:8b:2b:bd:30:
         7f:63:52:30:20:c0:74:14:be:3c:03:53:68:e1:29:95:8e:21:
         d3:53:45:e6:21:56:fa:c9:0b:3e:38:f3:e8:14:d7:eb:79:14:
         76:96:76:58:3e:5a:55:2f:77:07:22:c9:df:85:45:62:7c:76:
         a0:e3:1b:6d:4b:d6:21:3a:18:73:e2:06:05:fe:83:c3:8e:33:
         57:2d:a8:50:2e:27:63:b0:0e:9d:c7:12:28:25:22:3f:cf:00:
         8b:14:c1:8f:3f:f7:19:51:e4:cf:8f:49:30:2d:11:39:b3:2b:
         86:c8:ea:56:55:d8:c1:14:31:c2:ad:4e:78:39:2f:a1:0a:21:
         d6:c9:f9:03:5b:5b:9d:1a:d0:62:f9:ba:bd:a7:c3:66:55:e4:
         9d:54:98:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:10 2026 by rpki-client