Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3230322e3134352e362e302f32332d3234203d3e203535363636.roa
File:                     3230322e3134352e362e302f32332d3234203d3e203535363636.roa (raw, json)
Hash identifier:          GYk5hEqp+MhM9Zsf+DSNQ9u0qzXbQ2dCA494BagxRaI=
Subject key identifier:   2A:39:93:FA:95:AD:D7:B8:42:6A:CB:D9:03:16:AE:4C:7E:31:EA:71
Certificate issuer:       /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial:       5C978BA5B9421252DBFF9A43E649829368CFBBBA
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3230322e3134352e362e302f32332d3234203d3e203535363636.roa
Signing time:             Sun 03 May 2026 02:59:31 +0000
ROA not before:           Sun 03 May 2026 02:54:31 +0000
ROA not after:            Sun 02 May 2027 02:59:31 +0000
asID:                     55666
IP address blocks:        202.145.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
                          rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:97:8b:a5:b9:42:12:52:db:ff:9a:43:e6:49:82:93:68:cf:bb:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
        Validity
            Not Before: May  3 02:54:31 2026 GMT
            Not After : May  2 02:59:31 2027 GMT
        Subject: CN=2A3993FA95ADD7B8426ACBD90316AE4C7E31EA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:71:af:a7:46:24:41:7f:07:09:61:6b:cd:
                    2a:da:e7:1e:bd:65:cc:83:a0:ab:a2:48:bd:7b:83:
                    d8:08:b1:85:29:78:ed:dd:7c:e8:a0:cd:f3:3f:b3:
                    78:72:00:72:15:80:8b:38:f5:0b:55:97:51:b6:40:
                    3f:d5:01:ac:c2:7a:19:f5:47:08:b0:77:b9:0f:42:
                    98:08:2f:f0:91:8b:16:50:be:02:3b:bb:b3:1e:3a:
                    1b:63:dd:70:f6:41:6a:db:8b:d4:ca:e9:93:94:41:
                    86:0b:fb:38:ae:ca:60:04:2c:b6:04:b4:e8:3d:df:
                    25:84:45:67:38:73:24:e5:3f:2c:7f:40:9f:16:cc:
                    2d:f9:e9:bd:7c:56:81:e7:e4:bf:bc:4e:67:bc:17:
                    3e:eb:c6:03:cf:17:c7:f7:ec:ca:cb:c6:53:93:90:
                    dc:82:ef:d4:f1:2e:03:bb:31:cb:52:2a:90:d1:e8:
                    31:ea:86:2e:24:a3:f2:16:14:5c:8e:39:0a:2a:c0:
                    99:e5:56:3a:7e:e5:2d:bb:19:4a:65:39:75:42:66:
                    c8:e0:f3:b3:34:92:af:e1:17:dd:b7:47:9e:f6:02:
                    43:9c:0b:af:c3:4a:ee:49:1e:25:d7:fe:ca:3e:84:
                    ab:56:6b:a6:c1:f0:a3:8d:4e:38:a3:b4:ae:02:14:
                    5e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:39:93:FA:95:AD:D7:B8:42:6A:CB:D9:03:16:AE:4C:7E:31:EA:71
            X509v3 Authority Key Identifier:
                keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3230322e3134352e362e302f32332d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:52:f6:f9:96:3d:5f:95:eb:a2:99:ac:15:af:06:da:83:4c:
         c0:06:0c:c6:f8:60:a2:d6:e7:db:8f:57:68:20:0b:14:d1:51:
         3f:d7:99:e3:de:0a:0e:6d:a4:0f:60:a6:34:23:1a:6e:9f:a2:
         ec:ac:d1:38:12:72:27:da:41:58:9c:df:cf:42:cf:6e:f3:fe:
         ba:3c:37:d0:40:20:3c:ef:3a:d3:e5:3c:c2:98:13:cb:f1:d7:
         2f:79:2e:94:34:50:8e:e5:2c:a1:32:7e:03:c2:23:3e:7e:fe:
         12:2b:7e:b7:4e:a1:ac:40:49:24:cb:7d:bb:a9:04:42:69:b6:
         ba:97:f3:0a:27:ae:28:c5:66:60:52:4e:2a:52:74:bb:5e:f3:
         ec:12:2e:36:2c:45:3c:f8:92:56:31:29:d4:ac:a8:9e:a2:c2:
         0a:b6:53:09:7f:16:a4:b2:fa:a2:c4:e7:59:fb:23:b2:8e:dc:
         e5:a2:49:4c:66:53:7f:61:ab:4c:5c:83:ca:a7:93:bc:c0:ec:
         2b:41:e3:3d:0e:e2:88:11:6c:1c:40:58:19:85:c4:91:77:11:
         02:ba:10:aa:b7:5f:e9:05:ac:bf:23:39:3e:b3:bd:82:e4:6f:
         47:a3:79:e3:49:9a:0f:f9:ba:6e:6a:e6:d6:c7:a2:dc:c7:1b:
         6d:6f:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:01 2026 by rpki-client