Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/3230322e39342e38332e302f32342d3234203d3e203535363732.roa
File:                     3230322e39342e38332e302f32342d3234203d3e203535363732.roa (raw, json)
Hash identifier:          02qGuHs8PWiwuegUDxDYjRjxgPk9hr8EhoopovjNuGM=
Subject key identifier:   04:9D:21:70:72:DB:BB:9F:D9:6B:4B:EF:DC:63:20:FE:8D:C4:B7:0A
Certificate issuer:       /CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090
Certificate serial:       64AF5E812DAC83B538119A98EA3D320056DA2BB9
Authority key identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/3230322e39342e38332e302f32342d3234203d3e203535363732.roa
Signing time:             Sun 03 May 2026 03:02:05 +0000
ROA not before:           Sun 03 May 2026 02:57:05 +0000
ROA not after:            Sun 02 May 2027 03:02:05 +0000
asID:                     55672
IP address blocks:        202.94.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl
                          rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:af:5e:81:2d:ac:83:b5:38:11:9a:98:ea:3d:32:00:56:da:2b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090
        Validity
            Not Before: May  3 02:57:05 2026 GMT
            Not After : May  2 03:02:05 2027 GMT
        Subject: CN=049D217072DBBB9FD96B4BEFDC6320FE8DC4B70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b7:8d:dd:42:ac:1f:95:c4:e1:7e:0d:88:fb:
                    bb:2d:48:08:4b:f1:b8:31:b2:11:76:e9:85:83:2c:
                    72:76:d1:26:a4:10:87:6e:33:6f:9a:bf:f1:69:be:
                    dc:5c:16:36:3b:db:84:97:bf:1f:2e:e6:c7:39:c8:
                    23:ea:6b:7a:96:86:56:25:6a:7d:30:10:81:55:e3:
                    9f:0e:ec:c2:78:2b:2e:f0:a9:7f:4b:86:d7:d6:eb:
                    30:27:52:0a:a8:d3:32:2c:6b:91:b9:6c:36:55:09:
                    c0:8a:1b:b7:97:69:3f:f2:e2:a9:fc:0f:fe:cf:c2:
                    3d:cb:f6:53:52:1a:a8:f0:01:6f:8b:f9:c0:c9:66:
                    35:3c:7a:ac:bd:a6:34:98:6c:e8:cd:0d:9b:79:4e:
                    1a:d0:8d:35:ff:e5:bb:42:07:fd:79:cf:97:78:eb:
                    c0:c4:65:2b:3e:fc:2a:42:a4:09:7c:80:93:72:0d:
                    48:d1:d0:f5:71:11:79:21:ef:dd:bd:ba:20:35:60:
                    30:51:3d:e3:bc:63:16:76:97:25:03:8f:8a:04:55:
                    37:ed:d9:ea:e7:7b:0e:e1:87:f2:db:d8:94:b3:f4:
                    09:91:82:af:82:84:8f:48:d4:ac:3b:0a:77:53:3b:
                    6c:3d:6e:71:0e:ab:a2:eb:07:15:7b:7e:14:0f:f5:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9D:21:70:72:DB:BB:9F:D9:6B:4B:EF:DC:63:20:FE:8D:C4:B7:0A
            X509v3 Authority Key Identifier:
                keyid:7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/3230322e39342e38332e302f32342d3234203d3e203535363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.94.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ea:c4:aa:6a:72:5e:98:30:be:5d:59:e3:42:63:17:95:e9:
         22:dc:20:3c:6a:90:4b:6c:a8:b9:34:eb:68:12:01:56:f2:1b:
         32:4f:33:24:37:bf:5b:8c:a9:7f:77:9e:09:61:3e:2e:5f:91:
         1b:8b:34:cf:fe:f5:d0:68:7a:9d:9a:17:16:63:01:0f:a0:29:
         ad:15:b3:0c:6d:3b:0c:af:e3:da:19:77:7f:90:00:ab:33:9f:
         26:e7:19:9c:2d:59:b2:ad:be:73:c4:a4:dc:59:57:0b:bd:f7:
         12:99:61:de:4e:0f:d1:7c:ce:79:e7:75:f4:8b:e0:96:1d:19:
         d3:80:ce:03:fe:ff:ba:6f:41:bc:e9:00:c0:58:0d:8f:01:d8:
         3c:32:44:38:14:4d:ee:14:c8:e6:bc:9d:28:62:7a:71:a8:aa:
         ad:de:fe:c2:8d:85:91:75:cd:0d:ae:cb:0a:55:8a:1e:57:d4:
         92:10:ca:28:26:9f:49:1c:16:24:dd:9e:63:2a:68:00:60:92:
         b6:ff:78:38:1b:65:ef:e4:4d:60:4d:2c:2d:f5:51:7a:16:fe:
         30:44:fb:6f:0e:cf:7b:1e:77:73:ae:b9:8a:2e:a9:da:7c:43:
         82:1d:7f:ca:3c:fb:5c:fc:31:ef:52:a1:ae:90:88:64:d3:5d:
         10:e1:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:02 2026 by rpki-client