Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35372e302f32342d3234203d3e203330383630.roa
File:                     3230322e35312e35372e302f32342d3234203d3e203330383630.roa (raw, json)
Hash identifier:          IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=
Subject key identifier:   C7:3B:00:BF:8A:6D:C5:DA:D2:FD:FF:9E:35:95:CD:AE:17:BE:4C:CE
Certificate issuer:       /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Certificate serial:       22F15BDAAF88E3271303C4F5FA9A92D39AB57DFF
Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35372e302f32342d3234203d3e203330383630.roa
Signing time:             Sun 03 May 2026 03:02:53 +0000
ROA not before:           Sun 03 May 2026 02:57:53 +0000
ROA not after:            Sun 02 May 2027 03:02:53 +0000
asID:                     30860
IP address blocks:        202.51.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
                          rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f1:5b:da:af:88:e3:27:13:03:c4:f5:fa:9a:92:d3:9a:b5:7d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
        Validity
            Not Before: May  3 02:57:53 2026 GMT
            Not After : May  2 03:02:53 2027 GMT
        Subject: CN=C73B00BF8A6DC5DAD2FDFF9E3595CDAE17BE4CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a8:e2:87:14:70:e6:d7:a0:bb:ef:d5:bd:5d:
                    df:f4:33:72:eb:03:38:fe:3b:9f:1e:59:01:37:9c:
                    a5:c1:2b:db:a6:1c:24:a5:0d:ae:b7:62:bf:ca:9a:
                    84:45:67:d2:0d:bb:d0:63:b2:b8:46:68:5a:00:19:
                    31:f9:ae:63:d7:92:18:9a:c1:a4:3e:8a:61:02:e2:
                    43:de:87:7a:d3:c9:51:2a:33:79:79:d8:00:4e:9d:
                    d7:1c:f8:d6:58:a2:83:0f:61:61:0a:2e:e3:a0:10:
                    2b:3c:80:7b:b9:4d:02:a1:1c:6a:ef:d8:88:a1:08:
                    9d:8e:cf:2a:aa:6b:37:a5:39:1a:4c:ac:1a:8e:71:
                    1b:7f:0e:c1:c6:a8:bf:f1:08:9b:08:05:ce:eb:5a:
                    1a:91:b1:bd:d7:45:7b:ff:a6:2b:cc:34:a4:85:4c:
                    b5:79:07:92:68:35:13:c8:e2:a8:7d:f5:53:c7:b6:
                    be:b9:f8:77:30:54:f8:25:87:78:54:8d:f3:12:69:
                    fc:c4:94:22:85:f2:6e:ef:54:22:2f:4a:01:a0:95:
                    e8:21:59:88:5b:41:36:84:4d:4f:05:5b:fc:ca:78:
                    c2:e6:79:eb:20:c9:8b:9e:cd:36:40:00:e4:b5:ee:
                    a6:43:79:2c:a7:ee:59:ee:ea:5f:0d:00:7a:cd:8a:
                    33:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3B:00:BF:8A:6D:C5:DA:D2:FD:FF:9E:35:95:CD:AE:17:BE:4C:CE
            X509v3 Authority Key Identifier:
                keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35372e302f32342d3234203d3e203330383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:9c:f9:63:e8:40:42:6a:04:9d:0c:ef:70:88:6a:88:ca:8c:
         35:db:b0:db:f9:9c:4f:d3:9e:74:95:28:c5:3e:62:2e:5e:ef:
         35:73:09:cb:05:10:a8:ca:9c:25:ae:32:67:50:81:94:75:d4:
         9d:a4:f6:03:e6:d3:e2:88:07:e6:61:fc:71:78:62:b0:e9:4e:
         70:57:3c:8a:c9:0b:ac:98:58:de:94:b9:61:24:2d:1c:81:50:
         24:84:01:f9:aa:ee:01:e5:04:8e:66:d2:e5:a0:2d:b0:8f:2a:
         8e:15:6a:2f:5c:c2:24:df:f8:39:7b:18:cf:6d:de:a5:9f:0a:
         05:32:dc:d3:c8:0b:d4:78:c4:e1:67:47:28:20:57:ff:f6:9d:
         03:e0:44:8c:c4:58:a8:05:c7:ac:c3:06:28:5f:94:7f:4c:49:
         80:0b:ac:2e:65:31:c9:70:f7:6b:b1:42:f3:e3:a0:d1:24:b2:
         b1:ae:4a:43:65:a3:a5:16:55:f8:02:2e:0b:68:93:07:e4:a6:
         7f:aa:cf:bd:d1:3a:88:78:e9:f9:38:1d:08:df:15:e8:8a:37:
         72:30:d4:a3:37:05:89:72:17:ad:d1:6e:c5:4d:38:ee:bb:88:
         7e:e4:5d:c0:ab:8a:7d:ae:27:0e:75:aa:0e:8e:97:ca:ba:bc:
         55:cd:a3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:55 2026 by rpki-client