Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e34382e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          TbLMwdxOSR1RZnrO3oN4B3HatggJeaAHR2DwUw/x/qI=
Subject key identifier:   0A:92:39:96:AA:CF:33:AF:82:1D:9F:16:7F:F2:8F:F0:6B:A6:5A:2D
Certificate issuer:       /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial:       2BCFEBA1708D8679B6F652610DC20595FE8E42F2
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32342d3234203d3e203435333132.roa
Signing time:             Sun 03 May 2026 03:05:25 +0000
ROA not before:           Sun 03 May 2026 03:00:25 +0000
ROA not after:            Sun 02 May 2027 03:05:25 +0000
asID:                     45312
IP address blocks:        202.81.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
                          rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cf:eb:a1:70:8d:86:79:b6:f6:52:61:0d:c2:05:95:fe:8e:42:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
        Validity
            Not Before: May  3 03:00:25 2026 GMT
            Not After : May  2 03:05:25 2027 GMT
        Subject: CN=0A923996AACF33AF821D9F167FF28FF06BA65A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4a:86:f0:cb:81:2c:a0:43:91:73:b0:53:98:
                    7b:fb:cb:ec:72:f6:f9:d0:13:53:c4:d9:da:dc:23:
                    14:d3:7a:f7:70:cb:2b:97:b4:44:9d:4a:3a:54:d0:
                    37:34:92:0d:69:1c:40:b1:55:e7:fc:3d:77:8a:d5:
                    a6:f0:50:9b:e4:af:7c:ce:0b:72:3f:d7:7a:38:1c:
                    b6:a5:1c:cc:c5:d5:f6:14:71:37:6f:0b:15:78:88:
                    0a:41:3f:18:03:57:8e:1b:2d:73:a2:d2:b2:8c:41:
                    15:0e:cc:18:44:cf:f6:62:b8:46:f5:d8:41:4b:32:
                    2e:f2:2c:fc:42:b3:57:d6:1d:9a:04:37:13:a4:41:
                    63:c8:dd:95:fa:af:66:ff:93:46:bc:d9:91:8e:40:
                    ba:73:5a:5e:bb:1e:17:21:03:42:f9:27:3c:20:e0:
                    aa:ed:5f:69:73:dc:51:49:cd:b2:fd:ad:bc:f7:71:
                    e6:72:b5:0a:66:9c:f4:0e:88:f6:5f:ff:03:34:fb:
                    53:c7:2e:16:1f:72:e8:7c:87:4f:5d:7a:72:98:3a:
                    8f:c3:88:e4:69:8b:e9:1f:84:07:0e:4b:d9:ed:23:
                    90:05:3d:24:bc:f1:67:5f:51:8a:48:60:5c:44:73:
                    34:57:a8:c9:95:32:84:af:f3:52:03:f3:c2:2e:41:
                    a7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:92:39:96:AA:CF:33:AF:82:1D:9F:16:7F:F2:8F:F0:6B:A6:5A:2D
            X509v3 Authority Key Identifier:
                keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:04:fb:87:98:3e:3c:1a:57:75:47:fa:bc:b4:72:d2:11:c7:
         4d:09:27:c1:17:ef:55:c7:e7:72:6a:6c:58:86:ab:11:e5:4f:
         97:6d:06:8e:99:de:96:46:17:51:2f:2e:1e:2d:97:94:36:9e:
         b1:d6:44:50:0b:0b:94:17:24:94:50:08:a1:fa:4a:04:7f:18:
         99:02:f7:c1:94:94:b4:49:b9:25:7e:3b:4c:a7:36:5e:fb:69:
         31:50:1c:ed:63:40:07:75:c1:b8:19:0c:7b:cb:e0:54:97:cc:
         8e:71:20:3f:b4:62:80:20:f8:28:b9:e6:e9:25:0b:e3:4c:57:
         ca:15:49:b8:b8:16:7f:8f:b7:dc:a9:cf:a5:ce:98:92:9e:4b:
         57:92:35:42:75:49:b7:7d:09:a7:af:b0:14:83:33:b9:68:5e:
         cf:b8:30:5e:34:c6:64:f7:91:08:36:fe:e1:fc:46:23:d6:89:
         fd:5e:00:24:14:9f:1c:c3:08:28:70:0f:a0:db:79:7f:47:4a:
         6d:f1:f1:a8:08:88:3d:64:cd:95:c2:c6:5a:7d:01:49:31:bd:
         2d:ff:04:a2:59:f4:2c:85:3d:6c:73:7a:7e:d8:d8:7d:ab:c3:
         34:b4:64:08:63:e5:c2:cc:73:aa:dc:d8:0c:69:dc:70:ff:19:
         2f:eb:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:28 2026 by rpki-client