Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35332e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35332e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          G+TqB61oqG58+DV9DA4U59T/VqCzJmMyaZqSiWubGKE=
Subject key identifier:   0E:85:57:8B:5C:28:EA:85:DA:F4:E9:1D:4E:BD:9B:D4:95:97:5A:82
Certificate issuer:       /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial:       132C96F947359BD296D2B102DD9DA777AD54200E
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35332e302f32342d3234203d3e203435333132.roa
Signing time:             Sun 03 May 2026 03:05:28 +0000
ROA not before:           Sun 03 May 2026 03:00:28 +0000
ROA not after:            Sun 02 May 2027 03:05:28 +0000
asID:                     45312
IP address blocks:        202.81.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
                          rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2c:96:f9:47:35:9b:d2:96:d2:b1:02:dd:9d:a7:77:ad:54:20:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
        Validity
            Not Before: May  3 03:00:28 2026 GMT
            Not After : May  2 03:05:28 2027 GMT
        Subject: CN=0E85578B5C28EA85DAF4E91D4EBD9BD495975A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:88:e9:c9:8b:e8:e4:45:a0:f1:a6:3b:75:
                    ec:f1:7f:fc:23:81:74:c1:fc:46:52:f8:67:ca:c0:
                    a9:bd:e6:79:66:dd:b3:68:f3:0b:d3:55:45:17:8b:
                    59:07:dd:6f:0b:3d:a1:d0:b7:81:e3:fe:0a:90:92:
                    ee:f6:18:a9:31:46:65:b3:f6:87:3a:6d:4e:f7:3f:
                    b7:5a:5c:e7:2d:02:38:31:76:97:2f:e1:c4:b4:c4:
                    79:bf:fe:a7:bf:fa:b5:69:08:d0:85:63:39:65:1c:
                    3a:7e:2c:64:4d:97:3f:0f:27:77:c1:43:f1:97:58:
                    af:2e:15:55:0b:c4:4e:db:36:ab:bb:a1:e5:45:6e:
                    01:77:d6:15:85:17:be:e4:5e:80:57:4e:e0:7b:2a:
                    c4:4f:59:2f:70:bc:67:c2:4a:88:c5:45:b5:8d:a8:
                    8d:8b:00:4c:62:84:da:8c:82:89:da:08:f9:64:de:
                    10:ba:76:02:50:7b:08:89:06:cd:da:ee:e4:9e:93:
                    ce:53:5a:ee:f3:dc:53:6f:bc:ec:94:b8:d3:ec:18:
                    4c:cf:5c:3d:8d:d0:4b:74:85:75:b9:d3:1b:bf:06:
                    c0:cf:9a:cb:03:ce:4b:70:43:3c:d9:5a:4c:e7:94:
                    92:78:c2:25:91:56:b3:24:64:d8:0d:6c:e1:8f:c7:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:85:57:8B:5C:28:EA:85:DA:F4:E9:1D:4E:BD:9B:D4:95:97:5A:82
            X509v3 Authority Key Identifier:
                keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35332e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:af:3c:02:6c:bf:2d:74:c2:74:b2:34:06:b2:a2:77:c4:62:
         88:63:e1:bc:d8:4f:a3:e9:10:ef:87:c6:d8:c5:5c:a1:26:bf:
         2e:62:7a:c6:db:31:cb:90:4a:35:4e:d8:7e:4d:9c:7b:a8:e4:
         7a:5d:5d:00:69:f9:79:a4:a1:1f:00:7a:b1:5f:b6:62:62:5f:
         0c:67:f5:20:6b:bb:51:03:03:79:43:9c:9e:ba:33:e5:b3:41:
         bf:bd:99:92:1d:56:db:a5:9a:b8:62:c0:94:03:df:d7:9f:2b:
         73:ca:b6:c7:38:95:92:c6:38:a6:7d:55:d1:63:e4:4b:99:51:
         d0:5c:ed:06:9f:14:ec:d2:6f:c9:90:c3:40:31:f9:09:f9:47:
         de:a6:97:e7:4f:41:9f:da:5b:72:75:2a:44:f6:47:e1:3d:e8:
         a0:09:f3:64:9a:0a:a4:10:ff:bc:67:25:f0:53:e7:ee:52:f6:
         e6:da:5d:a6:43:a6:00:af:60:c9:aa:d4:53:da:a7:a0:d5:87:
         69:41:27:4e:7f:bc:4f:9b:5e:1e:20:53:a3:15:4e:a2:e0:02:
         fa:f2:df:36:d9:28:2c:fa:0f:e4:18:50:ce:0a:5c:7b:55:55:
         4c:1d:ad:5b:f7:d2:0f:e3:f7:72:32:be:c9:82:a6:67:31:75:
         ab:2e:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:16 2026 by rpki-client