Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35352e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35352e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          eQMgvbiIJS6qZDzTzmNY9zJd7P9TLx/60N8D6qwtINc=
Subject key identifier:   FD:D5:53:3F:C6:A9:F5:99:D4:1F:7E:FE:1E:6C:C3:A7:F3:6E:91:65
Certificate issuer:       /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial:       4A263EC6D42541A1A2C621439A65520860051470
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35352e302f32342d3234203d3e203435333132.roa
Signing time:             Sun 03 May 2026 03:05:22 +0000
ROA not before:           Sun 03 May 2026 03:00:22 +0000
ROA not after:            Sun 02 May 2027 03:05:22 +0000
asID:                     45312
IP address blocks:        202.81.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
                          rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:26:3e:c6:d4:25:41:a1:a2:c6:21:43:9a:65:52:08:60:05:14:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
        Validity
            Not Before: May  3 03:00:22 2026 GMT
            Not After : May  2 03:05:22 2027 GMT
        Subject: CN=FDD5533FC6A9F599D41F7EFE1E6CC3A7F36E9165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:9e:44:eb:90:b7:d8:da:ae:c8:30:2d:9d:
                    33:14:d6:07:4e:db:5f:ee:48:4d:e3:a1:b0:5f:15:
                    74:fc:c7:49:f5:fd:6a:24:3f:0f:3c:6a:a2:d6:f9:
                    cc:cc:db:66:d5:89:7b:96:42:77:a4:f6:28:b8:d2:
                    70:32:eb:f6:59:b0:3e:a5:ff:f8:b1:fe:31:f8:9f:
                    68:09:72:f7:79:d2:c3:ca:77:c7:46:75:35:92:b6:
                    d4:d5:ce:b7:a5:fa:9f:fc:35:d6:1c:8b:70:c7:7d:
                    05:28:ab:b9:eb:9b:5b:dc:0d:39:0f:09:28:5c:d4:
                    4a:c3:24:05:6d:90:49:c9:1f:77:2f:06:75:11:82:
                    ae:7e:83:2c:f3:04:22:03:a2:0a:1e:0e:40:de:43:
                    35:e1:b7:7f:2b:ed:d1:df:be:89:39:61:43:f9:53:
                    fa:9f:57:20:84:7f:ce:4c:f4:28:3c:ec:01:e8:66:
                    73:f8:1b:e5:86:58:ea:70:33:7e:be:a6:22:06:ce:
                    1d:fa:d8:e5:70:04:8a:b1:c2:fd:c6:bd:0e:aa:c1:
                    2f:58:e2:a1:c2:f6:da:09:c9:5e:c1:8f:78:67:8a:
                    10:2d:c2:27:61:95:3f:11:b5:68:13:3a:d9:59:fc:
                    41:bf:3f:ca:c5:60:f9:2b:94:11:68:0b:4c:01:6d:
                    f8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:53:3F:C6:A9:F5:99:D4:1F:7E:FE:1E:6C:C3:A7:F3:6E:91:65
            X509v3 Authority Key Identifier:
                keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35352e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:e1:fa:0f:8d:a4:ca:d1:69:90:69:a6:e7:30:36:4d:be:fa:
         26:45:6b:d7:1f:bd:1e:e8:47:40:3d:88:1e:89:fd:e8:ce:06:
         53:41:17:b0:95:c4:c3:3d:f1:db:9b:ee:31:8e:35:99:ab:97:
         f0:15:27:a9:5c:ed:2e:bc:54:9f:56:c7:68:fe:01:fe:d6:e8:
         79:0e:a9:51:2b:7b:a1:d9:f1:5a:c7:b7:ad:1c:01:c8:06:af:
         0b:fc:35:84:ef:64:a0:d4:9c:c2:64:94:4c:db:a9:d0:c0:25:
         98:fe:63:b6:3d:9d:1b:c9:08:b9:9c:ed:c7:e7:e6:d9:fd:77:
         4a:30:02:fa:73:2b:1f:a5:46:b0:2a:d8:de:0d:ec:06:c8:44:
         8c:1d:44:2f:6e:9e:3b:20:65:3a:77:64:95:9d:fc:1d:1a:09:
         1a:0e:13:d7:98:49:23:c4:e4:17:b6:e1:b7:e2:21:4f:c0:bf:
         1b:ea:bc:9c:72:a4:9c:81:5f:7b:ad:0a:a6:51:ce:03:bb:19:
         46:2b:f8:8e:c8:d5:71:34:24:82:ff:81:1b:12:4f:45:1b:b8:
         d4:4f:bf:96:05:f5:92:c2:da:5e:75:65:30:3c:10:09:ba:5c:
         5a:ca:16:df:a9:bc:60:9e:af:c4:57:79:d0:dc:5a:b5:d0:c7:
         91:de:0e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:01 2026 by rpki-client