Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35362e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35362e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          SxlxyvL8WwrM5JGx08PzBKCeI+dMeMDbdJIGfQQ+jfY=
Subject key identifier:   76:1C:7D:0C:DA:7D:C2:DF:77:9A:9D:39:2C:0F:12:D8:C6:57:31:E7
Certificate issuer:       /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial:       6EE78D3A7ABE54E980DA18CB3826FB20C5349057
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35362e302f32342d3234203d3e203435333132.roa
Signing time:             Sun 03 May 2026 03:05:31 +0000
ROA not before:           Sun 03 May 2026 03:00:31 +0000
ROA not after:            Sun 02 May 2027 03:05:31 +0000
asID:                     45312
IP address blocks:        202.81.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
                          rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e7:8d:3a:7a:be:54:e9:80:da:18:cb:38:26:fb:20:c5:34:90:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
        Validity
            Not Before: May  3 03:00:31 2026 GMT
            Not After : May  2 03:05:31 2027 GMT
        Subject: CN=761C7D0CDA7DC2DF779A9D392C0F12D8C65731E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:d3:83:51:a4:46:67:de:cf:6e:36:9b:88:
                    a9:9a:cf:93:0e:0d:23:bb:a8:3f:34:c2:b5:6e:71:
                    8f:71:52:3d:8e:f3:df:2a:83:69:91:99:0e:df:d1:
                    78:67:75:c1:39:04:67:db:b1:ba:61:92:42:0b:80:
                    e5:6b:8f:d3:ea:1b:95:18:99:14:be:4e:1b:1d:5a:
                    94:ab:fd:d5:cb:6d:ad:dd:76:2b:1f:53:15:1d:a7:
                    dc:e3:da:a1:b6:7c:e9:94:fc:cf:9e:dd:66:1b:ca:
                    b7:44:b1:82:c9:19:11:98:c1:94:cd:5d:c5:9c:55:
                    a1:15:3c:e7:61:9a:f5:a3:3e:67:4c:99:cb:51:0e:
                    4d:d9:22:f5:cf:45:50:88:f1:f2:71:a9:ed:17:99:
                    7a:36:48:d8:26:ca:e9:31:c0:ea:23:87:08:33:45:
                    84:02:b1:a1:4c:70:aa:55:53:1a:64:02:2f:08:53:
                    4c:08:6e:f1:38:a3:18:28:d7:cb:c8:03:2b:81:21:
                    bd:11:d5:a4:f8:0c:67:09:4b:d6:4d:0e:1c:a2:bb:
                    3f:24:4c:76:94:17:55:55:18:71:09:1c:19:0c:25:
                    be:0c:68:0c:c6:dd:a8:65:59:7e:96:c9:50:32:62:
                    c7:33:31:c2:0d:48:f4:e2:c6:aa:60:f3:25:d6:0d:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1C:7D:0C:DA:7D:C2:DF:77:9A:9D:39:2C:0F:12:D8:C6:57:31:E7
            X509v3 Authority Key Identifier:
                keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35362e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:af:c0:e4:f3:0e:f6:c2:39:42:14:0b:6f:de:b7:13:2b:
         04:98:d9:f2:93:60:15:65:89:1d:a1:f9:8a:14:de:58:76:f5:
         6e:1f:4b:2c:f5:47:7f:ad:7e:09:c8:cf:04:2e:50:bd:c2:5e:
         81:14:98:38:b8:4d:c9:65:9c:6f:87:40:5f:0b:02:42:48:c3:
         c6:48:1e:3c:13:24:7d:16:b1:fc:cb:ef:e4:0a:15:1f:4f:e6:
         b6:a0:9b:5c:c8:fa:31:b0:ab:03:5d:1e:ff:5d:db:1a:34:d9:
         f0:20:3e:38:5e:7d:f3:21:97:f9:54:6d:af:a7:7a:72:36:47:
         dd:ea:7f:40:2f:28:2e:41:c3:c9:96:67:e6:2d:82:4f:df:47:
         88:bc:5a:d5:c0:d7:34:f2:45:e8:6b:c5:b3:48:57:4c:e3:bc:
         d9:97:f0:36:67:71:d0:dd:54:1d:22:61:97:15:e2:d6:96:80:
         1e:a3:35:1a:5d:fe:e6:fe:18:26:d4:db:79:8e:fb:3b:61:02:
         41:c5:30:ce:2a:30:a6:27:e5:d7:fc:71:c5:5c:91:33:bf:dc:
         61:dc:07:1d:f5:16:2e:26:01:71:85:f3:a0:7a:79:76:c1:4a:
         9e:62:2e:8f:44:04:d7:2d:2d:db:6d:6a:6d:f9:d6:ca:2b:de:
         d3:92:ec:81
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbueNOnq+VOmA2hjLOCb7IMU0kFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNDMTE2RDkxNjBCNkYyMUY3QjY0N0Q2RkI4RUMxNDM2
Q0FEODhENDAeFw0yNjA1MDMwMzAwMzFaFw0yNzA1MDIwMzA1MzFaMDMxMTAvBgNV
BAMTKDc2MUM3RDBDREE3REMyREY3NzlBOUQzOTJDMEYxMkQ4QzY1NzMxRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqNODUaRGZ97PbjabiKmaz5MO
DSO7qD80wrVucY9xUj2O898qg2mRmQ7f0XhndcE5BGfbsbphkkILgOVrj9PqG5UY
mRS+ThsdWpSr/dXLba3ddisfUxUdp9zj2qG2fOmU/M+e3WYbyrdEsYLJGRGYwZTN
XcWcVaEVPOdhmvWjPmdMmctRDk3ZIvXPRVCI8fJxqe0XmXo2SNgmyukxwOojhwgz
RYQCsaFMcKpVUxpkAi8IU0wIbvE4oxgo18vIAyuBIb0R1aT4DGcJS9ZNDhyiuz8k
THaUF1VVGHEJHBkMJb4MaAzG3ahlWX6WyVAyYsczMcINSPTixqpg8yXWDTudAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUdhx9DNp9wt93mp05LA8S2MZXMecwHwYDVR0j
BBgwFoAU48EW2RYLbyH3tkfW+47BQ2ytiNQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzYyMWY3NTMtYTg4ZS00ZWRmLWEzMDYtYmQ5M2Q1YTM4ZmVhLzAvRTNDMTE2RDkx
NjBCNkYyMUY3QjY0N0Q2RkI4RUMxNDM2Q0FEODhENC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FM0MxMTZEOTE2MEI2RjIxRjdCNjQ3RDZGQjhFQzE0MzZDQUQ4
OEQ0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h
MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzUzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUTgwDQYJKoZIhvcN
AQELBQADggEBAAgtr8Dk8w72wjlCFAtv3rcTKwSY2fKTYBVliR2h+YoU3lh29W4f
Syz1R3+tfgnIzwQuUL3CXoEUmDi4TcllnG+HQF8LAkJIw8ZIHjwTJH0WsfzL7+QK
FR9P5ragm1zI+jGwqwNdHv9d2xo02fAgPjheffMhl/lUba+nenI2R93qf0AvKC5B
w8mWZ+Ytgk/fR4i8WtXA1zTyRehrxbNIV0zjvNmX8DZncdDdVB0iYZcV4taWgB6j
NRpd/ub+GCbU23mO+zthAkHFMM4qMKYn5df8ccVckTO/3GHcBx31Fi4mAXGF86B6
eXbBSp5iLo9EBNctLdttam351sor3tOS7IE=
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:39 2026 by rpki-client