Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35392e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35392e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          mMvkarfiVBBHzGgnkgg60LUcEEPHU3JKaX9eZkvqEcE=
Subject key identifier:   50:F0:B4:0E:EE:D3:4B:3D:46:77:9D:47:58:2E:49:0C:C7:DF:BC:5A
Certificate issuer:       /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial:       517301FC536ED802B11B866A5DA3903744CE27B3
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35392e302f32342d3234203d3e203435333132.roa
Signing time:             Sun 03 May 2026 03:05:22 +0000
ROA not before:           Sun 03 May 2026 03:00:22 +0000
ROA not after:            Sun 02 May 2027 03:05:22 +0000
asID:                     45312
IP address blocks:        202.81.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
                          rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:73:01:fc:53:6e:d8:02:b1:1b:86:6a:5d:a3:90:37:44:ce:27:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
        Validity
            Not Before: May  3 03:00:22 2026 GMT
            Not After : May  2 03:05:22 2027 GMT
        Subject: CN=50F0B40EEED34B3D46779D47582E490CC7DFBC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:54:a3:2b:35:f1:99:fa:70:9f:4b:60:d9:
                    2c:4c:e1:81:16:ac:d7:b3:47:76:1e:44:53:cb:9a:
                    2b:70:b5:31:ed:52:bc:e3:86:af:b9:d6:ff:22:8c:
                    71:ce:fe:46:69:38:35:72:0f:96:42:7f:2b:2c:90:
                    ca:e8:9e:86:59:97:69:43:49:bc:0d:12:21:4c:41:
                    01:bd:dd:08:3f:31:80:7c:26:8f:dc:e2:a3:1a:5d:
                    e5:d2:81:ca:44:03:9b:3b:a9:17:dd:a0:65:99:fa:
                    eb:6f:87:62:34:d0:46:21:e8:23:b1:6b:38:6a:20:
                    39:60:ad:f2:e3:01:7f:1b:ef:cc:ca:fd:85:3d:31:
                    7f:0a:2c:ff:e4:5c:ba:e1:26:3e:77:ec:1e:c1:91:
                    7e:32:6a:ab:73:09:ad:b8:1c:0c:73:c0:b2:91:a5:
                    38:61:3a:76:ac:6c:52:7e:67:4c:28:a8:76:0d:e7:
                    c5:b4:0f:82:55:8a:5d:fa:d8:4f:87:24:b1:f4:3f:
                    68:87:fd:f2:e1:f9:ea:4c:e2:01:b2:84:95:49:fc:
                    ca:0d:45:2c:23:eb:8c:1d:60:8e:eb:fb:19:66:59:
                    39:60:57:ac:7c:fa:99:76:aa:6e:6d:1c:1e:1f:ff:
                    d6:57:0d:7b:a3:0a:38:25:e0:b3:a0:98:6d:99:b7:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F0:B4:0E:EE:D3:4B:3D:46:77:9D:47:58:2E:49:0C:C7:DF:BC:5A
            X509v3 Authority Key Identifier:
                keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35392e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:05:47:4b:f6:60:79:d9:03:3e:cb:24:57:98:a6:e7:60:48:
         4d:99:c6:73:e6:38:2c:e0:f2:0a:22:b7:18:43:15:51:6a:47:
         39:db:8f:62:a7:cc:4e:5c:38:a7:4b:d6:6d:e0:d3:5b:c1:fa:
         b9:0b:21:e1:11:f2:bb:3c:f5:16:1e:26:19:76:a0:37:e1:70:
         df:b6:fb:1f:ca:38:3f:84:9b:36:8f:e2:93:9e:00:cc:a0:d4:
         e3:2f:78:d1:20:a8:d8:34:b2:24:0a:36:de:40:ba:68:19:a0:
         31:1f:57:89:47:de:66:93:ed:26:98:e5:fb:0b:ba:86:1e:48:
         67:eb:43:cf:76:46:5a:71:a7:e5:f3:d5:07:3c:43:ab:0a:9e:
         60:7a:9b:4c:59:c5:06:b5:3d:a0:c6:5d:06:a2:92:53:64:ff:
         11:dc:b5:17:e7:65:2c:65:c2:fb:e1:8e:11:65:ef:09:cb:2d:
         02:a4:97:8e:5e:36:4a:50:10:ef:b5:bc:3d:93:dd:ed:27:f7:
         23:18:30:45:bd:c7:51:38:ee:39:e7:8c:f1:bf:5a:f0:fe:5a:
         2a:05:ee:67:b8:39:83:dd:47:a6:0f:5a:82:85:0f:9a:cf:c0:
         41:7e:df:70:76:92:ba:f9:ad:ee:89:15:5e:11:d1:28:d3:ed:
         f9:d0:7e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:24 2026 by rpki-client