Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36312e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e36312e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          sck/dOiW4dxaTHqfIU/Zcv0zuxLGvdUW0v3abFbK8ng=
Subject key identifier:   2E:B9:10:88:6A:67:3C:48:F4:D6:4C:E3:DC:2F:0F:97:E0:C3:D3:32
Certificate issuer:       /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial:       136C706A4A47E17D0C5513F721E755A3CCE4C7C4
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36312e302f32342d3234203d3e203435333132.roa
Signing time:             Sun 03 May 2026 03:05:24 +0000
ROA not before:           Sun 03 May 2026 03:00:24 +0000
ROA not after:            Sun 02 May 2027 03:05:24 +0000
asID:                     45312
IP address blocks:        202.81.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
                          rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6c:70:6a:4a:47:e1:7d:0c:55:13:f7:21:e7:55:a3:cc:e4:c7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
        Validity
            Not Before: May  3 03:00:24 2026 GMT
            Not After : May  2 03:05:24 2027 GMT
        Subject: CN=2EB910886A673C48F4D64CE3DC2F0F97E0C3D332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:12:9e:f2:50:8f:4b:3a:82:66:b7:a6:b7:e0:
                    c3:16:11:df:33:35:e4:e1:9e:a5:51:b3:df:1f:a9:
                    0c:10:68:3b:08:29:11:63:68:e6:99:e7:85:42:f0:
                    0e:ad:1a:04:04:4e:cc:48:8c:2f:ed:a4:c7:e2:8a:
                    85:45:1d:64:b6:dc:4a:94:85:35:7e:7c:1a:c2:c9:
                    15:40:0f:12:e9:38:8d:98:0f:73:ae:c4:a3:66:5a:
                    c2:0a:a7:cb:a6:d1:33:a3:36:82:d2:e1:db:37:54:
                    c4:c7:ff:f9:ff:fb:e3:03:7c:7f:c8:60:f7:04:64:
                    20:0f:85:b5:62:c2:81:df:f2:87:c3:6b:c6:bd:1d:
                    7d:8c:7c:82:6b:85:64:0f:67:97:37:f4:b3:9f:78:
                    f3:c3:ff:a4:34:a8:a9:e7:e6:5d:59:90:5e:d8:5f:
                    ae:84:d6:cb:a1:70:7c:c1:26:7e:d4:d1:59:41:dc:
                    e5:b6:a2:4d:3a:5d:90:f6:e8:84:2d:1d:6c:d7:5a:
                    a7:e9:75:c1:e0:d4:3e:ce:3c:c2:b1:ee:70:f9:ed:
                    bb:5b:df:bc:fa:15:03:ae:f3:34:1f:49:01:18:cf:
                    a1:75:71:33:7c:82:b4:86:ba:26:77:51:5e:48:96:
                    ee:7d:90:6a:93:a6:3d:a5:93:91:9b:50:4f:1b:7d:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B9:10:88:6A:67:3C:48:F4:D6:4C:E3:DC:2F:0F:97:E0:C3:D3:32
            X509v3 Authority Key Identifier:
                keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36312e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:4c:88:7d:62:3f:63:67:74:7f:57:5e:58:78:d7:4c:84:b7:
         b0:27:39:99:2f:56:45:d9:d3:6f:e9:48:d7:a3:75:44:35:5a:
         4a:4a:9b:16:19:88:10:52:16:6f:e8:0d:cf:58:52:7e:44:0d:
         cf:62:b5:b8:a1:9a:bf:10:73:26:90:e9:49:1b:ea:ec:01:2e:
         4f:72:8b:bc:7d:15:cb:a9:dc:cd:84:1f:f8:d6:81:82:0d:54:
         4f:16:43:5e:e5:76:a4:ca:5c:d0:7a:0b:da:08:f3:40:e9:8d:
         62:ca:c9:cd:85:dc:c5:11:f8:b2:b9:8a:45:84:39:9c:7a:19:
         d6:47:6f:bc:23:07:78:4d:91:07:05:e4:2e:6f:aa:45:29:04:
         a3:4d:6f:f2:e9:1d:a6:bf:44:77:a2:2b:c1:a6:be:b6:cb:d9:
         fc:b1:fc:b9:a9:03:af:dc:33:38:37:80:39:44:c7:1a:f6:e1:
         27:73:76:1c:ee:1d:49:74:16:74:fd:c8:e8:76:63:ff:de:0e:
         50:9c:bd:e8:a7:02:66:be:3e:15:c3:b6:ca:76:b3:5e:54:bb:
         ed:46:82:8f:2e:c3:b0:52:98:ba:be:17:6f:e2:b8:ba:7c:06:
         ff:00:f8:72:cc:2a:10:23:db:7d:8d:e1:b6:89:14:f6:74:4e:
         d2:9f:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:45 2026 by rpki-client