Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e36322e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          w275dcR9CW07x1fc5CpNq23n+WxUwB1RsjR1eseeEvE=
Subject key identifier:   83:C4:A6:DA:DE:19:78:D4:2F:A0:5C:B0:8C:EB:F5:B4:30:CC:C6:9F
Certificate issuer:       /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial:       1480E69B99D63B24898F69F5142DCFC9316FA49B
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e203435333132.roa
Signing time:             Sun 03 May 2026 03:05:25 +0000
ROA not before:           Sun 03 May 2026 03:00:25 +0000
ROA not after:            Sun 02 May 2027 03:05:25 +0000
asID:                     45312
IP address blocks:        202.81.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
                          rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:80:e6:9b:99:d6:3b:24:89:8f:69:f5:14:2d:cf:c9:31:6f:a4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
        Validity
            Not Before: May  3 03:00:25 2026 GMT
            Not After : May  2 03:05:25 2027 GMT
        Subject: CN=83C4A6DADE1978D42FA05CB08CEBF5B430CCC69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:ee:17:46:0b:8e:63:b4:7e:de:ae:1a:47:
                    e8:c3:66:60:2a:bf:98:f9:04:25:68:f1:ac:04:a5:
                    13:f1:6a:9f:c7:27:6e:58:44:d5:f4:51:bb:75:48:
                    19:a9:6f:90:eb:83:70:69:83:24:ba:77:35:bb:46:
                    f5:4d:4b:dc:73:20:e0:3b:c4:9a:de:fd:69:64:24:
                    c8:b3:de:89:b2:20:74:d5:79:31:f7:23:29:4c:f6:
                    c5:3d:65:4f:3d:ad:ba:46:ed:9a:1b:0f:36:c7:24:
                    4b:71:92:a2:3a:b4:32:a6:68:42:e7:e5:1a:d0:a7:
                    bc:52:0d:e2:e2:be:68:2d:c1:1d:70:9f:b9:ea:74:
                    51:f0:e7:17:a8:76:04:37:b6:92:0a:d3:87:65:63:
                    5e:11:22:c4:fa:5e:0e:52:6f:14:82:73:8e:3b:25:
                    da:ad:cf:5b:7e:2c:b5:72:5e:52:36:a9:56:c9:e9:
                    60:0a:31:f4:ba:7d:14:d5:ec:2e:ca:f1:86:d1:7e:
                    fa:73:dd:1b:79:ef:e3:ad:1d:1f:ca:c0:5e:c4:bf:
                    81:7a:b4:f3:d7:aa:f2:ef:d8:a8:60:65:53:fe:60:
                    e5:6a:b5:1a:f2:2a:6a:16:69:08:42:ae:1d:56:ab:
                    b5:0a:30:46:5b:02:29:71:aa:e0:1c:37:66:83:b5:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C4:A6:DA:DE:19:78:D4:2F:A0:5C:B0:8C:EB:F5:B4:30:CC:C6:9F
            X509v3 Authority Key Identifier:
                keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:d0:8d:7f:40:2d:03:12:85:24:93:ab:8b:41:3c:71:46:
         f5:47:f5:8c:c2:ef:5c:46:85:74:6b:a3:a0:24:9c:6f:35:2c:
         90:8a:05:3b:ce:30:32:9d:8e:80:35:da:fc:06:fc:c4:22:95:
         a1:10:ec:fa:d0:7b:56:56:67:5b:7b:b8:10:ef:87:5e:70:d7:
         12:a6:26:3e:b3:41:ce:8f:58:06:6e:2d:03:2e:8c:14:e3:a1:
         51:89:97:cb:65:9a:0f:97:ea:62:b7:f9:cf:ab:2d:f4:08:f2:
         89:b6:4e:f8:69:38:77:23:88:43:47:5e:3b:77:d1:8c:0f:7a:
         7d:b8:c3:7c:cc:16:e0:cf:44:2d:f9:3b:58:d2:75:ee:fd:53:
         4a:80:c3:ae:ff:29:a9:88:1b:28:c4:4f:c8:55:79:5a:49:48:
         40:cc:8e:14:9f:a7:47:1f:09:e1:96:e3:bd:52:77:e9:06:11:
         1d:9b:56:69:20:7f:95:5c:e8:0f:e2:16:01:5b:00:97:f9:72:
         c8:66:b7:eb:a2:c2:7a:38:63:47:eb:28:0b:19:ca:9d:9b:1e:
         89:74:7d:d2:dc:df:9a:42:8a:10:53:dc:62:67:45:40:f2:be:
         52:c6:70:93:58:87:f6:33:b0:36:b1:09:35:ae:23:5e:d4:05:
         3e:ed:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:53 2026 by rpki-client