Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36332e302f32342d3234203d3e20313432343031.roa
File:                     3230322e38312e36332e302f32342d3234203d3e20313432343031.roa (raw, json)
Hash identifier:          VNit20zqj7HrzzhPqJaCQWs1p/vk45r49GsQ85vxRNs=
Subject key identifier:   DF:8F:7C:DD:3D:B4:9D:F0:82:EE:91:D5:4C:5E:74:2A:A0:51:3B:ED
Certificate issuer:       /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial:       02AFA6173341947BCD89C25C17CAB4C4B2A2BD87
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36332e302f32342d3234203d3e20313432343031.roa
Signing time:             Sun 03 May 2026 03:05:26 +0000
ROA not before:           Sun 03 May 2026 03:00:26 +0000
ROA not after:            Sun 02 May 2027 03:05:26 +0000
asID:                     142401
IP address blocks:        202.81.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
                          rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:af:a6:17:33:41:94:7b:cd:89:c2:5c:17:ca:b4:c4:b2:a2:bd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
        Validity
            Not Before: May  3 03:00:26 2026 GMT
            Not After : May  2 03:05:26 2027 GMT
        Subject: CN=DF8F7CDD3DB49DF082EE91D54C5E742AA0513BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:62:f0:c8:4a:67:22:bc:a4:c5:64:96:e6:10:
                    5c:87:a0:fb:fe:c4:3b:f6:4e:ce:6c:ae:e6:64:d8:
                    0a:60:c4:82:60:7a:cb:87:ae:62:cd:0b:b7:1e:f4:
                    44:c2:11:7e:08:bc:d6:e1:0c:dc:44:69:47:0e:29:
                    d3:bb:9d:2c:44:5b:f0:88:e3:f4:28:64:56:e9:2f:
                    db:55:18:00:6c:a4:1b:c2:4e:ca:6d:3f:22:bf:22:
                    e4:67:16:ff:8e:ba:7b:1e:15:13:1a:c6:f6:6e:a3:
                    0e:0c:73:19:32:66:5d:e9:55:06:27:82:da:1b:a1:
                    03:db:6f:e6:c2:1f:25:1c:a5:e9:52:e2:e6:e0:8e:
                    ec:a8:a6:a1:1d:58:3b:85:2f:b8:0e:56:4a:4c:80:
                    9d:c6:d0:aa:36:04:c1:32:06:8c:de:3e:81:20:22:
                    04:13:80:b1:c4:e9:de:7f:3f:cf:99:ba:4c:c9:76:
                    63:b1:7f:fd:bb:6e:3b:14:84:ef:93:93:1c:a1:51:
                    81:e4:4e:08:a7:cb:34:6b:5a:48:eb:0a:8e:64:f3:
                    15:58:bf:1e:cc:47:4a:64:01:59:e7:10:f7:d9:88:
                    e5:af:57:c1:c7:9b:01:2a:b9:77:5a:19:89:d2:e6:
                    e2:a4:70:3c:a9:be:38:82:0b:b2:aa:99:bc:e4:1d:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8F:7C:DD:3D:B4:9D:F0:82:EE:91:D5:4C:5E:74:2A:A0:51:3B:ED
            X509v3 Authority Key Identifier:
                keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36332e302f32342d3234203d3e20313432343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:88:32:e2:6d:41:e5:51:5d:bc:8a:fd:96:0d:a5:55:b1:ac:
         c5:fd:ee:87:bc:e3:f0:6a:b7:7f:8e:f8:57:08:08:8e:b6:85:
         b5:b6:00:f8:67:b9:04:90:00:01:9a:7a:a8:ed:60:a4:24:da:
         75:c7:b6:70:9a:2c:8e:5d:b0:c9:b1:09:5d:63:e7:8b:2e:2c:
         6a:80:7d:86:00:42:df:8a:d8:18:ca:99:ae:56:f8:1c:db:22:
         c0:60:ce:a9:62:a4:b3:3c:ab:0d:33:18:0c:56:9a:14:7b:bf:
         73:14:c5:e2:45:49:4d:54:e6:b9:57:84:25:85:10:c4:71:da:
         d8:e2:21:41:13:24:40:3d:f8:94:20:11:6a:82:da:fb:e8:9d:
         d8:5b:d8:d5:e1:ae:6c:a6:e6:79:44:db:05:8c:08:a5:7b:0a:
         a4:ac:62:c7:9c:3c:c5:61:f6:5d:75:6a:f2:f3:6e:10:2e:41:
         37:ed:14:20:ec:34:60:77:ad:70:df:b7:95:bf:77:21:45:81:
         d9:23:78:28:48:84:6e:42:ee:30:5d:dd:3e:fd:09:a6:ab:e3:
         a8:20:0a:be:5a:bc:5a:28:2e:21:74:97:43:55:b5:bc:74:ba:
         4d:38:7f:77:46:65:c8:05:9a:74:d3:30:19:8f:5d:90:29:ca:
         d0:62:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:07 2026 by rpki-client