Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3230322e34362e3135362e302f32322d3234203d3e203633343930.roa
File:                     3230322e34362e3135362e302f32322d3234203d3e203633343930.roa (raw, json)
Hash identifier:          nyADTvjCRlTj9e8fj9mC1v9a/bZDx0y80bWakXf5ms4=
Subject key identifier:   5A:5C:6D:B5:05:F9:52:9A:FC:32:80:71:1B:10:51:CA:43:C1:A8:46
Certificate issuer:       /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325
Certificate serial:       7A5D2840BE2D8D11816B851BE5A005D41A00A826
Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3230322e34362e3135362e302f32322d3234203d3e203633343930.roa
Signing time:             Sun 03 May 2026 03:06:37 +0000
ROA not before:           Sun 03 May 2026 03:01:37 +0000
ROA not after:            Sun 02 May 2027 03:06:37 +0000
asID:                     63490
IP address blocks:        202.46.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl
                          rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5d:28:40:be:2d:8d:11:81:6b:85:1b:e5:a0:05:d4:1a:00:a8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325
        Validity
            Not Before: May  3 03:01:37 2026 GMT
            Not After : May  2 03:06:37 2027 GMT
        Subject: CN=5A5C6DB505F9529AFC3280711B1051CA43C1A846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:eb:21:f1:10:19:34:73:b8:26:47:2f:ff:
                    33:4d:99:c5:d5:65:b3:e2:7f:6e:37:93:f8:d0:50:
                    1b:54:66:96:3b:e7:9f:b7:57:25:cf:a4:9c:2a:fe:
                    3b:08:54:7a:0e:d5:c0:92:65:35:11:31:82:7d:2b:
                    ce:f1:d6:1a:72:d1:d6:c5:ca:d6:b3:23:ad:c9:fe:
                    1b:da:73:e4:ed:90:8c:80:b5:6b:c1:e6:38:ab:8c:
                    5c:2a:d1:06:5a:64:a6:7d:09:04:a5:5c:03:16:03:
                    f0:64:8d:88:fc:56:e2:cf:86:fd:6d:9e:33:e0:88:
                    bc:70:d9:db:92:cc:ea:60:06:cd:4c:9c:d4:ab:dd:
                    03:e4:69:ed:2f:03:bb:32:d4:39:2a:86:fc:0b:43:
                    48:c9:4b:90:96:de:8e:94:2e:1c:ec:9e:ee:48:41:
                    96:e9:e6:9e:d1:71:80:45:c0:a8:7d:6e:83:27:22:
                    b9:6c:22:d2:54:94:eb:56:cb:e9:a1:48:d4:c3:30:
                    fc:d6:db:b4:95:56:a6:a5:aa:c6:6e:92:0f:c2:d3:
                    0c:91:eb:25:8a:59:04:56:80:9c:9d:30:c6:a7:99:
                    53:f3:21:bc:a9:d1:62:30:7d:51:92:0a:2f:7a:e8:
                    59:94:6f:f3:e4:a9:a7:4c:90:40:d9:45:9a:66:2b:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5C:6D:B5:05:F9:52:9A:FC:32:80:71:1B:10:51:CA:43:C1:A8:46
            X509v3 Authority Key Identifier:
                keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3230322e34362e3135362e302f32322d3234203d3e203633343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.46.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:3b:3b:7f:62:35:d0:2d:21:16:84:0b:0d:82:aa:8a:96:6c:
         ed:35:06:39:95:3a:46:7b:a4:10:0b:b8:01:f9:96:a1:57:0b:
         78:f5:5b:37:19:ce:0c:d2:c5:19:0a:67:5f:2a:3c:32:9e:3e:
         71:fd:d9:d4:b7:07:82:bc:6e:a6:8c:39:5d:82:b7:43:20:2a:
         e6:44:03:43:1e:55:24:50:6b:fe:1c:63:c8:c7:7e:bf:2c:f0:
         f2:12:36:94:3f:b4:a3:72:2e:ae:73:1c:5d:b0:b9:38:19:a1:
         b8:6a:9e:cc:c2:6d:ab:ea:b6:15:28:5d:c7:a2:2d:69:54:0c:
         7b:37:5e:e9:36:43:4a:ff:03:3e:41:ba:aa:ff:37:52:ef:10:
         ec:af:d8:60:10:05:14:04:e9:c4:67:22:dd:e1:7b:96:78:d7:
         1e:56:4c:d7:22:c4:60:25:04:8a:26:bc:9c:82:50:13:18:d6:
         70:f4:d1:bf:dc:3e:b0:3b:15:48:42:68:9e:31:5f:09:24:e1:
         12:8e:e4:fc:c7:07:f4:94:f6:8b:52:bf:5a:4b:48:de:bf:ec:
         f1:2c:77:9a:91:11:28:a8:e5:c1:34:5a:a2:61:8c:1c:37:33:
         b6:71:80:68:88:37:3c:c1:f4:a7:0d:2d:8c:5d:60:58:e8:57:
         08:c6:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:25:02 2026 by rpki-client