Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35312e302f32342d3234203d3e20313332363334.roa
File:                     3230322e31302e35312e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier:          JKmskqrmBEKWLRqcTfgQmkJ1rpIxbXQj387cHsgkWiM=
Subject key identifier:   78:D9:9E:AA:E1:C2:74:08:5F:EC:84:50:EE:A6:C8:1B:6B:9C:DD:B3
Certificate issuer:       /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial:       448E1CDF92CB5F8973174BFC109653FB32838B56
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35312e302f32342d3234203d3e20313332363334.roa
Signing time:             Sun 03 May 2026 03:08:23 +0000
ROA not before:           Sun 03 May 2026 03:03:23 +0000
ROA not after:            Sun 02 May 2027 03:08:23 +0000
asID:                     132634
IP address blocks:        202.10.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
                          rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8e:1c:df:92:cb:5f:89:73:17:4b:fc:10:96:53:fb:32:83:8b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
        Validity
            Not Before: May  3 03:03:23 2026 GMT
            Not After : May  2 03:08:23 2027 GMT
        Subject: CN=78D99EAAE1C274085FEC8450EEA6C81B6B9CDDB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:8b:5d:42:e3:d5:50:07:5d:dd:48:32:aa:
                    0b:dc:6f:3c:15:96:3d:88:57:b8:6d:ee:43:8b:e9:
                    e6:f7:f7:c0:2b:32:f4:24:89:33:90:fd:af:f8:9d:
                    bb:97:63:3e:59:37:25:a0:72:22:f1:9e:5c:81:fd:
                    d3:b9:ac:d1:0a:5a:fe:2a:a8:1b:48:8f:47:0a:51:
                    03:68:a2:f7:2c:9d:96:72:7a:be:22:b0:a3:dc:0c:
                    0b:c8:30:24:37:11:45:81:ce:42:cb:91:54:bc:73:
                    97:cc:f9:ed:e0:f5:7d:7f:28:2a:3d:d1:80:48:63:
                    47:fc:a8:ee:b5:8f:86:b1:77:0b:d4:8a:3f:79:78:
                    eb:30:22:32:f7:94:a3:be:a2:6c:8f:ea:aa:6b:4b:
                    6e:cf:9c:83:55:86:a4:bb:e4:b4:e8:5e:61:65:94:
                    32:ca:3c:ae:16:4f:9e:bc:f1:b7:1f:bf:ed:e7:ef:
                    f0:63:0c:79:30:92:ab:2e:25:ad:07:33:c1:61:1c:
                    7d:eb:bd:f0:ac:2f:07:fa:c7:bb:92:e0:47:54:d9:
                    96:7c:96:8c:3e:fd:f6:50:62:e1:4b:10:9a:10:c2:
                    90:8e:f2:4b:3e:cd:97:3f:7f:08:9b:26:ea:cc:c9:
                    72:3e:1b:3f:3d:30:67:cf:65:2e:76:88:11:bc:c1:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D9:9E:AA:E1:C2:74:08:5F:EC:84:50:EE:A6:C8:1B:6B:9C:DD:B3
            X509v3 Authority Key Identifier:
                keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35312e302f32342d3234203d3e20313332363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:43:00:37:1c:66:5d:1e:89:b8:1d:a6:a8:3e:4d:6b:8e:a8:
         96:6a:51:00:31:d0:38:e8:1c:0d:9b:72:b1:25:27:0d:34:9e:
         d6:e9:98:d9:47:0b:e7:a3:35:ca:7b:aa:53:8c:1d:9f:b9:37:
         ca:6f:d1:53:e1:f5:61:15:03:3f:0a:1a:ae:d6:93:bf:4b:ab:
         f8:d6:ae:d1:c5:85:b6:ca:21:e6:5a:37:b5:51:fc:98:1c:cf:
         d4:c4:6d:78:4c:6c:bb:da:46:c5:3e:08:45:01:be:d4:3d:43:
         32:5c:cc:31:77:d9:9d:db:b9:cc:57:24:a1:39:ad:a8:6b:a6:
         76:d4:1d:d7:1b:7a:89:b9:bf:9d:d5:bd:72:26:57:a0:e3:f0:
         38:a9:e3:11:7e:da:c3:2e:c8:99:60:25:59:d9:13:2c:c5:da:
         bb:83:e2:20:cb:2f:1b:e8:90:d6:bc:36:4e:37:5d:e4:63:0b:
         cf:29:5a:bd:01:1d:19:86:3b:3d:6f:62:88:f1:6a:da:74:ed:
         5a:d2:1b:0d:50:04:fe:c7:70:15:4e:aa:ec:f9:af:f9:b5:ec:
         78:c2:3b:f0:6f:fa:e7:29:3b:12:45:ba:98:39:9e:68:6f:cb:
         90:68:19:22:88:5c:b8:b1:ab:64:5e:c9:f1:85:c9:82:c1:48:
         45:b4:75:50
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURI4c35LLX4lzF0v8EJZT+zKDi1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA2Q0U1RUVFRkRCNUI2NjQzQjE4QTgzRUJFMzlCM0M1
MkZGRDMwNTAeFw0yNjA1MDMwMzAzMjNaFw0yNzA1MDIwMzA4MjNaMDMxMTAvBgNV
BAMTKDc4RDk5RUFBRTFDMjc0MDg1RkVDODQ1MEVFQTZDODFCNkI5Q0REQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR1otdQuPVUAdd3UgyqgvcbzwV
lj2IV7ht7kOL6eb398ArMvQkiTOQ/a/4nbuXYz5ZNyWgciLxnlyB/dO5rNEKWv4q
qBtIj0cKUQNoovcsnZZyer4isKPcDAvIMCQ3EUWBzkLLkVS8c5fM+e3g9X1/KCo9
0YBIY0f8qO61j4axdwvUij95eOswIjL3lKO+omyP6qprS27PnINVhqS75LToXmFl
lDLKPK4WT5688bcfv+3n7/BjDHkwkqsuJa0HM8FhHH3rvfCsLwf6x7uS4EdU2ZZ8
low+/fZQYuFLEJoQwpCO8ks+zZc/fwibJurMyXI+Gz89MGfPZS52iBG8wWBhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUeNmequHCdAhf7IRQ7qbIG2uc3bMwHwYDVR0j
BBgwFoAUoGzl7u/bW2ZDsYqD6+ObPFL/0wUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDEwODViNGEtZjU3My00MmYzLTgyNWMtMWNmMGM4NzJiMTUyLzAvQTA2Q0U1RUVF
RkRCNUI2NjQzQjE4QTgzRUJFMzlCM0M1MkZGRDMwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMDZDRTVFRUVGREI1QjY2NDNCMThBODNFQkUzOUIzQzUyRkZE
MzA1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04
MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzAzMjJlMzEzMDJlMzUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoKMzANBgkqhkiG
9w0BAQsFAAOCAQEAr0MANxxmXR6JuB2mqD5Na46olmpRADHQOOgcDZtysSUnDTSe
1umY2UcL56M1ynuqU4wdn7k3ym/RU+H1YRUDPwoartaTv0ur+Nau0cWFtsoh5lo3
tVH8mBzP1MRteExsu9pGxT4IRQG+1D1DMlzMMXfZndu5zFckoTmtqGumdtQd1xt6
ibm/ndW9ciZXoOPwOKnjEX7awy7ImWAlWdkTLMXau4PiIMsvG+iQ1rw2Tjdd5GML
zylavQEdGYY7PW9iiPFq2nTtWtIbDVAE/sdwFU6q7Pmv+bXseMI78G/65yk7EkW6
mDmeaG/LkGgZIohcuLGrZF7J8YXJgsFIRbR1UA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:41:41 2026 by rpki-client