Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32332d3234203d3e20313430343735.roa
File:                     3230322e31302e35342e302f32332d3234203d3e20313430343735.roa (raw, json)
Hash identifier:          53lk28OB7C2r9Lbn77bndS7Z8jO3dRRKei6ftjTbvh8=
Subject key identifier:   AC:14:AD:FA:41:09:35:A3:F5:D9:56:A9:79:F1:F6:1D:0B:53:29:81
Certificate issuer:       /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial:       5C01624A90EAE89100F83DD40F624761E360DB06
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32332d3234203d3e20313430343735.roa
Signing time:             Sun 03 May 2026 03:08:17 +0000
ROA not before:           Sun 03 May 2026 03:03:17 +0000
ROA not after:            Sun 02 May 2027 03:08:17 +0000
asID:                     140475
IP address blocks:        202.10.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
                          rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:01:62:4a:90:ea:e8:91:00:f8:3d:d4:0f:62:47:61:e3:60:db:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
        Validity
            Not Before: May  3 03:03:17 2026 GMT
            Not After : May  2 03:08:17 2027 GMT
        Subject: CN=AC14ADFA410935A3F5D956A979F1F61D0B532981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:4a:5d:cb:a7:12:4b:f0:be:91:fa:fd:a7:
                    ed:0f:20:9d:9c:ca:1e:3c:f6:f0:d6:7a:53:41:c1:
                    39:5e:00:bd:26:23:09:f3:5a:77:d4:9b:69:c9:cd:
                    6f:ad:4d:fd:a4:d8:91:0f:34:db:c8:d8:69:f1:1e:
                    1e:c7:c3:42:63:4f:90:24:c5:a3:53:c9:43:d7:ac:
                    d1:6d:b9:ee:04:34:54:b9:d1:15:e6:e9:14:3d:32:
                    bf:a7:c0:19:1f:b9:b8:c6:7a:8b:67:c1:4a:52:96:
                    9f:60:64:7b:a0:3b:ff:4f:e6:07:21:9e:dd:a7:20:
                    bd:7f:2b:5a:5d:84:99:c6:67:d0:76:4a:cc:37:43:
                    90:69:51:75:a5:94:3d:5f:07:a0:76:ab:b7:8c:dc:
                    3c:95:1d:43:96:c0:1c:3c:3e:fb:d8:a7:cd:07:b4:
                    7e:89:f3:7b:6c:be:85:dd:55:ca:22:b9:80:4a:aa:
                    c1:d3:97:11:f9:b1:26:43:a3:5c:4f:28:eb:1b:ec:
                    4b:f5:fa:37:5d:b1:3c:fd:05:ef:a6:3c:4e:15:b1:
                    26:1e:3b:c3:7f:02:74:0c:ea:d1:b7:36:5e:57:e8:
                    5a:47:0c:c1:da:bd:fb:cd:a0:39:89:b7:18:ff:92:
                    99:67:76:b5:06:c0:97:71:19:6b:19:c9:b5:6c:57:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:14:AD:FA:41:09:35:A3:F5:D9:56:A9:79:F1:F6:1D:0B:53:29:81
            X509v3 Authority Key Identifier:
                keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32332d3234203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:7a:c6:21:83:6d:1d:1a:ad:f0:c1:93:e1:59:41:ad:62:42:
         4d:19:59:18:be:cd:fc:fb:ca:11:3e:57:4b:de:82:d9:44:27:
         4d:e3:a8:25:9a:43:72:ab:2e:9d:95:a5:c7:67:69:ba:d3:29:
         ee:90:be:22:c4:0c:ce:61:db:30:68:6d:8e:0e:05:2b:72:62:
         3b:c4:c9:15:a7:e1:3c:c7:ea:b1:70:1d:5c:11:83:d8:05:78:
         f1:e6:72:f4:f9:46:de:9e:05:ee:f7:4a:9c:d6:82:e0:f1:ea:
         f6:7a:dc:2d:f4:65:36:4d:c9:cf:92:89:7f:2b:57:3f:fb:f6:
         4c:4a:69:be:b7:31:10:51:54:0b:4e:98:3b:5d:c7:5a:e2:87:
         a8:e2:cc:d3:9e:2e:8f:a2:f3:45:09:bb:f1:bc:1f:97:05:33:
         8b:02:fc:de:35:72:4f:52:bd:36:5c:28:dc:18:a2:60:43:d9:
         eb:7c:94:65:bf:16:1a:05:89:54:bf:54:74:77:4a:ca:f5:6c:
         b6:bd:d2:78:3b:25:2d:b7:8a:9f:7c:5a:d2:3c:b7:5e:db:1c:
         f4:7e:3c:7b:ff:20:9c:6e:f7:4d:17:cb:d8:75:9a:01:c4:a5:
         eb:bc:90:9a:01:d8:8d:84:41:94:b6:a8:91:4f:11:06:e5:27:
         da:ba:f9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:14 2026 by rpki-client