Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa
File:                     3230322e31302e35342e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier:          HRGD4R+yGdYBp3Or0hgA2AcbAMPLv3YF0a66aMPbpmc=
Subject key identifier:   DB:77:42:F5:2F:E1:8C:E1:BB:8E:26:24:0C:B6:00:CE:83:0A:F2:DE
Certificate issuer:       /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial:       2BB608A343D04321F82D0FF0349032786D47BED8
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa
Signing time:             Sun 03 May 2026 03:08:22 +0000
ROA not before:           Sun 03 May 2026 03:03:22 +0000
ROA not after:            Sun 02 May 2027 03:08:22 +0000
asID:                     140475
IP address blocks:        202.10.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
                          rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b6:08:a3:43:d0:43:21:f8:2d:0f:f0:34:90:32:78:6d:47:be:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
        Validity
            Not Before: May  3 03:03:22 2026 GMT
            Not After : May  2 03:08:22 2027 GMT
        Subject: CN=DB7742F52FE18CE1BB8E26240CB600CE830AF2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:60:ff:d9:b0:99:bd:6b:13:f5:81:14:e0:
                    99:35:56:1b:2b:7b:63:37:e7:5f:23:1e:39:72:07:
                    80:3b:55:79:e9:d1:00:4a:53:aa:c1:70:ee:d3:ba:
                    0b:1b:a4:39:5d:62:57:c9:35:d3:4c:25:a1:0e:70:
                    ea:49:41:ec:25:ab:28:2f:07:60:54:1d:1b:1b:76:
                    01:a3:a7:36:19:1e:d8:95:9b:2c:1a:c5:f2:1c:64:
                    3a:16:df:16:cf:b1:1c:86:34:aa:2b:d7:b1:2d:b8:
                    4f:60:1b:b2:73:c0:1f:93:6f:74:6c:68:00:24:3c:
                    3f:2b:fa:90:72:a8:77:af:ce:bb:06:63:c2:bf:a4:
                    44:b3:06:df:57:c0:48:46:87:73:b9:c1:22:01:da:
                    d7:15:2d:71:44:82:40:77:9d:21:40:b3:a2:6a:e3:
                    0a:18:a0:95:a6:98:4f:40:aa:01:59:4f:a1:d2:12:
                    20:0d:25:12:d6:38:f4:45:18:17:35:9c:be:03:31:
                    a1:d0:a9:d5:39:9c:77:df:29:05:de:8b:2c:c5:81:
                    45:7c:ba:c1:fd:f9:a6:26:04:f7:ac:1c:22:8e:3a:
                    29:98:b8:ab:2f:d6:2f:67:42:80:28:c9:f6:e9:2b:
                    43:3c:9e:d0:a1:69:37:5e:64:d0:0e:09:3e:d4:54:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:42:F5:2F:E1:8C:E1:BB:8E:26:24:0C:B6:00:CE:83:0A:F2:DE
            X509v3 Authority Key Identifier:
                keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:5c:f4:96:10:f4:15:47:3f:e5:23:0a:76:29:08:f2:d6:88:
         55:ee:60:2d:0e:c2:ca:f7:34:7d:c8:94:14:50:c0:dc:46:99:
         e3:a3:ef:88:8e:86:f8:20:34:7e:15:d5:78:7f:f7:b1:f0:2a:
         a9:8a:2f:ff:4c:ac:d5:0a:d7:59:7a:34:bd:18:63:1b:9f:aa:
         95:87:9d:60:e4:ec:d6:f7:eb:db:90:1f:2b:09:d3:9e:55:63:
         ca:87:07:ad:ec:7e:57:03:a4:bb:a6:1f:cd:78:95:73:f3:92:
         d3:c4:f1:9d:2d:94:d9:24:ef:d1:66:35:01:7c:6f:b8:50:6a:
         36:79:c9:8c:09:56:5f:dd:25:96:00:a2:ba:23:50:de:79:f3:
         b8:c6:48:ea:13:38:2d:54:fd:b3:7f:a6:1c:92:91:c8:f4:8d:
         d7:96:b1:4b:9d:97:d5:b1:25:e0:7f:3e:4a:80:90:e8:f8:a5:
         11:ba:b8:6f:96:5b:68:c4:26:e0:d5:8d:b0:20:af:ee:8f:d3:
         4d:95:1d:e8:39:dc:e0:46:73:1f:11:12:ca:12:de:61:5f:a4:
         67:52:48:71:b3:15:20:b5:a6:8d:7d:45:48:21:f8:81:91:b2:
         ba:a6:03:1d:63:aa:51:a5:5f:41:87:b0:60:9e:4a:81:3b:43:
         6a:ec:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:35 2026 by rpki-client