Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35352e302f32342d3234203d3e20313430343735.roa
File:                     3230322e31302e35352e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier:          qdsWQTeruYCWO1TWsZRfYq1Fijj3AYRnr4xjjtmwgSY=
Subject key identifier:   E2:C4:9E:D2:CF:F7:50:1C:2B:9A:B9:41:5B:E4:05:C8:70:36:BA:21
Certificate issuer:       /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial:       32A93727EBF95D2566DDFAF0A80748F432526254
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35352e302f32342d3234203d3e20313430343735.roa
Signing time:             Sun 03 May 2026 03:08:21 +0000
ROA not before:           Sun 03 May 2026 03:03:21 +0000
ROA not after:            Sun 02 May 2027 03:08:21 +0000
asID:                     140475
IP address blocks:        202.10.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
                          rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a9:37:27:eb:f9:5d:25:66:dd:fa:f0:a8:07:48:f4:32:52:62:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
        Validity
            Not Before: May  3 03:03:21 2026 GMT
            Not After : May  2 03:08:21 2027 GMT
        Subject: CN=E2C49ED2CFF7501C2B9AB9415BE405C87036BA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:1e:6d:4f:2c:f9:5b:3b:f5:f7:62:25:8f:
                    8f:60:80:ed:43:c6:f9:6b:86:8e:c4:da:10:cb:75:
                    57:22:8f:0b:8e:39:fb:d2:3c:f1:59:64:79:04:e0:
                    b6:8d:bb:88:12:90:25:33:c5:1c:30:12:54:c3:1b:
                    2d:55:5e:50:09:22:a8:70:9f:98:5a:09:5a:5d:96:
                    85:a9:54:94:ef:2c:4c:94:a4:5d:77:da:40:67:64:
                    6c:3c:ad:1a:26:a6:f3:b6:42:42:de:b8:17:7c:ac:
                    e2:bb:97:76:4c:cd:96:22:e2:8d:de:5e:8a:2e:75:
                    54:79:1e:b0:d1:b5:8b:36:2c:8d:98:54:88:69:27:
                    c2:ca:f9:e9:e4:75:a9:87:d0:56:4d:aa:b0:68:43:
                    52:da:e9:7d:f6:74:8e:8c:c8:d1:63:a4:52:37:55:
                    a7:d7:84:39:82:ed:e2:84:d7:13:f1:69:bf:66:e9:
                    44:92:42:6e:57:da:c2:58:5f:c1:7a:96:04:d2:af:
                    87:e5:48:1e:e1:1d:8d:58:58:78:e5:47:71:de:19:
                    cd:b8:60:29:d7:e6:8c:fe:d5:f7:e2:71:d1:ec:e0:
                    63:fc:ce:24:f9:43:b2:fa:b7:53:3d:40:cc:21:0f:
                    1a:95:5c:c4:45:69:be:c8:5f:26:41:bc:0b:de:e2:
                    5e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C4:9E:D2:CF:F7:50:1C:2B:9A:B9:41:5B:E4:05:C8:70:36:BA:21
            X509v3 Authority Key Identifier:
                keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35352e302f32342d3234203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:14:16:1c:17:71:2e:24:b8:ec:51:7a:6a:b1:57:7f:38:0b:
         9f:fd:13:cd:13:f6:ad:d8:9d:08:bc:47:2b:96:df:8f:a4:87:
         76:f2:99:73:5e:8a:cc:a0:bf:80:82:2b:d9:7b:e9:e3:a3:95:
         23:01:1b:e6:c7:b9:82:db:be:fd:7e:da:a7:de:56:8b:d0:63:
         07:39:6e:9b:e7:91:34:9c:3d:d3:05:c4:fb:02:74:f4:e0:52:
         3e:8c:a0:7a:bc:df:7e:83:98:0a:16:05:50:73:91:e8:20:0c:
         29:d8:06:70:46:23:36:62:3b:a8:75:5b:db:51:d3:60:2c:11:
         ea:1a:28:ce:fe:47:5c:f7:e4:ee:8f:28:c8:3c:43:2f:2d:0d:
         1c:0d:11:48:71:08:a4:19:16:39:90:29:2b:4b:5f:42:a0:7f:
         d2:e8:75:d3:79:cf:79:83:c5:ff:19:81:db:27:c3:5c:35:c3:
         73:25:48:33:8c:d8:56:f6:20:21:2b:2a:68:c7:30:1d:29:40:
         a1:e4:ab:1c:4d:20:60:d0:a5:4b:2f:da:cd:b3:d7:80:eb:43:
         af:36:14:e8:63:7c:84:28:1a:04:b5:29:9d:59:6c:e7:df:e2:
         55:a7:29:01:f4:d1:18:88:45:c0:34:aa:41:38:e2:30:c4:3c:
         b4:fc:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:59 2026 by rpki-client