Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e36322e302f32342d3234203d3e20313530353031.roa
File:                     3230322e31302e36322e302f32342d3234203d3e20313530353031.roa (raw, json)
Hash identifier:          dENlFssvXSbhibcUcmYMpj6LsZqbMhw2TzlfQilBjlw=
Subject key identifier:   23:C0:A9:12:BB:C9:1D:A8:62:A8:70:17:E4:74:BB:29:87:A8:12:BB
Certificate issuer:       /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial:       36ACF957563D4EF73AEC1DF2C79E66B548E903D5
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e36322e302f32342d3234203d3e20313530353031.roa
Signing time:             Sun 03 May 2026 03:08:17 +0000
ROA not before:           Sun 03 May 2026 03:03:17 +0000
ROA not after:            Sun 02 May 2027 03:08:17 +0000
asID:                     150501
IP address blocks:        202.10.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
                          rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ac:f9:57:56:3d:4e:f7:3a:ec:1d:f2:c7:9e:66:b5:48:e9:03:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
        Validity
            Not Before: May  3 03:03:17 2026 GMT
            Not After : May  2 03:08:17 2027 GMT
        Subject: CN=23C0A912BBC91DA862A87017E474BB2987A812BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:be:af:3a:77:7a:12:1e:05:8e:83:66:c4:
                    a7:81:64:6c:d8:1c:67:1d:51:dd:5a:3d:f3:24:37:
                    66:37:5b:22:1d:cb:82:8a:b1:82:ea:c9:ed:aa:ff:
                    44:65:b1:1a:d5:ad:86:77:99:55:f2:07:fd:c9:bd:
                    e3:80:fc:05:0d:b9:d6:ce:e7:02:fc:c6:81:10:76:
                    9a:f8:4c:77:46:fb:03:3f:a9:12:8f:b8:65:ca:88:
                    83:c9:00:ee:b8:ce:df:fd:84:36:27:12:51:05:a6:
                    e4:ce:50:75:af:ef:9e:04:1a:3c:79:35:de:58:86:
                    db:6e:fa:6a:56:ee:e6:37:e3:40:8a:48:4b:76:eb:
                    8e:52:7d:35:0d:84:95:17:5c:3e:09:6c:e0:bf:83:
                    88:8e:ca:4b:0c:f9:bd:ff:e5:ac:92:de:e3:79:d7:
                    46:f8:fa:05:34:cc:cb:31:b5:0e:65:16:28:df:e3:
                    6f:63:45:fe:34:b1:be:69:79:ea:5d:7e:6d:87:2b:
                    3f:53:38:a8:58:8b:83:3e:7b:b0:0a:0d:0e:a5:3a:
                    43:78:64:90:d7:38:57:75:6c:e4:55:05:ad:e7:ce:
                    fe:0c:da:3f:f2:2a:03:8c:94:fa:98:eb:ff:5b:31:
                    f2:4a:8b:0b:51:d3:a3:ae:08:3d:fd:4f:a2:f5:2b:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C0:A9:12:BB:C9:1D:A8:62:A8:70:17:E4:74:BB:29:87:A8:12:BB
            X509v3 Authority Key Identifier:
                keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e36322e302f32342d3234203d3e20313530353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:5c:33:09:03:68:02:e7:6d:db:7d:e3:c9:72:02:27:ff:5c:
         68:69:99:b0:44:1b:e9:21:f7:fc:fa:cf:56:d8:21:4e:aa:f0:
         36:e4:b3:a5:28:50:67:93:50:63:d1:91:ae:02:88:54:dd:ce:
         2c:07:f6:d6:cf:86:a6:83:f4:85:35:14:7d:cf:1b:a2:df:3f:
         0a:41:da:78:de:c1:6e:a1:c0:73:50:c4:32:63:90:41:b0:58:
         f2:25:dc:f7:01:9d:29:ba:f9:ef:94:9f:f6:82:20:2a:f5:5a:
         c1:cf:ff:12:f3:62:81:49:63:f3:15:64:84:c2:28:93:85:2a:
         4b:88:57:3d:9a:f7:4d:91:8e:76:42:7c:b8:7a:b2:19:5d:65:
         c3:98:30:f5:7b:3a:42:a0:98:0b:23:6c:bc:b0:20:39:70:c2:
         26:80:89:fb:f1:a9:0a:d0:8b:20:f4:5f:6a:6a:23:18:ab:95:
         5d:78:66:3a:ff:13:1e:73:77:b5:91:6b:e9:ee:06:2a:f9:17:
         d1:f0:fd:67:98:2f:68:6f:b2:5f:ed:5a:a5:a8:b6:8c:90:a7:
         0f:86:11:43:11:0f:38:f3:96:7c:94:1e:05:0a:f2:fc:f7:cf:
         e3:de:9d:07:18:3e:9a:1d:f1:a3:6b:40:3e:e9:07:22:5b:fe:
         91:39:b0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:05 2026 by rpki-client