Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
File:                     3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          1rW3LJJP4HTli11FPESZ21Q75XI7V+R6AE+xvtVtdOo=
Subject key identifier:   8B:A3:BD:99:6E:55:98:F8:7C:B1:F0:62:89:FD:DF:65:26:9E:A9:94
Certificate issuer:       /CN=51B98F16799452BDD8E00D1274ADE2150C9F4138
Certificate serial:       099E1EF7BAF4671F57BF87E9D3A3FD11B17A4BDC
Authority key identifier: 51:B9:8F:16:79:94:52:BD:D8:E0:0D:12:74:AD:E2:15:0C:9F:41:38
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51B98F16799452BDD8E00D1274ADE2150C9F4138.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
Signing time:             Sun 03 May 2026 03:09:43 +0000
ROA not before:           Sun 03 May 2026 03:04:43 +0000
ROA not after:            Sun 02 May 2027 03:09:43 +0000
asID:                     133800
IP address blocks:        202.74.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.crl
                          rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51B98F16799452BDD8E00D1274ADE2150C9F4138.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9e:1e:f7:ba:f4:67:1f:57:bf:87:e9:d3:a3:fd:11:b1:7a:4b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51B98F16799452BDD8E00D1274ADE2150C9F4138
        Validity
            Not Before: May  3 03:04:43 2026 GMT
            Not After : May  2 03:09:43 2027 GMT
        Subject: CN=8BA3BD996E5598F87CB1F06289FDDF65269EA994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:8b:e3:e1:ca:8c:c8:76:97:a9:9a:39:54:
                    96:82:a6:d7:59:60:16:04:63:0d:30:1d:a8:79:4c:
                    62:a0:79:55:5f:aa:4a:51:1a:fb:b9:2e:ce:95:b8:
                    91:80:f1:00:cf:13:dc:78:ba:88:5e:fc:5c:80:65:
                    97:44:5a:8b:1e:7f:c2:08:c9:b7:c2:96:7d:80:e6:
                    5e:53:90:4f:46:f8:a2:89:b1:51:c6:38:7a:55:e6:
                    47:b4:ba:a2:74:e6:98:89:81:a1:46:00:45:a8:33:
                    7a:ff:36:9b:6a:ca:a6:ac:25:23:70:4b:9e:5a:f2:
                    1b:01:da:de:0b:dc:fc:bb:0c:2c:2c:5b:82:ac:51:
                    79:4f:1a:ca:78:73:55:02:cf:a5:3b:4b:d8:67:ab:
                    35:d0:08:1e:f6:26:99:6f:75:3f:a7:76:b9:c8:92:
                    27:f5:db:c8:12:ac:03:92:75:15:72:3f:39:6f:19:
                    2a:5b:12:83:53:4c:1f:de:cd:5b:23:f9:04:39:a9:
                    42:6c:62:00:c6:52:60:4b:81:de:00:ad:36:d7:88:
                    06:1b:e8:7f:93:61:78:44:d7:ab:0b:1d:27:d6:c2:
                    9d:aa:90:7e:40:20:eb:31:d9:db:7d:3d:71:87:25:
                    10:69:66:6b:91:2d:21:73:f4:0f:af:5c:8a:82:e0:
                    d4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:BD:99:6E:55:98:F8:7C:B1:F0:62:89:FD:DF:65:26:9E:A9:94
            X509v3 Authority Key Identifier:
                keyid:51:B9:8F:16:79:94:52:BD:D8:E0:0D:12:74:AD:E2:15:0C:9F:41:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51B98F16799452BDD8E00D1274ADE2150C9F4138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:c4:b4:1f:57:7b:03:c5:db:54:b1:f4:15:23:fc:5d:c7:
         e2:b9:68:08:61:eb:aa:fd:9c:0a:68:16:b7:a1:a5:b0:26:93:
         12:ab:93:c1:39:9a:14:16:b4:0c:8d:54:40:de:a3:3d:65:f9:
         e9:6f:7c:95:24:72:48:ae:57:f1:ba:7d:0e:38:7d:8c:ef:8c:
         37:18:3a:e6:f5:c7:44:22:f3:97:a7:09:92:7e:d7:b7:5e:30:
         7f:4e:ef:66:e6:a4:00:23:b7:89:75:50:5b:59:21:a2:0a:c4:
         2d:cb:00:9b:94:be:6e:2e:d4:ce:18:3f:f2:e2:2f:64:b9:09:
         4f:08:dc:aa:7f:79:63:a6:cc:60:35:46:68:22:d5:98:74:dd:
         89:3a:83:d7:6a:a3:06:1b:f2:4e:42:e9:b5:43:57:8b:35:a7:
         d6:87:26:d6:59:75:2a:fa:80:d3:3b:98:7c:8d:e6:f6:fa:3a:
         24:71:d3:9c:d5:fb:23:2a:8c:66:24:58:c9:d4:3e:68:12:87:
         d9:55:0a:c2:9a:80:9d:d9:eb:ea:d8:62:53:ed:9c:54:03:62:
         f1:82:e6:b6:f0:5f:3b:92:33:09:a9:73:2f:c1:ea:a4:2f:17:
         14:4a:75:72:7e:e4:d8:fb:54:a7:ba:f6:71:54:53:01:8f:1b:
         77:86:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:14 2026 by rpki-client