Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa
File:                     3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa (raw, json)
Hash identifier:          vgB910N17H/8EA61cYkEzcJDMSXZKxKOBtMQhiSpiR8=
Subject key identifier:   A4:7B:89:5B:8A:B2:AB:88:84:BD:66:95:EC:C9:60:0D:B0:0B:39:90
Certificate issuer:       /CN=175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024
Certificate serial:       36B151EAD801F2E813C4DC05DC267D5EBE1863C4
Authority key identifier: 17:5F:4B:94:FE:60:8C:AF:3A:DE:2F:B6:C5:E7:54:53:AB:2D:D0:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa
Signing time:             Sun 03 May 2026 03:11:28 +0000
ROA not before:           Sun 03 May 2026 03:06:28 +0000
ROA not after:            Sun 02 May 2027 03:11:28 +0000
asID:                     141114
IP address blocks:        202.90.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.crl
                          rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b1:51:ea:d8:01:f2:e8:13:c4:dc:05:dc:26:7d:5e:be:18:63:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024
        Validity
            Not Before: May  3 03:06:28 2026 GMT
            Not After : May  2 03:11:28 2027 GMT
        Subject: CN=A47B895B8AB2AB8884BD6695ECC9600DB00B3990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:55:2e:dd:02:9f:7a:da:a9:99:63:53:6a:
                    d0:b2:86:13:b3:c4:51:47:76:b7:81:70:f7:2c:1a:
                    1f:35:45:2f:eb:90:10:a3:45:21:82:a4:af:0a:b7:
                    6b:74:24:4b:23:df:48:84:03:39:7b:f1:4d:1d:b2:
                    97:49:1d:d1:b1:09:f8:17:dc:a0:54:23:3a:7c:49:
                    8d:8b:f7:ee:b9:04:b1:38:2e:4d:9f:09:79:01:8f:
                    7f:ce:d7:bd:4d:46:53:67:b7:d4:ab:6c:cf:55:7e:
                    fc:67:01:b1:36:52:54:ab:f7:3a:0c:34:6f:a5:a2:
                    69:37:19:fa:cd:f0:72:a0:85:4a:63:b9:70:64:b9:
                    3c:a7:f5:b7:34:e5:1b:84:19:d0:3b:02:a8:53:17:
                    81:92:3d:2d:eb:ba:98:a6:c8:20:35:d7:3d:ec:a0:
                    f7:d3:fa:b9:83:8c:4e:55:bd:44:28:47:a2:7d:f4:
                    1a:f1:6c:0d:59:bd:be:3c:03:24:35:29:6a:ee:3d:
                    72:09:b0:ad:60:2b:4b:72:8b:17:45:9b:81:bd:aa:
                    68:47:4c:04:8b:76:53:5b:00:c6:11:5f:80:be:27:
                    1c:a1:0d:cf:12:70:e8:bf:bd:ea:92:b3:20:c8:71:
                    4f:7b:6b:1c:08:ad:b6:4a:f8:e9:fc:d9:cf:7e:ac:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7B:89:5B:8A:B2:AB:88:84:BD:66:95:EC:C9:60:0D:B0:0B:39:90
            X509v3 Authority Key Identifier:
                keyid:17:5F:4B:94:FE:60:8C:AF:3A:DE:2F:B6:C5:E7:54:53:AB:2D:D0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.90.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:41:2f:37:d7:e9:f6:6c:f5:44:97:c3:09:6b:4d:68:61:26:
         02:bf:a1:ee:69:1a:28:e9:57:a9:03:61:21:bc:d5:4b:2d:5c:
         9f:f1:e1:8d:bb:90:db:b7:f7:6d:8d:2c:b4:f3:3d:f9:d0:98:
         dc:84:70:7c:ef:fb:6b:86:a1:42:68:37:8d:e5:9e:a0:3a:bc:
         1b:e4:3a:5b:e1:3c:c6:20:d1:69:ac:8d:61:d9:6b:82:ac:09:
         d7:53:a8:ca:da:d7:46:13:15:75:e5:e7:bc:5f:03:54:1c:12:
         b3:13:a9:8b:f7:c3:5e:08:30:2a:45:50:19:fd:49:2c:52:c3:
         10:be:8a:6f:9f:16:12:3b:ce:8b:c7:1d:18:e9:50:e2:9c:0e:
         e8:25:cb:4b:2c:09:6c:3e:d3:63:fd:9b:6b:28:b4:7f:00:68:
         c4:5a:2b:52:5c:4e:77:a9:34:f9:fb:e3:50:69:6a:b8:4e:de:
         26:a2:d5:f6:98:b1:5e:de:f0:ae:d0:1a:4e:90:26:8c:44:62:
         cf:b5:c8:16:78:c3:52:a5:1d:5f:f7:1a:a0:c5:5e:bf:99:f3:
         70:9d:1e:66:89:0f:12:c4:d7:95:30:50:f0:15:ba:20:95:f2:
         95:18:04:80:6b:7c:ac:49:27:13:d1:a9:12:ba:16:d0:2d:e1:
         f7:1e:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:47 2026 by rpki-client