Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131322e302f32342d3234203d3e203435333235.roa
File:                     3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=
Subject key identifier:   B6:AD:CE:6D:2E:0F:98:AF:D6:D4:68:9C:6D:35:0F:24:0D:85:65:42
Certificate issuer:       /CN=D35962E8F839460DC5283C472D81ADB87BBD3992
Certificate serial:       15A74BD70DAE75BC089513B4ABA094583C58ED88
Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131322e302f32342d3234203d3e203435333235.roa
Signing time:             Sun 03 May 2026 03:11:57 +0000
ROA not before:           Sun 03 May 2026 03:06:57 +0000
ROA not after:            Sun 02 May 2027 03:11:57 +0000
asID:                     45325
IP address blocks:        202.43.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl
                          rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a7:4b:d7:0d:ae:75:bc:08:95:13:b4:ab:a0:94:58:3c:58:ed:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992
        Validity
            Not Before: May  3 03:06:57 2026 GMT
            Not After : May  2 03:11:57 2027 GMT
        Subject: CN=B6ADCE6D2E0F98AFD6D4689C6D350F240D856542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:1b:75:d2:8b:05:75:0a:c7:76:9c:c0:e4:
                    46:29:d0:38:9f:e7:7e:d6:82:63:b3:cf:40:d1:32:
                    07:0b:3e:77:9c:25:f6:bf:cd:1d:c1:b9:4f:33:0c:
                    73:46:10:28:9b:0c:df:d1:eb:57:d5:30:b6:07:ae:
                    7f:80:4a:80:e2:bd:ff:bd:1b:f8:5e:f3:21:68:35:
                    94:04:ef:58:c6:6e:cb:96:79:8c:3e:7e:77:d2:5a:
                    b5:e0:75:24:2d:71:e6:2c:6a:18:3b:43:fe:fa:51:
                    b3:bd:29:eb:98:05:c9:d3:d0:aa:04:4b:7a:15:0c:
                    b0:85:e5:0c:6d:dc:b3:da:d7:d1:ee:be:de:72:87:
                    cb:ee:7f:da:44:0f:fd:4a:22:5b:c2:fe:0f:c8:ac:
                    05:d8:95:b5:86:fd:0b:ad:45:64:12:b0:19:d9:af:
                    9b:58:58:88:ab:60:a0:8f:9e:e4:b8:5c:59:b6:09:
                    dd:08:77:23:83:d2:2b:9b:05:bc:c9:4a:a0:b7:9d:
                    76:ac:24:64:4c:19:5f:19:4d:bc:96:54:a5:04:d1:
                    9c:b7:3b:72:8f:c1:33:43:9c:e6:57:cc:ba:ef:52:
                    78:e0:e4:b2:c6:88:e5:27:c7:52:3a:fc:a4:68:8e:
                    a3:81:6f:36:21:95:b4:ca:6f:da:04:6f:39:31:4b:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AD:CE:6D:2E:0F:98:AF:D6:D4:68:9C:6D:35:0F:24:0D:85:65:42
            X509v3 Authority Key Identifier:
                keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131322e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:46:d1:0b:7c:a9:0a:c8:1a:c6:c8:56:37:1f:82:a6:09:cd:
         62:95:39:fe:fa:6d:d6:9a:01:d5:9c:72:50:80:6c:86:41:af:
         34:32:2c:a8:89:a9:d5:77:3a:11:f0:c4:ac:b3:7f:71:fb:a7:
         65:11:d8:94:38:56:15:26:d6:54:c8:62:95:29:22:0d:6e:1f:
         85:47:7a:2f:7c:86:45:54:bf:26:45:84:f0:ec:e2:cf:a8:11:
         5b:8e:58:3a:b1:cc:72:79:b3:3a:47:a2:8c:12:53:95:21:e8:
         5c:ec:01:57:04:6f:c1:7f:99:eb:c6:84:1d:28:84:bb:5d:28:
         16:75:fd:0a:95:13:68:e4:ff:b1:17:35:99:42:51:50:dc:44:
         6d:63:3e:82:62:dc:10:60:72:ee:25:96:30:a1:37:df:49:f7:
         23:3b:b5:56:90:7f:5a:c0:96:88:85:82:d0:80:1c:ec:01:9d:
         4c:45:86:fa:57:60:c6:5c:35:b2:4a:81:ee:88:f5:55:c5:69:
         ed:6b:4e:7a:b5:60:bb:08:2b:66:ce:46:0e:c1:84:5d:1d:7e:
         76:71:e2:d2:75:6d:7a:c5:b7:f7:c6:f6:c6:77:1e:3e:15:05:
         da:0a:86:69:45:79:33:0f:67:cd:0c:56:e7:81:6a:e9:47:c9:
         7e:f0:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:15 2026 by rpki-client