Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3230322e36312e3130302e302f32332d3234203d3e203435373836.roa
File:                     3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (raw, json)
Hash identifier:          Lwb/Sd018a/wGqBSdGChZ8920giGhrUJnYfpSOUiZ7E=
Subject key identifier:   C8:54:65:18:A9:46:21:A3:9D:CA:8B:BB:1A:C0:BD:CE:C0:D3:A2:03
Certificate issuer:       /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Certificate serial:       6C2626DFD037836A731117EEE952D90CE8E5B801
Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3230322e36312e3130302e302f32332d3234203d3e203435373836.roa
Signing time:             Sun 03 May 2026 03:13:25 +0000
ROA not before:           Sun 03 May 2026 03:08:25 +0000
ROA not after:            Sun 02 May 2027 03:13:25 +0000
asID:                     45786
IP address blocks:        202.61.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
                          rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:26:26:df:d0:37:83:6a:73:11:17:ee:e9:52:d9:0c:e8:e5:b8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
        Validity
            Not Before: May  3 03:08:25 2026 GMT
            Not After : May  2 03:13:25 2027 GMT
        Subject: CN=C8546518A94621A39DCA8BBB1AC0BDCEC0D3A203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:5b:60:c2:9e:24:ac:ea:12:99:d0:56:52:
                    a5:ec:61:cd:15:eb:0e:2d:d3:4a:57:ed:c6:20:c5:
                    58:58:0b:1f:ae:bd:ff:8a:f4:a7:d5:e8:03:49:40:
                    ba:25:9f:25:1a:95:f8:5f:87:df:a4:bd:6a:34:e6:
                    70:5f:b8:e8:15:c8:18:95:9c:17:7e:8b:9e:95:6a:
                    bf:94:d6:26:90:09:92:0a:04:e4:67:aa:07:99:8b:
                    b5:45:70:f7:46:72:53:24:0c:f6:e7:85:27:51:4f:
                    41:87:b5:91:f7:26:c6:eb:ab:78:e2:2a:11:45:19:
                    ec:de:75:61:a4:d9:6b:50:43:bb:cc:0e:c9:df:6f:
                    f2:28:58:5c:5a:68:d4:4d:f3:6f:bb:17:37:bc:eb:
                    d5:ec:79:6d:71:57:36:f3:46:67:a3:b3:a7:9e:f3:
                    0c:36:be:06:3b:ae:9d:63:15:29:3c:f8:4c:a6:ab:
                    53:0d:ee:9b:92:db:fa:6a:86:04:80:87:53:35:eb:
                    3d:bc:4f:79:fd:14:cb:6a:e9:ee:a4:af:d5:0c:af:
                    c7:c4:58:e9:83:8c:32:db:8b:34:b9:3c:10:aa:2a:
                    82:2a:d3:89:53:ef:29:ee:fe:48:8c:80:c5:8e:11:
                    3f:17:5c:fe:61:6b:67:09:b3:3f:1f:68:5e:e2:bb:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:54:65:18:A9:46:21:A3:9D:CA:8B:BB:1A:C0:BD:CE:C0:D3:A2:03
            X509v3 Authority Key Identifier:
                keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3230322e36312e3130302e302f32332d3234203d3e203435373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.61.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:bd:54:f3:00:3e:a8:2e:c3:ef:f0:87:6b:6b:0f:82:79:18:
         be:d8:02:8a:11:11:d9:03:51:56:80:6e:f6:73:0e:2a:4c:70:
         cc:d0:71:34:2b:5f:4b:fc:fc:11:00:76:90:90:7f:3c:13:0e:
         33:9c:44:64:75:dc:c8:12:02:be:71:30:bb:62:d1:da:ee:46:
         49:b2:25:e4:9c:1d:a7:93:fe:07:2e:eb:88:e8:2a:2d:f5:61:
         a9:31:93:9e:e3:3a:96:e0:66:4d:4f:ca:fe:32:ba:c7:1e:49:
         ad:fc:44:24:76:c7:12:54:21:aa:97:21:51:8c:fe:b7:02:e5:
         f5:59:3c:17:ac:ed:dc:28:98:45:b4:79:01:05:74:bd:07:84:
         d1:eb:da:c9:1b:d4:97:84:d0:73:4c:66:8e:33:8b:7c:9a:80:
         a4:97:ef:00:d8:8a:e7:01:5a:b4:44:b3:69:45:ff:b1:de:d6:
         00:d5:33:a4:85:1d:43:4a:a7:f7:7d:df:23:45:b4:82:51:11:
         fb:53:57:6e:da:ec:f1:7b:e4:b9:57:c6:db:ff:04:22:f7:67:
         8e:f2:fc:38:63:26:75:92:7f:0f:1f:d4:b4:18:3a:66:e2:13:
         ef:3e:24:3f:1e:55:d7:9f:a5:c7:da:c8:5c:f2:aa:a6:96:d9:
         76:90:b4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:14 2026 by rpki-client