Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/3230322e36312e39382e302f32332d3234203d3e203234353337.roa
File:                     3230322e36312e39382e302f32332d3234203d3e203234353337.roa (raw, json)
Hash identifier:          NCgxViu3PZp4P1Zo/9Bj21AhLCE0vj8q1oF29Jx6iTY=
Subject key identifier:   FF:99:96:69:8A:96:97:2C:DA:97:CD:CB:69:67:9F:AB:03:C0:E8:F4
Certificate issuer:       /CN=2FE92EE6A0830333094A5215AEFF4EB0217E3EFE
Certificate serial:       7D505C004CCD611A68F7F973CDF645AB56C4FC87
Authority key identifier: 2F:E9:2E:E6:A0:83:03:33:09:4A:52:15:AE:FF:4E:B0:21:7E:3E:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/3230322e36312e39382e302f32332d3234203d3e203234353337.roa
Signing time:             Sun 03 May 2026 03:16:04 +0000
ROA not before:           Sun 03 May 2026 03:11:04 +0000
ROA not after:            Sun 02 May 2027 03:16:04 +0000
asID:                     24537
IP address blocks:        202.61.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl
                          rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:50:5c:00:4c:cd:61:1a:68:f7:f9:73:cd:f6:45:ab:56:c4:fc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE92EE6A0830333094A5215AEFF4EB0217E3EFE
        Validity
            Not Before: May  3 03:11:04 2026 GMT
            Not After : May  2 03:16:04 2027 GMT
        Subject: CN=FF9996698A96972CDA97CDCB69679FAB03C0E8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:3e:68:b4:10:32:6c:c3:da:9f:3c:8a:45:
                    9e:81:49:42:99:e3:de:dd:6b:92:be:4e:50:e4:0b:
                    22:ff:f0:f2:82:6a:c2:62:73:5e:fa:f0:dc:a5:8e:
                    81:fc:8e:04:5c:d7:3b:91:60:1a:77:cf:5a:13:5e:
                    04:0e:8b:4f:9d:70:58:d1:a0:7b:ac:88:56:cd:73:
                    f5:bb:6a:77:2f:38:a4:ed:b0:43:c8:69:23:55:c2:
                    ed:69:bb:a0:cb:7b:c1:a9:84:20:65:11:a4:00:d9:
                    e2:4a:7b:16:9a:fd:bf:89:e7:f6:0b:73:fd:f8:0f:
                    f8:46:ea:99:fa:09:e2:f2:a1:54:40:1a:66:e0:ff:
                    b1:f5:a9:04:49:a4:92:76:00:a9:e6:05:3e:3b:7c:
                    f8:30:13:41:9f:a8:1f:44:01:d3:0c:b3:e8:2a:bc:
                    40:70:56:34:8b:8d:b5:21:61:c3:69:bd:ab:80:2f:
                    3b:6d:bc:57:34:b9:35:b0:28:41:91:66:fa:7b:b5:
                    19:77:ed:27:e8:27:69:e8:3e:94:f4:c5:f4:9d:00:
                    69:be:5a:08:27:b7:a7:d3:fe:d1:a5:18:57:10:ac:
                    d2:80:25:61:41:9f:c5:1f:03:07:f9:62:ee:3f:92:
                    18:c8:43:52:c6:84:01:79:ad:14:81:f4:03:8d:4b:
                    d7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:99:96:69:8A:96:97:2C:DA:97:CD:CB:69:67:9F:AB:03:C0:E8:F4
            X509v3 Authority Key Identifier:
                keyid:2F:E9:2E:E6:A0:83:03:33:09:4A:52:15:AE:FF:4E:B0:21:7E:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/3230322e36312e39382e302f32332d3234203d3e203234353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.61.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:82:fc:5f:b1:5b:5d:9f:68:1c:a7:e4:d1:58:52:8f:7a:21:
         57:b9:10:c2:79:ce:6b:92:9c:32:4f:b3:be:19:2b:03:42:70:
         90:32:73:e2:7b:d8:7c:a2:c3:44:23:27:ac:bc:ba:1d:4c:2f:
         cc:4d:c8:0b:48:4f:c4:74:74:95:bf:2b:fd:66:67:c6:f7:9b:
         f2:98:be:eb:0c:81:b4:e2:aa:44:fc:31:82:1b:07:db:bd:59:
         56:c0:a4:d4:91:92:7b:d8:d7:56:14:29:f5:04:ac:e8:fc:d7:
         b4:43:aa:7e:fe:fd:11:83:e3:3f:ae:ee:fb:30:9b:fa:e3:11:
         12:aa:ce:e6:c9:18:65:d5:71:7d:6b:fe:af:ef:f5:17:19:6d:
         fe:3e:38:54:78:b7:05:a6:12:7b:c5:8c:a8:d3:64:ad:09:0f:
         3d:53:d7:c6:04:7a:ce:33:62:14:bc:0f:f1:58:0e:e6:b4:b8:
         f0:75:d3:07:b4:8e:5f:2a:2a:1c:98:68:38:fb:34:0f:d4:24:
         6a:52:2b:c9:fd:5d:2b:9f:e9:26:70:4a:74:eb:b5:03:cc:1a:
         bc:a5:36:ca:0a:83:f6:0a:6e:0f:07:7f:2e:a1:3e:ea:96:96:
         a9:9c:3a:f0:2b:11:91:9a:5d:f7:89:97:9f:01:59:7b:60:f4:
         d3:bd:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:36 2026 by rpki-client