Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa
File:                     3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (raw, json)
Hash identifier:          QzYDwyPq+ZTPv+eibCiOEvPDQMFXiIE8GpKBHMdWRXQ=
Subject key identifier:   9B:84:2A:F3:0E:6B:F7:29:CC:02:19:4A:46:82:EC:97:4C:27:54:24
Certificate issuer:       /CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
Certificate serial:       48EA529FB343A4C9D94EBC58419B6C990BC2411F
Authority key identifier: 0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa
Signing time:             Sun 03 May 2026 03:16:14 +0000
ROA not before:           Sun 03 May 2026 03:11:14 +0000
ROA not after:            Sun 02 May 2027 03:16:14 +0000
asID:                     131775
IP address blocks:        202.74.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl
                          rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ea:52:9f:b3:43:a4:c9:d9:4e:bc:58:41:9b:6c:99:0b:c2:41:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
        Validity
            Not Before: May  3 03:11:14 2026 GMT
            Not After : May  2 03:16:14 2027 GMT
        Subject: CN=9B842AF30E6BF729CC02194A4682EC974C275424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:82:f4:cb:c4:a2:90:32:ce:9f:cb:03:01:
                    dc:20:c6:fc:3d:42:10:ce:60:4b:e5:64:c9:49:79:
                    10:01:87:0a:75:4b:76:64:2f:f0:0c:d2:8b:a5:90:
                    30:53:1d:d3:68:41:a1:0d:8c:c9:ce:a4:b3:2b:48:
                    b9:e0:2e:02:16:01:c3:b0:cf:f0:1a:b4:87:40:0d:
                    0e:66:6e:11:13:63:bd:a3:3a:33:81:35:02:6f:d1:
                    42:ad:65:ba:da:8a:37:74:57:6f:a7:76:9b:d4:3f:
                    51:eb:d1:b3:82:3c:ba:c5:39:5e:23:a6:5d:4c:37:
                    3d:ce:b5:b5:76:e9:76:cf:07:88:e8:1e:80:a0:23:
                    cd:b0:80:15:09:57:5e:9b:d4:49:56:df:9f:7e:11:
                    58:18:1f:ab:2e:ae:2e:90:2a:d7:86:73:65:a0:08:
                    61:f8:0b:3c:c4:81:43:31:94:16:1c:2a:50:c5:02:
                    56:eb:da:48:b4:ea:32:86:ec:4e:38:e1:80:85:cd:
                    ba:2f:ff:15:b9:0e:8f:f6:44:91:45:04:67:b4:ca:
                    48:30:8a:8d:42:20:a9:1e:90:e2:b0:ab:a0:b5:bf:
                    af:62:fe:3d:82:b6:78:74:11:d4:ae:4d:06:62:09:
                    76:36:1f:e8:55:35:28:4b:b1:f2:d1:3c:f8:b1:b0:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:84:2A:F3:0E:6B:F7:29:CC:02:19:4A:46:82:EC:97:4C:27:54:24
            X509v3 Authority Key Identifier:
                keyid:0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:e9:60:5e:45:ea:39:f4:01:d7:fc:39:77:3e:ab:42:fd:58:
         df:fc:30:d7:67:b6:15:37:74:6a:5c:8f:30:e9:be:c2:22:03:
         22:cc:08:cb:8a:61:0d:33:df:46:70:79:b1:13:af:a5:e4:4b:
         05:15:21:45:40:68:16:6f:76:3b:f9:4e:87:6d:41:d2:e8:a8:
         fe:86:b1:54:c6:bc:86:46:ab:06:98:ba:87:ed:eb:5b:ec:96:
         73:7a:09:79:bb:c5:69:3a:4c:1a:d9:b7:df:95:68:01:e4:8f:
         8d:c6:dd:27:22:4d:03:eb:c1:9f:7d:6b:4a:18:78:56:21:c4:
         a1:74:b4:1a:ae:2b:b3:91:71:8b:78:88:ba:5c:0a:b5:3e:53:
         4d:aa:69:a4:9c:3c:5d:0a:ae:8a:ec:35:b5:42:8c:20:1a:29:
         ab:13:79:b5:98:f2:26:e5:63:74:85:ee:24:31:c1:9a:6a:f8:
         4f:90:a8:00:1a:af:1e:bc:07:93:f7:ef:f3:13:20:be:00:82:
         39:42:39:cb:0f:33:00:72:98:46:93:63:21:72:ee:49:e1:0b:
         30:e7:97:fc:f5:d0:7b:b1:f2:40:4c:72:46:f0:8b:1d:64:56:
         71:2b:aa:c6:a2:cc:35:69:6c:a2:c6:4a:3e:aa:dd:ae:2b:2c:
         e6:80:50:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:12 2026 by rpki-client