Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31362e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e31362e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          Qa/IkHGW66kaZfu/4vdbTsWYZjknbNhASXbWospQ1Hc=
Subject key identifier:   C2:FA:42:86:D6:1B:68:4F:8B:ED:64:3E:B6:0E:97:C3:7F:A8:FA:CB
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       32ABE917C9F938DA510575D829982212C3FF2F08
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31362e302f32342d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:22 +0000
ROA not before:           Sun 03 May 2026 03:12:22 +0000
ROA not after:            Sun 02 May 2027 03:17:22 +0000
asID:                     9794
IP address blocks:        202.148.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ab:e9:17:c9:f9:38:da:51:05:75:d8:29:98:22:12:c3:ff:2f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:22 2026 GMT
            Not After : May  2 03:17:22 2027 GMT
        Subject: CN=C2FA4286D61B684F8BED643EB60E97C37FA8FACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:09:e9:00:dd:a4:a2:aa:1d:37:0a:ae:83:
                    38:54:d5:c5:fd:ad:f2:9b:02:08:8e:00:ea:b1:d0:
                    03:bc:37:51:6f:a9:e6:a0:3c:e7:41:41:13:9e:34:
                    d1:a5:8d:bd:40:24:5d:46:12:23:98:d8:7b:61:5e:
                    81:0f:e5:d7:af:f9:97:0e:9d:bf:59:f5:e9:c1:30:
                    03:be:ec:0c:08:1d:8c:ca:9f:9a:7d:ce:4a:7e:6e:
                    5f:df:67:47:d0:9b:03:f7:c3:3b:c4:d9:f1:8e:7d:
                    62:e6:98:ec:f7:9a:16:ee:4a:e9:15:36:41:58:61:
                    5a:df:33:e1:17:dc:df:3e:97:51:dd:35:69:71:d9:
                    ae:f0:6e:50:ac:84:a5:e1:44:21:e2:e1:bb:d9:0f:
                    53:96:63:bc:dd:fc:a0:60:01:d9:c8:04:61:6b:6d:
                    98:a2:b4:a0:a9:8f:7e:7d:92:32:09:39:52:17:61:
                    7a:d9:1a:19:ad:f6:7a:b6:c1:8f:f1:35:f1:db:a3:
                    6f:ef:9b:a3:87:2d:96:63:8b:72:bb:53:8e:3e:61:
                    63:9d:01:e6:62:18:cb:c7:9d:59:66:7a:57:83:a3:
                    cf:7c:7c:6f:21:ba:46:1a:2d:89:69:a6:d1:ed:cb:
                    8c:68:ba:53:ed:a9:5f:98:42:37:a1:18:37:bb:5f:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:42:86:D6:1B:68:4F:8B:ED:64:3E:B6:0E:97:C3:7F:A8:FA:CB
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31362e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:1d:d6:ff:57:af:61:28:25:7e:c9:f7:ad:9b:60:f4:65:5d:
         89:ca:db:26:67:b2:b7:51:55:7f:45:87:ea:3b:81:86:82:41:
         10:8e:95:d5:9d:79:0b:ab:20:6b:09:d3:6d:a5:62:30:0e:6b:
         5c:cb:bb:1d:4c:4a:66:e8:a2:01:14:87:a8:97:9e:31:20:e0:
         81:29:39:06:38:e3:02:9d:6d:bb:30:5f:85:fd:6b:23:ad:e2:
         3b:4c:b7:db:a6:40:d8:8e:4f:28:ef:12:27:5f:10:f4:20:c8:
         c6:f4:97:73:b6:26:af:79:20:79:29:3b:a7:60:f3:68:6e:97:
         df:5d:74:0e:92:5e:77:7f:a2:85:54:66:3a:e3:b1:fb:1e:e6:
         12:63:c7:c2:44:b0:07:a8:3f:89:56:68:aa:c0:f2:3f:07:50:
         06:61:2e:ba:c0:27:d6:ad:57:96:a9:49:da:85:35:69:d9:c6:
         e7:52:c6:4a:7e:3d:c2:d2:36:1c:6f:22:0e:76:b3:b4:98:a7:
         ba:d1:bd:4a:63:60:8a:23:4a:ae:e9:07:77:59:dd:d8:b2:26:
         fb:aa:38:67:97:ed:6d:e9:1f:7e:47:3a:12:8e:27:97:1f:17:
         df:a3:62:a4:a1:31:00:d0:92:42:92:1f:4a:bf:eb:ce:0b:5f:
         fb:ec:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:54 2026 by rpki-client