Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32302e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e32302e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          wpl9lHoMhl3hCepReFRV365behhrjffvIKHdeCo6z8o=
Subject key identifier:   2C:2F:0B:C7:30:2A:2A:DB:92:7F:55:08:98:BD:C9:A3:15:EC:F1:FD
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       6E6E2B7CE71554B9790F549829F6F4A0E1DAB85E
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32302e302f32342d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:02 +0000
ROA not before:           Sun 03 May 2026 03:12:02 +0000
ROA not after:            Sun 02 May 2027 03:17:02 +0000
asID:                     9794
IP address blocks:        202.148.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6e:2b:7c:e7:15:54:b9:79:0f:54:98:29:f6:f4:a0:e1:da:b8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:02 2026 GMT
            Not After : May  2 03:17:02 2027 GMT
        Subject: CN=2C2F0BC7302A2ADB927F550898BDC9A315ECF1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:35:76:6c:10:a6:99:0d:30:f6:f5:3f:82:
                    b7:c1:f3:cf:1c:b5:5e:4a:c2:e2:09:e7:8a:c9:70:
                    25:35:f7:d2:d4:71:61:46:06:d7:3c:b2:59:f0:24:
                    51:12:72:df:d9:b3:e9:fe:4b:96:be:71:c5:af:a6:
                    03:c3:60:b6:c3:f6:6b:7a:98:20:be:ea:3a:dc:e8:
                    f7:88:84:fc:58:f5:b6:8d:af:c4:0c:40:da:21:3c:
                    b2:95:1a:c0:dd:be:90:e5:ad:4b:a3:d6:73:46:ab:
                    00:5d:ad:00:b5:3c:c0:d2:99:8c:36:59:16:73:1f:
                    5c:72:97:1b:0c:bd:74:73:db:43:0d:fc:fe:2f:39:
                    57:c4:b9:24:66:84:36:ce:1e:56:ab:d4:37:9a:b8:
                    18:fc:73:39:dc:8d:27:47:e3:66:0c:51:41:1c:08:
                    c1:26:34:d6:d5:7a:8f:95:dc:04:b0:ac:f4:8e:bb:
                    6f:6e:c0:5e:68:ee:b6:55:f3:a3:47:36:3a:f5:a1:
                    41:85:3a:0c:33:b5:25:4e:6b:aa:a2:b7:c1:50:34:
                    22:42:93:26:61:e6:1f:1a:3b:93:2c:fa:e8:9c:53:
                    5f:5f:45:5f:42:b9:b1:19:88:58:48:16:75:9c:8f:
                    12:51:79:78:ac:62:e7:4d:d8:f9:f4:65:ab:af:8c:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2F:0B:C7:30:2A:2A:DB:92:7F:55:08:98:BD:C9:A3:15:EC:F1:FD
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32302e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:97:ae:78:37:a1:d0:b2:70:1a:0f:3b:28:68:ac:64:9a:
         5d:7f:03:e1:20:1a:b5:f1:96:41:0e:e4:28:31:30:b2:45:f3:
         a2:13:38:e5:80:e7:35:8d:7e:1e:34:09:62:6d:f4:32:ef:aa:
         30:a3:48:21:59:73:c0:76:b7:84:10:f2:0c:47:41:2a:47:f8:
         03:24:3c:e2:b2:98:80:4f:b1:7e:cd:22:b4:57:4c:a6:ec:cc:
         c3:f4:f0:39:79:d2:84:ac:ab:5f:fb:06:e4:75:b5:97:38:88:
         3f:77:3f:e6:2f:19:b2:be:da:93:1c:fd:61:10:f7:61:45:82:
         f2:a7:be:9e:3b:e8:43:95:39:aa:28:72:f4:e4:34:48:fa:11:
         ef:9b:f0:58:dc:67:8f:82:10:54:cc:53:40:3c:27:c3:28:de:
         a7:e3:1c:8b:87:07:08:1d:b0:3b:26:50:f0:c0:dd:e3:9d:82:
         9d:54:b1:00:7d:d2:a2:97:5b:05:fc:66:3e:3f:e1:6e:b8:2f:
         62:cb:be:90:c4:3f:7d:bf:56:13:d9:cc:22:80:80:15:4c:1d:
         ec:e9:5d:3f:4f:b9:ed:46:82:fb:30:12:0f:64:21:f6:b9:c5:
         57:a9:c5:84:e5:ff:c7:50:1f:ee:40:3e:b0:05:09:1d:1d:dc:
         74:52:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:34 2026 by rpki-client