Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32372e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e32372e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          59bmeWWQvSArK7iRT1CiMMpDMPEAK0Oij7n0In1A8go=
Subject key identifier:   90:A2:20:24:25:E8:7A:2A:04:27:0B:2E:C0:77:06:70:83:6C:B7:2D
Certificate issuer:       /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial:       33AA40D313F5BD5890374595A2136F8B93DC72D1
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32372e302f32342d3234203d3e2039373934.roa
Signing time:             Sun 03 May 2026 03:17:11 +0000
ROA not before:           Sun 03 May 2026 03:12:11 +0000
ROA not after:            Sun 02 May 2027 03:17:11 +0000
asID:                     9794
IP address blocks:        202.148.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
                          rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:aa:40:d3:13:f5:bd:58:90:37:45:95:a2:13:6f:8b:93:dc:72:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
        Validity
            Not Before: May  3 03:12:11 2026 GMT
            Not After : May  2 03:17:11 2027 GMT
        Subject: CN=90A2202425E87A2A04270B2EC0770670836CB72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:08:67:ca:09:c3:1c:8b:1e:57:b1:65:a2:
                    54:9c:5e:ba:92:a9:3d:3b:34:4f:20:68:50:76:65:
                    1f:20:ae:84:8b:9b:08:92:d0:70:f9:db:31:24:f0:
                    53:b6:46:92:a1:b6:c5:e8:99:fe:6b:df:9b:ad:c6:
                    4a:2a:52:ff:17:93:be:da:16:85:27:b5:dc:05:fb:
                    09:a2:39:9a:46:ca:75:2d:01:5c:29:f5:d2:9c:c9:
                    72:01:cf:d4:cc:a9:13:1a:a8:4c:2f:1c:0f:99:67:
                    a0:c4:6b:b5:9d:06:d5:a7:8f:03:52:f9:68:0f:f2:
                    c9:5f:13:5d:53:f0:c0:35:c8:e5:92:5c:07:9a:f8:
                    ee:3e:bd:74:60:3e:b2:d8:59:48:a4:35:8d:f8:91:
                    5e:b1:27:af:68:2c:79:f4:b7:9c:60:40:df:12:f8:
                    ed:30:54:98:b7:f1:f1:55:02:e6:a0:49:80:7d:25:
                    c8:d3:77:a8:0b:0d:5d:5e:3d:3c:48:ce:71:65:2a:
                    81:fe:9b:de:92:ea:04:24:90:7b:f6:8f:0f:39:61:
                    49:b1:17:03:8a:6e:71:42:54:4f:a1:7c:63:56:a7:
                    a2:9a:04:b9:30:a8:21:69:a7:d5:ce:e8:0c:bd:d9:
                    17:b6:d2:a8:ca:0c:34:b9:f3:3b:18:79:62:19:4b:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A2:20:24:25:E8:7A:2A:04:27:0B:2E:C0:77:06:70:83:6C:B7:2D
            X509v3 Authority Key Identifier:
                keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32372e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:35:6b:db:6f:cc:b6:3a:1e:31:09:9f:dc:3b:e9:8e:8b:da:
         d0:5f:94:6a:4a:09:98:78:d4:f9:65:a9:0b:56:49:43:be:f8:
         45:3d:0e:27:48:34:66:1e:9d:c7:e6:e6:54:09:8d:0f:82:d9:
         99:e6:7e:60:cb:c1:37:4c:11:3a:cd:16:3b:06:22:ca:41:f0:
         20:e3:7d:0b:5c:dc:f4:f5:81:28:c3:5d:80:7d:44:e7:90:3f:
         01:43:9d:77:6e:ce:1f:85:44:74:09:ba:a0:77:3e:ea:fa:8a:
         00:a5:40:13:3a:49:92:ab:d0:01:af:ad:07:d5:31:52:48:20:
         fd:07:fc:64:47:64:4b:ce:f0:f8:cf:3e:76:2f:b3:59:d9:d8:
         28:c7:07:00:76:dd:94:75:a4:c7:0b:97:f4:4b:a3:ca:6b:ed:
         b2:1f:5b:5c:9b:f1:b4:44:f9:57:dd:06:05:2c:7a:08:21:8f:
         fa:c4:09:35:ec:6c:85:5b:09:01:51:9b:c3:88:67:cd:ab:d8:
         0e:50:c0:d9:a7:56:58:fa:01:5b:81:d3:7f:b4:20:8a:ff:d0:
         68:f1:a7:40:d6:cd:83:c8:45:51:1e:f3:80:46:21:67:7b:2f:
         ca:d0:2a:b0:3c:7a:70:8c:a3:ac:80:98:a8:be:b2:64:01:7a:
         a0:be:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:38 2026 by rpki-client