Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203435333036.roa
File:                     3230322e39312e32362e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier:          lG+HzA8wMHoU2ig02QXs7ZI69uIfguD/pnzoKRQ6g1Q=
Subject key identifier:   5F:8E:E1:F1:67:1B:EB:A1:76:D8:7C:BF:6F:BF:62:9C:6E:ED:FB:00
Certificate issuer:       /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial:       27CD2A3BD55CA63CA0E4BC7C63534044F0CF37FB
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203435333036.roa
Signing time:             Thu 29 Oct 2026 01:59:45 +0000
ROA not before:           Thu 29 Oct 2026 01:54:45 +0000
ROA not after:            Thu 28 Oct 2027 01:59:45 +0000
asID:                     45306
IP address blocks:        202.91.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
                          rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 01:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cd:2a:3b:d5:5c:a6:3c:a0:e4:bc:7c:63:53:40:44:f0:cf:37:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
        Validity
            Not Before: Oct 29 01:54:45 2026 GMT
            Not After : Oct 28 01:59:45 2027 GMT
        Subject: CN=5F8EE1F1671BEBA176D87CBF6FBF629C6EEDFB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:07:a0:e9:08:0a:f3:50:2b:ca:81:0a:f6:
                    b4:cd:9e:3f:95:fc:1e:4b:5f:0f:df:b7:cd:0b:e6:
                    70:88:dc:a4:ef:32:42:7a:28:9e:5f:99:02:13:aa:
                    f6:19:98:1c:77:a5:f3:6e:be:f8:45:e7:c2:22:62:
                    6f:5e:17:11:d0:0c:87:e5:c6:22:fa:d2:fb:f2:8e:
                    4f:97:33:49:a5:83:9f:63:e3:b2:13:99:33:0d:d7:
                    54:4e:a0:12:d3:59:ed:94:83:fa:42:fe:b0:9d:7a:
                    54:85:06:06:ec:e6:32:97:e2:52:bb:54:c8:4a:e5:
                    0b:38:84:ef:93:00:1a:46:9c:38:b0:48:27:32:0f:
                    4a:65:04:90:a6:99:76:68:a0:9f:f6:dd:33:b6:c1:
                    28:ab:d5:9f:1f:b5:a3:ac:53:17:e1:b1:81:09:ed:
                    45:63:68:91:a8:20:cd:dd:d9:93:8c:ea:ba:99:96:
                    60:16:49:5e:2a:96:e2:d0:be:62:41:28:0f:76:16:
                    84:7a:4d:f1:5a:0e:e9:ee:c0:6f:01:ae:e9:64:c2:
                    38:8b:0d:d2:bc:79:9b:e1:3a:0f:73:e7:b3:7d:25:
                    8c:30:5c:f0:b8:19:17:b4:cd:e7:32:ee:ce:a5:89:
                    e3:59:9e:ac:88:1c:b3:fa:d4:6d:0b:80:cf:3d:73:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8E:E1:F1:67:1B:EB:A1:76:D8:7C:BF:6F:BF:62:9C:6E:ED:FB:00
            X509v3 Authority Key Identifier:
                keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203435333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:84:ed:e8:2b:70:6a:50:36:cd:83:87:b9:22:ce:b9:11:
         4a:c9:6f:61:36:2e:87:94:2f:43:6e:cd:13:12:e5:e3:bd:f1:
         48:9a:a5:50:bf:ba:01:c6:8d:4d:e7:26:92:c0:c1:3b:68:34:
         fa:39:2c:9c:cf:dd:cb:22:39:c8:72:7c:41:2d:3d:4d:36:dd:
         a8:9f:76:96:9b:38:fb:ec:be:02:14:a3:19:f8:98:1b:21:9e:
         1d:4a:1b:8e:e6:85:97:3e:e1:71:22:86:ba:d9:ba:8f:d0:23:
         00:10:38:cf:c4:6e:4d:c3:40:48:f8:66:77:c8:c3:93:e4:06:
         64:4b:86:83:bb:52:1f:b9:b9:a6:4d:b4:d1:c4:ff:53:f8:f7:
         ec:f1:44:88:64:44:a2:51:1b:7e:b6:98:e6:a2:b0:d3:ec:78:
         de:80:0e:52:31:df:7e:e5:e8:b4:57:21:d5:ec:86:8f:f4:81:
         cc:a4:4b:a6:15:93:5e:02:35:d3:7d:8a:c9:8d:21:91:e7:04:
         df:11:19:19:ab:12:ad:0e:99:a2:d6:15:f7:7a:b3:39:d0:61:
         04:6d:5a:c5:57:cf:b5:6c:a8:73:d7:78:c1:9e:8a:e6:63:86:
         6e:74:52:26:1b:e5:c8:53:26:45:f2:b9:6f:dc:82:4b:34:34:
         69:d4:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:28:12 2026 by rpki-client