Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e36322e302f32342d3234203d3e20313530353031.roa
File:                     3230322e31302e36322e302f32342d3234203d3e20313530353031.roa (raw, json)
Hash identifier:          tKU9vMX6ERiAzPtOnVIoXuRO6PtJKEhX10u3899vlT4=
Subject key identifier:   73:0F:D4:8F:36:0D:F5:21:54:29:FA:F7:F8:D7:6A:6F:80:4F:F7:87
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       7C40E82621566B8D3E985252FFEE0793E19AF03C
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e36322e302f32342d3234203d3e20313530353031.roa
Signing time:             Mon 23 Mar 2026 09:02:19 +0000
ROA not before:           Mon 23 Mar 2026 08:57:19 +0000
ROA not after:            Mon 22 Mar 2027 09:02:19 +0000
asID:                     150501
IP address blocks:        202.10.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 15:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:40:e8:26:21:56:6b:8d:3e:98:52:52:ff:ee:07:93:e1:9a:f0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Mar 23 08:57:19 2026 GMT
            Not After : Mar 22 09:02:19 2027 GMT
        Subject: CN=730FD48F360DF5215429FAF7F8D76A6F804FF787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:5c:cf:ef:65:d0:a9:ca:3d:fd:b8:20:41:
                    95:75:37:08:11:28:0c:67:2a:d4:2e:43:6d:a2:14:
                    f0:cc:8f:0f:c2:55:46:33:e1:a9:a0:e8:ac:f1:10:
                    77:89:9a:9c:93:7b:53:5e:c7:48:09:0e:a9:19:30:
                    34:eb:6e:15:b1:35:b8:e2:a7:84:8c:75:67:bb:a2:
                    d8:c2:58:64:45:9a:9f:19:ce:60:de:eb:db:0d:a8:
                    d4:fa:7e:05:49:5b:ac:df:eb:71:9b:9f:29:8c:ba:
                    fc:2c:44:f3:32:72:ea:e2:d1:65:c0:14:5e:9b:4c:
                    c2:b2:b5:73:be:6a:9a:a4:fa:c0:94:60:98:8c:51:
                    e3:a6:7e:11:2c:44:33:a3:cc:9f:9c:f2:08:a1:57:
                    c5:e6:e1:3a:75:54:bb:89:eb:8d:07:cb:3a:f8:3a:
                    28:4a:fa:52:3c:5e:f1:25:cb:42:61:7f:41:63:75:
                    fd:77:c2:46:a2:fe:31:f4:44:30:c0:9b:bd:ba:97:
                    fa:d2:0f:c2:41:82:92:10:d4:02:8c:85:ef:9b:23:
                    9f:9b:46:7e:d5:4c:94:3b:87:c2:6d:46:bf:d9:ab:
                    9e:48:68:a4:ad:89:70:ac:b6:cb:0e:8f:89:be:1a:
                    08:26:b4:7b:e7:34:0e:00:1b:da:59:b5:55:dd:f2:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0F:D4:8F:36:0D:F5:21:54:29:FA:F7:F8:D7:6A:6F:80:4F:F7:87
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e36322e302f32342d3234203d3e20313530353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:97:60:48:83:26:b3:89:21:3d:9f:10:80:e8:22:a0:c4:77:
         65:89:94:89:96:d1:84:25:ae:4c:5e:fd:71:28:78:33:31:4f:
         6e:8f:54:ff:73:bd:55:20:33:16:53:2b:24:34:d6:ed:16:00:
         38:fd:36:ea:e2:f4:21:aa:be:cf:e0:3a:6d:a4:07:44:9b:44:
         6a:0c:1b:aa:2a:d6:d2:11:d6:92:e0:9b:00:a9:a7:f8:18:ab:
         31:e1:63:58:83:60:e7:0c:d1:c0:10:18:ec:13:77:44:0e:56:
         a3:67:33:0b:66:a0:0b:1a:24:49:83:8a:05:fc:b0:45:fe:7d:
         c5:9c:9b:bc:c3:eb:23:36:ac:3b:d8:1d:fa:15:78:ce:40:55:
         e8:99:31:2d:22:e3:94:ab:f2:3a:4e:1f:e2:90:11:50:3b:a0:
         52:70:a4:37:05:93:1d:74:de:02:6e:7a:8e:4d:e2:a3:05:ba:
         e9:93:cb:08:17:83:60:67:03:1a:15:75:3e:7e:b0:b9:8a:7e:
         4c:c5:cd:29:61:1d:76:b3:5d:92:8d:e6:5f:4f:5a:c6:b1:ca:
         26:29:e4:f0:9a:a7:69:10:97:d5:f7:7f:ea:42:19:53:14:97:
         1a:0a:7b:0c:05:39:e5:ee:ba:7d:89:de:5b:3b:ec:52:0c:4d:
         f9:5c:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 19:06:35 2026 by rpki-client