Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/3230322e362e3139322e302f32332d3234203d3e20313534323137.roa
File:                     3230322e362e3139322e302f32332d3234203d3e20313534323137.roa (raw, json)
Hash identifier:          llhPojE/gec8zSvE/CC0nUYhp379OrllFCDA8ATaULY=
Subject key identifier:   ED:B8:E6:B4:F2:5E:73:45:99:0C:5B:E5:81:A6:6E:19:2F:F9:BA:37
Certificate issuer:       /CN=B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C
Certificate serial:       54CE4A0A5D42B84B0978C8DBD6E61895BB002B71
Authority key identifier: B2:6D:15:D4:D8:ED:CF:D8:BE:47:31:E1:4A:01:C0:5B:69:47:8B:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/3230322e362e3139322e302f32332d3234203d3e20313534323137.roa
Signing time:             Fri 25 Sep 2026 03:27:36 +0000
ROA not before:           Fri 25 Sep 2026 03:22:36 +0000
ROA not after:            Fri 24 Sep 2027 03:27:36 +0000
asID:                     154217
IP address blocks:        202.6.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.crl
                          rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 18:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ce:4a:0a:5d:42:b8:4b:09:78:c8:db:d6:e6:18:95:bb:00:2b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C
        Validity
            Not Before: Sep 25 03:22:36 2026 GMT
            Not After : Sep 24 03:27:36 2027 GMT
        Subject: CN=EDB8E6B4F25E7345990C5BE581A66E192FF9BA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:91:c7:96:fa:e6:da:eb:1c:44:e6:8f:4e:
                    7f:8e:57:5a:a2:4e:d0:63:fc:7b:ea:a0:56:59:77:
                    03:41:64:30:78:9f:7d:1f:b3:7b:3e:67:6e:9a:a1:
                    22:69:95:67:85:c2:bf:7b:1c:37:fe:e4:b8:8a:60:
                    a2:63:fa:f7:eb:3c:27:1d:00:88:08:37:41:5b:5b:
                    71:e3:58:5c:fd:4e:70:24:63:89:71:4c:7d:51:92:
                    3f:a6:7c:e2:17:9b:c9:26:38:e8:2c:73:6f:15:4c:
                    01:dd:bf:7d:a2:47:fa:44:93:9d:b4:94:7e:79:be:
                    10:21:69:40:6b:d9:d5:ff:c6:ef:33:8b:e0:19:95:
                    d6:61:e5:9d:37:c9:e4:e4:05:dc:cc:ed:e2:fb:15:
                    10:75:d4:20:b8:3b:0f:9b:75:25:7c:f1:61:06:ca:
                    4f:7a:5a:eb:fc:dd:cb:c3:df:82:09:3b:91:9b:a4:
                    5f:10:bd:c9:30:29:84:30:cf:bc:b5:92:2a:13:64:
                    4b:96:73:b3:75:95:32:a1:1a:0d:4c:0e:fa:f7:ad:
                    3b:8c:f4:bb:94:7e:b6:b5:aa:5a:d1:2b:0b:f2:78:
                    16:d0:d2:64:85:bc:99:7d:3c:fa:82:01:1d:3d:bb:
                    cf:ca:9e:6e:c4:d6:6d:65:a7:cb:a5:dc:4c:6c:0e:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:E6:B4:F2:5E:73:45:99:0C:5B:E5:81:A6:6E:19:2F:F9:BA:37
            X509v3 Authority Key Identifier:
                keyid:B2:6D:15:D4:D8:ED:CF:D8:BE:47:31:E1:4A:01:C0:5B:69:47:8B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/3230322e362e3139322e302f32332d3234203d3e20313534323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:73:16:03:38:28:63:8d:d0:96:95:9b:e6:0e:bb:34:10:f3:
         bb:c5:f4:9d:36:3b:e4:b3:47:59:e7:ee:5d:0b:ae:0a:d7:3e:
         17:56:88:a5:04:21:a2:ac:4b:43:38:fb:9a:38:62:79:c3:59:
         c2:f4:54:7a:b0:1b:c4:df:b3:d9:c7:7f:ff:c7:93:bc:2c:92:
         d1:e6:39:f8:d8:bb:04:4a:b1:76:b3:90:36:54:7a:15:5c:33:
         35:3f:20:a9:3f:ef:c6:fd:33:46:b2:3c:c8:f1:36:69:f1:19:
         87:bd:e4:9a:49:32:99:a9:b1:c7:ea:5c:29:cc:86:2f:e0:d0:
         a2:58:0a:a7:91:3b:c2:c7:5e:0a:57:71:47:a0:0b:03:d7:bf:
         d7:e7:27:a4:9d:f7:1a:1a:14:9d:cb:29:2c:aa:6a:10:1f:20:
         18:f9:0f:b6:70:dd:9c:d0:42:13:07:2a:2e:60:7e:1d:4f:48:
         56:12:19:83:59:ac:39:46:fe:08:99:e8:f3:25:ee:86:6e:90:
         e8:67:76:9f:ff:ca:6f:06:ea:4c:6c:c5:c7:b1:89:ec:67:24:
         2d:b8:87:ef:32:12:f4:df:ee:b1:3f:a3:bd:09:c3:fb:40:71:
         a7:47:22:7c:25:48:cb:a6:e8:f9:6d:8b:12:36:96:2e:ec:69:
         6c:64:27:bf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVM5KCl1CuEsJeMjb1uYYlbsAK3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI2RDE1RDREOEVEQ0ZEOEJFNDczMUUxNEEwMUMwNUI2
OTQ3OEI5QzAeFw0yNjA5MjUwMzIyMzZaFw0yNzA5MjQwMzI3MzZaMDMxMTAvBgNV
BAMTKEVEQjhFNkI0RjI1RTczNDU5OTBDNUJFNTgxQTY2RTE5MkZGOUJBMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQU5HHlvrm2uscROaPTn+OV1qi
TtBj/HvqoFZZdwNBZDB4n30fs3s+Z26aoSJplWeFwr97HDf+5LiKYKJj+vfrPCcd
AIgIN0FbW3HjWFz9TnAkY4lxTH1Rkj+mfOIXm8kmOOgsc28VTAHdv32iR/pEk520
lH55vhAhaUBr2dX/xu8zi+AZldZh5Z03yeTkBdzM7eL7FRB11CC4Ow+bdSV88WEG
yk96Wuv83cvD34IJO5GbpF8QvckwKYQwz7y1kioTZEuWc7N1lTKhGg1MDvr3rTuM
9LuUfra1qlrRKwvyeBbQ0mSFvJl9PPqCAR09u8/Knm7E1m1lp8ul3ExsDmCrAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU7bjmtPJec0WZDFvlgaZuGS/5ujcwHwYDVR0j
BBgwFoAUsm0V1Njtz9i+RzHhSgHAW2lHi5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDc4NjBkOWYtY2VlNS00YTBhLWE3ZmQtMjhhMGM5NDUyZDJkLzAvQjI2RDE1RDRE
OEVEQ0ZEOEJFNDczMUUxNEEwMUMwNUI2OTQ3OEI5Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMjZEMTVENEQ4RURDRkQ4QkU0NzMxRTE0QTAxQzA1QjY5NDc4
QjlDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ3ODYwZDlmLWNlZTUtNGEwYS1h
N2ZkLTI4YTBjOTQ1MmQyZC8wLzMyMzAzMjJlMzYyZTMxMzkzMjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzNDMyMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcoGwDANBgkqhkiG
9w0BAQsFAAOCAQEANXMWAzgoY43QlpWb5g67NBDzu8X0nTY75LNHWefuXQuuCtc+
F1aIpQQhoqxLQzj7mjhiecNZwvRUerAbxN+z2cd//8eTvCyS0eY5+Ni7BEqxdrOQ
NlR6FVwzNT8gqT/vxv0zRrI8yPE2afEZh73kmkkymamxx+pcKcyGL+DQolgKp5E7
wsdeCldxR6ALA9e/1+cnpJ33GhoUncspLKpqEB8gGPkPtnDdnNBCEwcqLmB+HU9I
VhIZg1msOUb+CJno8yXuhm6Q6Gd2n//KbwbqTGzFx7GJ7GckLbiH7zIS9N/usT+j
vQnD+0Bxp0cifCVIy6bo+W2LEjaWLuxpbGQnvw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:35:01 2026 by rpki-client