Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/3230322e362e3139322e302f32342d3234203d3e20313534323137.roa
File:                     3230322e362e3139322e302f32342d3234203d3e20313534323137.roa (raw, json)
Hash identifier:          ljpxwFoBuS001AFf2VfahheMrSKAxrYEXI0GppanfV4=
Subject key identifier:   A6:DF:82:AA:78:32:24:D4:DA:76:D9:F8:C6:71:5C:18:5F:B1:95:6B
Certificate issuer:       /CN=B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C
Certificate serial:       68A5C2BC6C9AC1B628E8C9E3B1A1922E0D5D5F3F
Authority key identifier: B2:6D:15:D4:D8:ED:CF:D8:BE:47:31:E1:4A:01:C0:5B:69:47:8B:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/3230322e362e3139322e302f32342d3234203d3e20313534323137.roa
Signing time:             Fri 25 Sep 2026 03:40:41 +0000
ROA not before:           Fri 25 Sep 2026 03:35:41 +0000
ROA not after:            Fri 24 Sep 2027 03:40:41 +0000
asID:                     154217
IP address blocks:        202.6.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.crl
                          rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a5:c2:bc:6c:9a:c1:b6:28:e8:c9:e3:b1:a1:92:2e:0d:5d:5f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C
        Validity
            Not Before: Sep 25 03:35:41 2026 GMT
            Not After : Sep 24 03:40:41 2027 GMT
        Subject: CN=A6DF82AA783224D4DA76D9F8C6715C185FB1956B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5b:7c:f1:e0:06:38:40:4c:19:a9:4a:7c:3b:
                    41:29:24:d8:dd:c9:db:e9:bd:e0:18:cc:9c:89:fe:
                    58:ef:e3:3c:fc:9a:33:21:d2:4e:8d:0b:61:44:c3:
                    f7:7d:59:1f:c4:ad:83:34:ce:1a:f6:86:81:cc:33:
                    b5:8d:46:f4:69:fd:81:0e:bf:7f:f0:02:4a:24:d7:
                    f4:9d:d6:02:65:c0:de:35:29:ff:52:9e:fb:eb:bb:
                    bb:30:0a:d1:91:e6:be:04:3c:6c:b9:a2:f1:70:48:
                    b6:7d:f1:e7:ae:76:83:44:68:f3:a3:7f:77:5f:3e:
                    a0:90:4f:e1:b4:e1:c9:d2:60:05:70:35:e5:0c:7e:
                    06:b8:af:f4:bf:56:f6:be:81:99:94:1e:c4:e9:8d:
                    98:b4:79:09:71:a0:5b:e4:80:c2:3d:82:c5:1f:85:
                    eb:7e:0a:d6:a5:f8:76:b9:50:23:26:76:b5:bb:73:
                    ec:4a:d7:15:95:d8:a4:51:05:3c:6b:39:d4:b5:a3:
                    fb:e1:09:fc:4c:d7:82:66:bb:54:b4:e5:6f:17:9a:
                    54:85:ec:76:65:a7:40:9f:ca:d3:b0:1a:d0:03:bb:
                    53:dd:07:ce:5d:a5:b3:54:0b:98:2a:ad:71:47:c9:
                    c3:0d:23:e7:a4:87:65:c8:d0:ac:e4:5e:7b:0c:fc:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DF:82:AA:78:32:24:D4:DA:76:D9:F8:C6:71:5C:18:5F:B1:95:6B
            X509v3 Authority Key Identifier:
                keyid:B2:6D:15:D4:D8:ED:CF:D8:BE:47:31:E1:4A:01:C0:5B:69:47:8B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/3230322e362e3139322e302f32342d3234203d3e20313534323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:72:8b:e9:32:6e:ab:cc:3f:04:3b:de:cb:bc:5b:4b:e1:1e:
         bf:67:97:77:bd:13:33:a8:6d:37:b3:34:d5:f5:ee:e1:4d:e8:
         7b:df:de:8d:da:39:61:32:3b:23:b9:18:14:77:6a:2d:39:57:
         e5:b6:90:ca:ee:34:34:bd:6c:72:0e:3b:4f:89:b0:8c:ac:2e:
         d7:69:a6:5b:42:0a:de:d1:84:fc:3d:d5:d7:b6:c6:52:55:0d:
         1a:63:05:b7:c4:ed:28:f2:87:2c:58:e3:be:ad:f0:84:98:b0:
         b8:8f:c6:db:ea:4b:7d:fd:76:0d:0d:ae:2e:2d:8a:2c:fe:e8:
         be:60:53:53:05:e1:80:a1:43:fb:83:4b:65:88:80:06:7b:1b:
         6b:cb:0e:85:28:e8:0d:39:7c:e5:df:9c:3d:7c:a5:9d:77:95:
         94:ba:2d:07:9a:03:d8:e6:77:11:97:6a:8e:7d:51:b5:34:d3:
         59:f1:3d:30:e3:86:e6:7b:2b:38:c5:e6:7a:2f:52:b2:c4:f7:
         e8:1e:6d:0e:c8:63:41:26:fe:f5:be:8c:28:b4:54:ee:05:45:
         1f:fd:32:9f:ef:46:fb:45:f2:16:ee:7e:8d:6d:e8:48:af:1f:
         b2:3a:91:43:d8:97:49:ab:9b:9c:8f:24:ae:08:a3:44:31:d6:
         7c:ca:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:00:37 2026 by rpki-client