Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/3230322e362e3139332e302f32342d3234203d3e20313534323137.roa
File:                     3230322e362e3139332e302f32342d3234203d3e20313534323137.roa (raw, json)
Hash identifier:          4hwsBk2AbGR7DRul/eL1ADFcCuve7qbO/k2XHRiJNdM=
Subject key identifier:   CB:6E:75:14:E2:B0:9C:BD:F4:07:4E:DF:B5:AB:53:AD:7A:32:79:9B
Certificate issuer:       /CN=B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C
Certificate serial:       12E0DD7F62194B83044927E91E9AE4E5762A0780
Authority key identifier: B2:6D:15:D4:D8:ED:CF:D8:BE:47:31:E1:4A:01:C0:5B:69:47:8B:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/3230322e362e3139332e302f32342d3234203d3e20313534323137.roa
Signing time:             Fri 25 Sep 2026 03:40:54 +0000
ROA not before:           Fri 25 Sep 2026 03:35:54 +0000
ROA not after:            Fri 24 Sep 2027 03:40:54 +0000
asID:                     154217
IP address blocks:        202.6.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.crl
                          rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 07:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e0:dd:7f:62:19:4b:83:04:49:27:e9:1e:9a:e4:e5:76:2a:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C
        Validity
            Not Before: Sep 25 03:35:54 2026 GMT
            Not After : Sep 24 03:40:54 2027 GMT
        Subject: CN=CB6E7514E2B09CBDF4074EDFB5AB53AD7A32799B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:bd:af:d4:fa:ca:55:86:cb:d5:e8:0a:70:
                    25:c8:07:82:05:b8:bf:20:c1:b6:41:0d:e0:f1:32:
                    95:ff:1a:ed:8a:0a:11:89:63:09:00:4c:36:7c:a1:
                    99:b2:67:d9:8a:27:eb:ca:e3:29:ff:c9:f5:9a:39:
                    5e:af:3c:ca:6f:3a:2f:73:0f:37:5b:54:1f:bc:80:
                    b3:df:36:ec:b8:95:2b:7c:f6:3f:89:2f:18:3b:5c:
                    1f:f8:47:5f:8d:55:46:f4:0d:26:4e:20:10:bc:73:
                    b2:86:29:2c:df:f9:34:d4:30:52:19:6f:84:4c:3c:
                    7d:04:39:64:41:2d:ba:29:04:62:1f:2e:3b:75:23:
                    d7:00:da:0d:18:01:ff:11:27:75:69:fb:35:6c:22:
                    c3:40:62:bb:2b:35:73:d6:da:cd:9d:a4:da:1c:46:
                    fe:80:82:82:69:99:28:74:c1:67:63:52:df:6f:e1:
                    d5:11:ee:55:6e:a9:30:88:1a:fa:00:ce:2e:aa:eb:
                    35:00:73:35:80:51:b4:e4:de:11:a4:e7:e5:97:a0:
                    a0:22:00:aa:d3:e0:e1:62:85:de:f2:19:00:0b:42:
                    65:0e:28:c9:cd:0c:4c:4c:59:90:c6:7b:de:ec:90:
                    9b:eb:e9:85:3e:f7:57:bc:fc:6d:7a:f7:14:31:47:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6E:75:14:E2:B0:9C:BD:F4:07:4E:DF:B5:AB:53:AD:7A:32:79:9B
            X509v3 Authority Key Identifier:
                keyid:B2:6D:15:D4:D8:ED:CF:D8:BE:47:31:E1:4A:01:C0:5B:69:47:8B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/3230322e362e3139332e302f32342d3234203d3e20313534323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:48:d7:66:56:25:91:0c:13:ee:fc:03:04:43:c9:c8:f8:68:
         c6:3a:ed:19:53:3e:65:34:51:48:f9:df:a7:69:04:a4:93:93:
         7c:1b:5c:7f:34:67:d7:be:95:1b:34:72:90:6b:04:03:9e:c4:
         09:ae:e2:56:ad:54:75:94:4f:f8:e1:48:a0:22:16:ef:60:5e:
         aa:c2:27:9a:d9:e0:9b:9b:48:ce:33:1f:64:0d:ef:30:3e:f3:
         4c:3f:a3:a3:6d:57:d9:ca:28:a5:81:3a:24:00:54:ba:e4:60:
         ea:d8:22:e0:2e:93:e0:88:40:2b:ee:94:6f:3c:bc:d1:12:46:
         25:c4:06:eb:df:1b:f7:7e:e3:07:77:64:f0:25:12:8d:0a:c2:
         6c:34:f3:55:95:8f:d5:8b:0e:c7:eb:10:26:bd:a3:a3:30:b9:
         df:46:aa:6a:bb:57:3a:9b:22:60:74:6c:5a:c6:ef:91:fd:4e:
         02:e8:1e:5f:e6:8e:76:44:01:98:90:29:3f:51:de:e5:3e:c9:
         dc:1d:d8:70:f6:44:17:ef:29:24:fa:0c:07:80:91:9f:2f:18:
         bf:1c:a4:e7:38:b3:9e:9d:95:97:e5:df:89:19:6e:3b:68:29:
         9e:f7:d9:b7:6b:e0:58:b9:d3:00:ed:49:2d:e4:3b:84:cd:c0:
         0f:58:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:33:00 2026 by rpki-client