Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa
File:                     3230322e3135342e33322e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier:          cCgeDdFst6wBJZznN241sxsMrFMFPoW+AwpT/Fq2ER0=
Subject key identifier:   75:DE:07:29:76:6D:2D:6C:89:8A:2C:B9:59:5A:38:AB:1B:B5:0F:E1
Certificate issuer:       /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial:       55EECECABA81A93A4CDC80B2E5348742618F2A4D
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa
Signing time:             Sun 03 May 2026 02:36:13 +0000
ROA not before:           Sun 03 May 2026 02:31:13 +0000
ROA not after:            Sun 02 May 2027 02:36:13 +0000
asID:                     4434
IP address blocks:        202.154.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
                          rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 11:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ee:ce:ca:ba:81:a9:3a:4c:dc:80:b2:e5:34:87:42:61:8f:2a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
        Validity
            Not Before: May  3 02:31:13 2026 GMT
            Not After : May  2 02:36:13 2027 GMT
        Subject: CN=75DE0729766D2D6C898A2CB9595A38AB1BB50FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:53:56:4c:e8:59:9b:3c:7c:86:b2:e1:b9:
                    b1:3d:35:06:c1:0c:21:6c:ca:a2:ea:d0:a1:cc:80:
                    c7:5f:49:78:79:7a:49:be:dd:89:3e:3c:ef:17:ac:
                    d4:a9:eb:08:c9:34:74:a3:6d:17:e0:52:8d:d5:bc:
                    ea:1f:84:f4:56:1d:f8:69:e0:15:02:d7:53:ff:e4:
                    75:81:db:e7:ea:74:dd:59:7a:1d:cc:a3:fa:7d:50:
                    27:8a:6d:86:47:8b:82:ce:c2:68:64:5c:c4:6e:7a:
                    d5:f9:e1:38:21:d6:ce:03:2e:5d:22:1f:d7:db:2a:
                    31:b9:8a:7f:81:57:a0:9a:72:10:21:49:76:c2:73:
                    2c:96:28:2f:df:15:c9:bf:c0:b9:e7:70:3a:3a:f3:
                    d5:9f:f9:bd:ea:2f:04:5f:d2:95:19:26:e9:6a:5f:
                    58:b2:dd:67:a8:0e:4b:d1:2d:9d:5f:fc:41:2e:1d:
                    49:c9:bb:74:26:28:a1:de:83:4c:a5:61:60:b1:d5:
                    c4:3e:48:c4:24:2a:c9:75:e6:6f:8a:5b:4f:61:fb:
                    d8:27:24:d6:fd:06:18:d1:47:d2:77:30:27:93:02:
                    26:7f:8e:e4:a4:37:77:80:bc:7b:72:fb:c8:84:cc:
                    76:68:d8:a6:f4:b5:3c:18:01:62:3b:29:f9:cc:36:
                    2c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DE:07:29:76:6D:2D:6C:89:8A:2C:B9:59:5A:38:AB:1B:B5:0F:E1
            X509v3 Authority Key Identifier:
                keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:e9:c4:f2:6b:50:2f:74:f7:9e:21:a8:db:1d:c6:1f:1a:6b:
         2c:57:32:a4:3c:ea:f8:28:0f:c0:f3:1b:e7:f7:d3:58:21:18:
         c4:0d:3c:e1:10:c4:5e:00:1c:98:db:35:cf:65:47:de:bb:f7:
         89:f2:99:b0:a5:45:6d:97:2f:3c:ef:56:15:5f:49:bb:5f:a5:
         9d:58:fb:37:c2:59:48:ec:35:5d:33:a1:ce:d7:33:e4:b5:bc:
         c7:ba:32:03:10:db:32:87:7f:cd:6a:0e:bd:f4:98:0f:bc:f8:
         60:31:eb:bc:96:70:45:35:1c:01:fd:4c:96:72:c2:58:2c:d5:
         59:84:cd:74:4a:b0:69:cb:d3:12:eb:cf:70:d0:29:63:67:de:
         27:51:78:f0:68:95:14:27:d7:3b:ce:71:fd:64:d5:6e:61:18:
         5e:70:18:5f:05:88:16:56:e5:4c:c6:09:26:24:6c:e6:b3:6f:
         47:e0:a4:68:0d:b1:ea:68:6f:10:b7:e3:ff:82:43:6e:66:4b:
         13:09:58:8f:54:33:80:74:eb:7e:de:a0:85:b4:b3:df:14:92:
         4d:d0:b2:d2:82:b9:eb:be:9d:20:94:cb:cd:c2:20:21:5e:cd:
         57:c6:bd:91:f6:69:f9:cc:28:33:68:ed:87:4f:aa:58:32:b6:
         3c:be:51:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 15:05:55 2026 by rpki-client