Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34362e302f32332d3234203d3e2034343334.roa
File:                     3230322e3135342e34362e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier:          GvRDfAdJW9TJyBzg4/SEi0OnnH3A8k4rBT/rGJjvuf8=
Subject key identifier:   F6:D2:D8:16:9C:3E:91:C9:B2:95:27:A0:F8:04:14:73:F9:F9:1D:8E
Certificate issuer:       /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial:       253CEFE757C16604D6AA8723EA8695F80374AE08
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34362e302f32332d3234203d3e2034343334.roa
Signing time:             Sun 03 May 2026 02:36:10 +0000
ROA not before:           Sun 03 May 2026 02:31:10 +0000
ROA not after:            Sun 02 May 2027 02:36:10 +0000
asID:                     4434
IP address blocks:        202.154.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
                          rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 11:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3c:ef:e7:57:c1:66:04:d6:aa:87:23:ea:86:95:f8:03:74:ae:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
        Validity
            Not Before: May  3 02:31:10 2026 GMT
            Not After : May  2 02:36:10 2027 GMT
        Subject: CN=F6D2D8169C3E91C9B29527A0F8041473F9F91D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cd:a5:85:b8:0c:55:0e:af:ca:e1:d6:57:65:
                    21:a4:8f:84:76:9f:95:bc:cb:1e:68:ca:0f:e7:74:
                    b6:81:35:02:46:c8:7d:cb:f6:81:70:cb:87:30:fa:
                    8e:82:23:86:e8:f0:c5:52:5f:4a:9a:c1:e2:6f:65:
                    22:25:47:81:19:59:62:07:ee:c6:68:f5:bd:c0:b9:
                    46:30:16:95:27:90:6f:df:0d:42:55:f0:c8:59:d2:
                    01:0a:8d:f2:e1:61:33:44:3d:5e:c8:65:43:ca:71:
                    28:c7:eb:1b:d9:91:36:2c:ec:fd:81:ba:a8:bd:83:
                    30:8d:b5:0a:0a:5a:2f:53:fb:13:c3:26:20:bf:9e:
                    74:4b:80:de:91:4d:5d:6b:9e:be:69:65:96:b0:bc:
                    5e:27:5f:32:57:6c:ac:20:a7:f2:0b:60:04:a7:7a:
                    91:6d:3f:91:d2:eb:4b:af:f9:3f:70:66:6d:b7:63:
                    e7:c4:d4:db:0f:cf:4a:de:09:7a:08:ae:de:94:12:
                    a7:ce:28:8e:42:4d:59:1e:a6:a8:5b:9e:9a:c0:4d:
                    fd:53:6f:00:b3:d5:31:eb:e3:1f:0a:43:80:7d:01:
                    e3:5c:6f:c7:af:98:7f:5c:83:0e:b4:10:19:92:f6:
                    e8:b1:c8:65:25:23:96:33:c5:13:86:cb:21:84:26:
                    19:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D2:D8:16:9C:3E:91:C9:B2:95:27:A0:F8:04:14:73:F9:F9:1D:8E
            X509v3 Authority Key Identifier:
                keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34362e302f32332d3234203d3e2034343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:ac:8d:fe:93:fe:33:4c:6e:4e:55:e9:13:8b:a7:d1:37:e7:
         89:2c:ab:bb:ab:46:40:b9:9b:7c:d9:ff:3d:7b:fb:02:7b:82:
         97:7e:fb:ad:ea:23:ca:ba:64:3e:a1:9f:b9:00:16:2a:55:e1:
         ba:d7:f8:57:c1:89:94:92:78:a2:8d:a0:3d:a9:1d:2a:2e:21:
         3e:66:5a:79:d8:96:98:2b:1d:55:f9:6a:39:64:7c:00:05:f7:
         3c:e0:da:72:d0:be:92:56:1b:d7:f6:12:f1:c8:c6:14:d3:73:
         41:4e:c8:ce:08:b7:c8:78:8d:a7:d8:03:22:d1:66:18:5a:39:
         da:b0:c6:95:e4:22:75:33:97:d6:5d:46:37:16:a8:16:0d:64:
         dd:f7:a9:00:13:a0:de:37:59:c7:9d:ba:77:56:50:15:62:66:
         34:f6:a8:cd:cd:cf:21:f0:e6:3b:41:cd:05:15:a9:f9:26:d2:
         da:d0:95:be:be:2f:94:2e:6c:f2:b9:fc:79:6b:fb:b4:87:ca:
         b2:e0:fd:33:9d:c2:d0:35:1b:18:26:b0:9d:08:9e:fd:a5:63:
         af:0f:39:31:12:13:cc:d3:4e:2b:a0:ab:98:be:3c:81:f8:d3:
         8f:6b:b3:70:56:cf:32:5c:a9:98:e3:e5:3f:26:7c:17:f9:08:
         01:5b:a8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 15:05:24 2026 by rpki-client