Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e35322e302f32332d3234203d3e2034343334.roa
File:                     3230322e3135342e35322e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier:          hPRSfLlE+zQsxCH1Ywd9i0/6ssCOVXtPrK254AiW1yY=
Subject key identifier:   BF:C2:CB:74:04:82:5F:49:25:57:22:89:88:3F:CC:75:0E:FF:FF:45
Certificate issuer:       /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial:       5688F11A4626146BF0DE40E3F47E2361B84BAD0D
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e35322e302f32332d3234203d3e2034343334.roa
Signing time:             Sun 03 May 2026 02:36:06 +0000
ROA not before:           Sun 03 May 2026 02:31:06 +0000
ROA not after:            Sun 02 May 2027 02:36:06 +0000
asID:                     4434
IP address blocks:        202.154.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
                          rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 11:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:88:f1:1a:46:26:14:6b:f0:de:40:e3:f4:7e:23:61:b8:4b:ad:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
        Validity
            Not Before: May  3 02:31:06 2026 GMT
            Not After : May  2 02:36:06 2027 GMT
        Subject: CN=BFC2CB7404825F4925572289883FCC750EFFFF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:55:82:b6:c1:03:f1:3d:8e:5b:ef:84:be:
                    27:fa:fa:c5:03:be:0f:3c:f1:d3:b2:7a:19:c0:a3:
                    26:b0:7a:28:39:38:ad:33:ef:70:42:7a:b8:70:12:
                    1e:dc:a7:26:4b:6d:77:02:3a:eb:c5:bd:ce:c8:71:
                    67:be:76:24:1f:07:3e:cd:ce:fa:60:5d:5b:a1:cc:
                    5a:6f:6f:49:aa:9a:fd:2f:12:f2:dc:ba:0e:db:26:
                    c2:bb:17:b9:c2:2a:30:3a:41:d5:dd:3f:01:e3:6c:
                    4c:ba:0f:6f:c8:02:99:97:f3:c6:6e:87:39:22:31:
                    e2:2d:c7:49:0f:be:ca:1e:a0:4c:37:48:8b:7b:ed:
                    11:fb:b7:8e:69:59:a0:c0:6f:fe:45:2f:0e:0f:67:
                    18:43:52:44:6b:7a:81:d3:e9:9b:d3:c4:37:33:22:
                    4a:12:68:2a:8b:ee:a6:6c:2a:b1:5e:dc:ae:eb:d7:
                    e8:0e:6a:6d:94:27:5e:d5:d0:dc:6b:31:05:06:0b:
                    4f:0a:91:c0:c1:cc:98:b3:85:2d:f4:0a:9c:27:81:
                    ad:d4:3c:99:ed:37:9d:86:5e:36:13:39:a4:83:0f:
                    53:f6:b8:16:c5:46:fb:8c:9c:7b:96:6a:e7:f0:c6:
                    e0:a0:6a:15:58:37:e1:c5:89:b1:b6:79:00:b4:87:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C2:CB:74:04:82:5F:49:25:57:22:89:88:3F:CC:75:0E:FF:FF:45
            X509v3 Authority Key Identifier:
                keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e35322e302f32332d3234203d3e2034343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:f3:2b:2f:d5:bf:6d:85:eb:b0:0a:82:4f:6a:f6:19:11:c8:
         79:d3:b4:72:e7:23:fb:6d:3f:48:50:be:a4:aa:fb:55:b3:2e:
         cd:4a:b2:c5:37:7f:36:7f:ed:9b:20:00:83:da:15:da:ff:f7:
         5e:18:30:c7:95:d1:2d:92:d6:7b:2b:18:d3:0f:f0:c5:ad:99:
         0f:58:98:95:85:32:51:98:14:0f:c2:1c:4e:23:e9:76:c3:68:
         ad:39:e3:fa:66:21:25:bf:b9:4d:db:54:4b:8d:27:fc:a4:bb:
         15:aa:27:a3:bf:37:7a:33:4d:ae:d9:20:7d:c7:80:86:22:f2:
         30:20:b1:fd:78:4f:ec:a3:28:ed:32:a5:ac:ad:f1:5b:28:ec:
         f6:c3:38:77:89:14:b8:f7:90:f5:ed:69:1b:58:33:c1:90:46:
         1a:7c:ee:c4:28:a9:75:db:7a:13:70:f9:89:e8:44:2d:0b:33:
         3b:de:07:03:71:10:49:cb:8b:fd:5e:3f:a1:33:55:b9:25:da:
         7b:85:f5:0b:ee:a2:b8:a1:b1:72:46:3f:25:66:c9:0e:df:a6:
         3b:5f:99:9a:e3:6c:8d:a5:90:ba:70:4c:c9:0d:7b:25:37:4b:
         7a:60:a6:a5:59:3b:2c:67:69:f2:ee:4f:50:24:9b:3a:b8:a8:
         02:01:ca:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 15:05:41 2026 by rpki-client