Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136302e302f32342d3234203d3e203137373237.roa
File:                     3230322e35392e3136302e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          IXt46C7IAZTdKW2VETA5+mv7nanUTq70YOt1J9/E1Es=
Subject key identifier:   BE:34:4A:6B:3F:9F:7E:3E:B2:BC:A6:1B:8A:88:00:AA:29:EC:23:6A
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       2F8461C3F4A360BA443F1D3E96643C2A7A6C44AF
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136302e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:38:47 +0000
ROA not before:           Sun 03 May 2026 02:33:47 +0000
ROA not after:            Sun 02 May 2027 02:38:47 +0000
asID:                     17727
IP address blocks:        202.59.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:84:61:c3:f4:a3:60:ba:44:3f:1d:3e:96:64:3c:2a:7a:6c:44:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:47 2026 GMT
            Not After : May  2 02:38:47 2027 GMT
        Subject: CN=BE344A6B3F9F7E3EB2BCA61B8A8800AA29EC236A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:73:20:ca:82:43:ae:94:6c:08:b5:4e:06:
                    1c:5e:13:25:51:11:80:7f:de:c0:6f:c0:45:ca:a9:
                    62:a0:46:0c:db:b0:12:59:92:c2:eb:d2:f8:f4:55:
                    79:db:e8:a7:36:6a:a9:04:4b:73:63:4f:b8:aa:69:
                    ae:c1:77:df:1f:5d:86:93:17:5e:29:82:19:0c:58:
                    97:0b:89:01:f9:57:0e:7b:9b:f5:93:6a:2e:63:f8:
                    12:52:37:0f:c8:26:4c:96:cf:cc:f8:5d:c9:54:a4:
                    40:4c:fe:15:52:6c:fb:79:bf:b7:b3:70:94:9f:65:
                    1f:3a:35:05:6c:22:39:db:2b:19:ba:dc:97:ea:94:
                    68:d0:ec:d5:e8:df:14:7c:b2:63:2d:ea:51:56:c8:
                    af:1a:83:c9:0c:02:bc:dc:a2:76:5a:c0:49:cb:a4:
                    d7:95:6d:da:46:74:26:1c:00:a2:d1:d7:b4:c8:ae:
                    5b:96:14:d4:3f:bd:37:1b:0d:d6:c8:8c:ae:de:a6:
                    c8:0f:63:1f:90:b6:90:41:cb:52:42:80:27:9d:85:
                    2d:c0:df:d5:3f:30:43:f4:02:41:1a:f0:19:a7:f3:
                    b7:e1:3c:50:b6:ae:c0:8a:e7:95:32:0a:33:bb:bf:
                    12:4e:51:5b:82:37:c4:89:8e:56:83:09:89:53:e4:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:34:4A:6B:3F:9F:7E:3E:B2:BC:A6:1B:8A:88:00:AA:29:EC:23:6A
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136302e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.59.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:27:6a:1a:6f:87:b1:c2:99:5b:6d:4f:9c:c8:0a:32:c9:33:
         18:61:b6:59:67:81:c0:7d:aa:89:61:34:c6:19:b7:5d:50:df:
         18:a7:f0:44:be:a3:08:82:7b:30:f3:d4:ad:44:d8:99:5a:4e:
         ca:a2:d6:5f:44:64:df:6e:66:13:89:0b:78:a0:54:72:ea:a2:
         c1:2d:63:28:d3:f0:31:c9:df:c4:dd:a2:35:ce:a4:87:a6:71:
         4a:a7:8b:b6:4e:73:9e:fa:c8:77:d3:70:47:83:ab:35:15:a3:
         2d:ea:9b:ba:28:f2:4e:57:98:38:89:90:56:20:26:93:63:1d:
         0d:aa:68:7d:59:98:c5:99:fe:99:62:45:96:37:c7:80:4b:56:
         e9:0d:a5:16:ca:10:5b:fd:38:68:eb:fa:84:e0:1e:7f:f0:05:
         07:43:25:7e:e3:34:57:44:b3:95:9d:fb:ee:51:3c:7f:03:df:
         81:58:ae:d5:c5:58:b6:ad:7a:eb:db:cc:c3:a1:a3:3f:50:4a:
         32:82:54:0e:be:a5:a4:64:11:14:40:57:c4:90:20:20:43:05:
         a4:a3:3c:99:75:66:bb:9b:22:51:44:f9:82:5d:a3:5f:d8:d3:
         71:82:54:5c:a4:5f:4c:f4:ce:3d:2a:7e:27:a4:b3:37:3f:d1:
         85:1b:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:31:13 2026 by rpki-client