Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136312e302f32342d3234203d3e203137373237.roa
File:                     3230322e35392e3136312e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          9qJgPPKQuI4uzvIIXU0sIt5F0HbUpglYCvUSVVsC5bo=
Subject key identifier:   AC:1A:AB:10:42:33:DD:49:48:AB:B8:1F:4E:45:6D:F1:29:06:E9:5B
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       34E057B7784114D828A93C4F050000C542ABED2A
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136312e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:38:37 +0000
ROA not before:           Sun 03 May 2026 02:33:37 +0000
ROA not after:            Sun 02 May 2027 02:38:37 +0000
asID:                     17727
IP address blocks:        202.59.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e0:57:b7:78:41:14:d8:28:a9:3c:4f:05:00:00:c5:42:ab:ed:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:37 2026 GMT
            Not After : May  2 02:38:37 2027 GMT
        Subject: CN=AC1AAB104233DD4948ABB81F4E456DF12906E95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:aa:cf:72:f7:8b:64:a0:69:97:26:2e:03:
                    f1:de:41:18:20:6b:7d:bd:39:0e:01:83:51:d6:49:
                    e8:35:ed:e7:d3:24:70:e5:01:31:71:f6:0b:ce:43:
                    80:57:e1:3a:9d:82:79:f5:61:90:fc:66:22:dc:7d:
                    c0:21:21:62:2e:a5:96:5a:c6:00:5f:2d:73:68:81:
                    f6:db:3f:8c:7c:87:c2:14:69:b7:e4:93:62:51:a6:
                    66:08:82:52:7b:5f:1f:bd:95:c8:1b:a4:df:1d:98:
                    91:b3:38:c1:7a:a3:d0:3f:64:80:69:2e:07:56:d2:
                    7d:1b:10:a7:64:29:01:52:4b:08:58:b8:07:9d:37:
                    bf:45:11:60:31:18:f7:2f:d6:06:78:96:0e:02:a4:
                    f3:4a:6d:e6:91:c1:23:f5:10:df:57:e5:8d:2a:9f:
                    6f:a2:03:05:6b:69:34:ed:be:64:6c:94:e6:33:e9:
                    bc:55:b9:f0:7c:7a:03:d3:a9:fa:f2:8f:90:79:8f:
                    da:59:92:eb:a7:0e:9c:96:ec:52:c2:3b:2b:8a:f2:
                    a4:3f:1c:bd:2c:a0:3d:d4:54:20:1a:c6:7d:b5:d3:
                    68:89:ad:db:13:1a:bf:0f:70:82:07:58:30:37:87:
                    23:68:6a:7b:5a:8e:bc:4f:af:d8:4b:ae:ad:ff:6a:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1A:AB:10:42:33:DD:49:48:AB:B8:1F:4E:45:6D:F1:29:06:E9:5B
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136312e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.59.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:96:ab:50:94:2f:45:d6:6a:42:61:0c:2f:ff:e5:eb:36:b3:
         d8:89:c8:c2:93:69:12:12:d0:eb:e3:c3:3d:37:af:ab:29:5c:
         44:2c:b5:bb:88:bf:aa:06:56:db:72:a5:b1:6d:14:d2:bd:59:
         85:31:c7:c6:de:ab:48:03:b7:7e:ed:9f:d1:6b:cc:8c:53:ae:
         6b:70:a2:b6:bb:bc:68:28:2b:fd:0c:ff:51:59:25:2c:8c:0d:
         be:2a:3d:cb:e9:ca:27:01:d6:9a:87:77:bc:8a:cf:db:49:b0:
         f2:83:ca:d6:1c:b4:ef:55:6a:38:e3:60:b9:6c:34:16:a9:6c:
         21:0d:52:ea:d3:72:70:9b:3a:d1:3b:bb:b8:0f:83:ea:be:a5:
         93:4f:bb:71:57:92:4e:02:58:d1:73:52:f7:8c:ff:40:dc:56:
         d1:db:4f:9c:b4:14:3a:8a:97:c3:d1:a8:06:42:4f:64:07:3e:
         5a:03:84:7c:9f:81:31:23:6b:1e:36:43:27:9a:9c:b7:95:dd:
         f8:e0:b7:4f:f8:c3:18:f2:85:3b:d4:e4:01:84:0c:85:d9:72:
         c0:16:17:d5:e3:fd:d0:a3:46:06:66:dc:b9:8f:0b:da:62:26:
         a9:4f:32:f1:37:0d:77:85:70:37:09:58:67:86:20:12:fa:00:
         c3:4f:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:30:36 2026 by rpki-client