Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136342e302f32342d3234203d3e203137373237.roa
File:                     3230322e35392e3136342e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          44ZdCdgi7kbZT2ncmaiH2kO/d7o5zWr3LxKVxNrTk30=
Subject key identifier:   FF:CF:30:03:2D:E2:6F:23:96:BF:DF:96:A1:6A:0D:B3:C5:07:29:22
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       726EFC3785060D4801D37F54CE1DB29B6B194020
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136342e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:38:45 +0000
ROA not before:           Sun 03 May 2026 02:33:45 +0000
ROA not after:            Sun 02 May 2027 02:38:45 +0000
asID:                     17727
IP address blocks:        202.59.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6e:fc:37:85:06:0d:48:01:d3:7f:54:ce:1d:b2:9b:6b:19:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:45 2026 GMT
            Not After : May  2 02:38:45 2027 GMT
        Subject: CN=FFCF30032DE26F2396BFDF96A16A0DB3C5072922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:ca:79:11:0a:93:5a:c6:83:59:67:01:fa:
                    df:02:f4:92:e1:e5:cd:0e:b6:bb:40:8f:92:eb:df:
                    db:53:ea:df:9f:1f:ec:3b:9f:48:f6:5a:01:eb:20:
                    60:7e:04:b7:27:65:ae:80:9a:43:65:01:61:d0:bf:
                    c6:6f:cb:dd:0f:30:7c:14:47:73:c1:d7:f5:c5:f4:
                    a8:5c:d9:6b:19:3e:33:6f:df:c3:7e:46:13:e3:a3:
                    1c:24:a2:08:e1:22:38:fa:5b:30:60:29:de:a8:1d:
                    cd:23:a0:e3:60:8b:eb:72:1a:f8:91:26:0e:84:68:
                    0e:d4:3f:f6:d6:16:8b:8c:cb:ee:ad:6d:c3:7a:4d:
                    79:e5:fc:56:c0:3d:04:d5:73:fd:e0:c7:c6:e4:dc:
                    fa:07:45:f6:7d:ff:d6:0d:28:42:41:d8:13:c8:f1:
                    32:e5:a7:b4:06:d7:34:22:7f:5f:85:55:8a:bf:73:
                    c1:1e:50:8f:c1:ea:95:af:cf:d8:5a:ad:f2:83:46:
                    bb:b0:6b:23:74:cc:7f:41:65:19:ed:2b:57:18:3d:
                    83:55:85:6d:46:22:d9:a3:03:a5:f1:b3:f6:ed:c8:
                    92:cf:bc:70:59:f8:1f:2d:29:b2:f0:81:74:37:8b:
                    2e:bd:b9:d1:fb:f6:e7:01:67:96:a6:ea:8c:59:79:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CF:30:03:2D:E2:6F:23:96:BF:DF:96:A1:6A:0D:B3:C5:07:29:22
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136342e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.59.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:4f:40:69:e6:6b:ab:14:3b:b8:e1:28:ab:33:11:ef:34:
         cc:54:3b:41:ea:71:0b:fa:64:b0:7d:ed:dd:98:f6:16:6e:a3:
         6c:32:9f:28:05:ee:74:e0:7c:73:d2:7e:e8:19:32:7a:52:af:
         4b:61:a9:fe:36:ff:20:46:87:bf:df:25:3e:31:ac:2e:00:05:
         e0:be:bd:cb:d6:78:b9:b0:e6:3a:63:c7:89:19:ba:bc:eb:1b:
         94:c9:59:05:9d:90:18:02:bf:9c:cb:6b:69:a4:0a:6f:ef:b6:
         e8:99:57:ba:e8:8e:ae:0c:4d:b6:a9:67:f7:c6:b9:10:29:7d:
         9b:ab:72:18:50:83:86:db:e0:2e:34:c6:da:36:5d:cf:d3:8c:
         90:18:7d:b4:a2:5a:0b:68:99:d3:e8:fa:7f:6a:eb:95:bc:0a:
         c8:1b:b0:6a:33:fa:dc:8d:5f:bf:d5:1f:f9:96:61:13:cc:cd:
         73:50:91:b4:d5:35:c1:cf:02:d5:d9:64:41:4d:00:9c:0f:cb:
         8a:dc:53:24:e3:aa:cd:a2:26:b9:1a:04:de:e1:6f:56:6f:7e:
         33:f2:39:79:d2:e9:cd:33:32:30:b4:ef:13:05:07:8c:91:80:
         eb:a7:de:1d:aa:fc:0f:f0:22:bb:e8:c2:56:df:09:a3:cf:89:
         13:b6:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:31:12 2026 by rpki-client