Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136362e302f32342d3234203d3e203137373237.roa
File:                     3230322e35392e3136362e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          A2tSGlETbbm2WtTAA0XaiL8Lg1NyDCUqTI9F+ITSE2U=
Subject key identifier:   55:83:3E:E3:6D:B7:E6:F8:0F:CA:65:7E:BF:F8:CF:93:7D:AE:4F:F7
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       7CA7BC0EF4F501BF3B18304F98A89D494B7FFEE5
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136362e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:38:38 +0000
ROA not before:           Sun 03 May 2026 02:33:38 +0000
ROA not after:            Sun 02 May 2027 02:38:38 +0000
asID:                     17727
IP address blocks:        202.59.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a7:bc:0e:f4:f5:01:bf:3b:18:30:4f:98:a8:9d:49:4b:7f:fe:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:38 2026 GMT
            Not After : May  2 02:38:38 2027 GMT
        Subject: CN=55833EE36DB7E6F80FCA657EBFF8CF937DAE4FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:cc:a8:ee:66:9a:45:01:c5:a8:44:1b:6d:
                    3f:c4:4e:3b:3c:ab:c4:76:55:fe:2f:c5:fb:85:71:
                    69:31:9d:a6:64:6a:2a:82:ac:1d:49:ef:96:3c:7b:
                    29:79:40:53:0b:82:09:28:bd:92:ab:08:f1:22:73:
                    74:e0:16:ea:f0:fb:80:45:74:bb:b0:06:62:72:ba:
                    69:33:de:33:54:f0:4a:c5:c9:97:7a:4f:47:5e:f7:
                    22:65:ee:29:9a:af:f7:2b:39:c7:1b:0c:af:f5:52:
                    bd:0d:86:19:2e:b3:2d:77:03:2f:9b:96:3a:d4:73:
                    c2:9f:ef:6e:44:65:17:4f:99:82:32:2f:c2:96:ce:
                    a4:22:60:33:c0:19:16:7e:3c:71:e5:7e:b4:10:f0:
                    67:35:26:5a:fd:72:c3:bd:d5:bf:48:92:fb:db:de:
                    22:df:cc:9b:39:8c:e2:39:c7:d1:eb:eb:ca:58:bf:
                    2a:e3:df:70:78:1c:1c:32:86:96:41:67:b9:ea:42:
                    5f:f8:3d:cc:fd:2f:4f:8f:a0:04:80:57:99:43:c2:
                    c7:3c:4b:bc:55:b8:67:95:02:7d:41:c3:ed:7c:65:
                    ca:2d:5b:00:a6:47:bb:95:5f:27:72:2e:e4:ce:03:
                    f7:27:40:f4:a2:14:9d:b3:2b:d3:a0:b5:1b:e5:a0:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:83:3E:E3:6D:B7:E6:F8:0F:CA:65:7E:BF:F8:CF:93:7D:AE:4F:F7
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136362e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.59.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:bd:b9:76:cd:ba:3a:87:31:fa:c1:51:69:9c:34:12:cf:85:
         22:bd:f4:49:eb:90:12:01:fc:1f:de:a0:72:ff:40:6e:1b:8e:
         48:97:83:95:a5:6d:11:a0:42:3d:16:95:ad:81:a9:36:0d:a1:
         b1:ab:e9:67:02:b9:8c:ab:2d:3b:90:b0:06:20:cb:84:27:52:
         fd:91:69:19:96:69:be:99:c7:ac:b2:1e:e2:3d:54:25:6e:59:
         13:99:77:7a:c2:05:74:fa:52:4d:f9:fb:f1:ea:6f:43:e2:99:
         96:5f:64:7c:79:8f:2a:a4:8d:5e:3a:e2:9e:3a:08:5c:3e:77:
         80:ba:70:64:5f:3c:9a:6c:49:fc:82:97:8a:3d:f3:28:8c:16:
         35:b0:f5:56:06:4b:39:6c:d9:80:a1:92:73:56:1f:2d:94:12:
         cc:97:1f:bb:6b:a3:8b:ea:71:08:2d:db:17:79:b4:e6:4a:33:
         51:f7:38:92:6b:70:5d:45:5e:72:24:ac:95:45:8b:2e:20:50:
         9f:16:7d:f5:0b:39:bf:54:3e:34:c5:a2:de:58:7e:76:ec:2f:
         d1:69:30:17:74:6e:62:95:e6:dc:3d:dc:cf:4c:77:d0:b4:13:
         99:ae:25:0b:f2:39:8f:be:e6:b7:a0:07:1f:49:5c:1f:26:52:
         81:c0:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:31:23 2026 by rpki-client