Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136392e302f32342d3234203d3e203137373237.roa
File:                     3230322e35392e3136392e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          i6fyyumSdHIOyRwS2kWRePa5CvjeoRrrbEK0JX4o/kQ=
Subject key identifier:   56:F9:B1:08:44:16:71:C2:18:3D:D1:1A:A8:3C:E5:2F:70:46:CA:B5
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       31BA455228B5616A3DCEE4D23B50718A8A72E2E3
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136392e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:38:26 +0000
ROA not before:           Sun 03 May 2026 02:33:26 +0000
ROA not after:            Sun 02 May 2027 02:38:26 +0000
asID:                     17727
IP address blocks:        202.59.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ba:45:52:28:b5:61:6a:3d:ce:e4:d2:3b:50:71:8a:8a:72:e2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:26 2026 GMT
            Not After : May  2 02:38:26 2027 GMT
        Subject: CN=56F9B108441671C2183DD11AA83CE52F7046CAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:20:d3:47:db:41:ff:70:b7:af:f5:95:1d:
                    26:88:01:8e:a4:6d:af:05:96:17:c2:e2:31:a3:08:
                    df:aa:06:d2:80:99:63:b3:e9:b3:7d:39:2e:ba:ae:
                    e1:eb:44:f1:9c:ab:64:d9:5c:5e:f8:70:cf:1f:32:
                    64:b5:19:52:c2:f5:c6:a0:f6:bb:11:f2:10:f5:e4:
                    0a:88:c1:8a:c5:68:86:67:65:ee:80:8e:ce:a0:17:
                    9c:d8:0b:1e:c6:35:39:3b:86:be:4a:03:fc:89:ee:
                    52:94:69:64:4b:7a:30:46:f3:8a:c5:fc:1c:d0:c3:
                    c5:70:a4:d9:39:a4:9f:54:04:bb:b8:99:34:2e:d5:
                    cf:5b:37:40:6f:3a:3d:b3:e4:5b:4c:b7:70:80:34:
                    93:79:cf:ec:21:58:a4:f1:8f:67:e7:84:0c:b2:92:
                    d1:46:77:15:b4:7f:7d:5e:7b:03:fb:5e:26:5e:e5:
                    09:cb:68:0d:77:e2:5e:95:9a:60:a6:85:b5:4a:d7:
                    6d:99:9f:a4:f9:05:ac:90:37:0f:ec:80:35:4f:47:
                    b0:2e:89:37:c5:f7:40:e5:c7:eb:0d:45:3c:cc:92:
                    91:7a:7e:51:6b:04:0e:8d:79:45:b0:66:6a:09:e4:
                    50:37:7f:11:a9:a4:b9:7f:e8:68:f5:1e:dd:fe:44:
                    1a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F9:B1:08:44:16:71:C2:18:3D:D1:1A:A8:3C:E5:2F:70:46:CA:B5
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136392e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.59.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:a0:9d:a4:2b:41:48:74:9f:3c:5a:ee:2b:22:27:68:60:1d:
         b2:4a:42:1a:0e:75:32:a5:ba:df:06:78:52:b2:81:52:0a:f3:
         54:a0:12:d3:49:1e:d4:eb:68:da:a8:39:62:47:22:06:fd:f3:
         17:88:17:1e:87:ae:dc:cd:d4:9a:c6:7b:f5:d0:c8:d7:29:59:
         1b:72:e5:38:0e:64:cf:0a:af:5d:10:9b:1c:6e:56:52:ef:39:
         6a:7f:2d:ea:14:f8:23:bf:64:ef:41:e6:ff:5b:60:9a:66:33:
         89:8d:97:b4:fb:35:30:25:82:6a:e3:d0:c7:2c:00:86:1d:04:
         89:e2:e2:83:97:b6:b1:4e:22:09:5c:df:10:90:53:7a:7d:63:
         5a:5c:9b:81:48:6f:30:2f:da:17:d2:78:04:03:db:b6:3a:24:
         cb:1f:95:bc:46:93:59:32:59:9f:7e:5b:de:57:31:79:93:69:
         a2:c6:06:fc:2a:ad:a6:b0:03:a6:5b:5e:cc:d5:f2:da:d1:0b:
         b1:c0:7f:8e:76:2d:16:3f:36:16:62:fb:c1:77:a0:ff:17:5e:
         a9:fa:72:c8:e6:0a:7e:d5:68:80:ee:f7:2a:84:9b:f1:86:27:
         55:f8:52:5f:1b:ed:0c:7f:58:a9:e1:ff:18:0d:40:c4:8e:42:
         d4:c1:b5:d3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMbpFUii1YWo9zuTSO1Bxiopy4uMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF
NzA0QjVEMDAeFw0yNjA1MDMwMjMzMjZaFw0yNzA1MDIwMjM4MjZaMDMxMTAvBgNV
BAMTKDU2RjlCMTA4NDQxNjcxQzIxODNERDExQUE4M0NFNTJGNzA0NkNBQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPYyDTR9tB/3C3r/WVHSaIAY6k
ba8FlhfC4jGjCN+qBtKAmWOz6bN9OS66ruHrRPGcq2TZXF74cM8fMmS1GVLC9cag
9rsR8hD15AqIwYrFaIZnZe6Ajs6gF5zYCx7GNTk7hr5KA/yJ7lKUaWRLejBG84rF
/BzQw8VwpNk5pJ9UBLu4mTQu1c9bN0BvOj2z5FtMt3CANJN5z+whWKTxj2fnhAyy
ktFGdxW0f31eewP7XiZe5QnLaA134l6VmmCmhbVK122Zn6T5BayQNw/sgDVPR7Au
iTfF90Dlx+sNRTzMkpF6flFrBA6NeUWwZmoJ5FA3fxGppLl/6Gj1Ht3+RBqRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVvmxCEQWccIYPdEaqDzlL3BGyrUwHwYDVR0j
BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND
ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC
NUQwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo7qTANBgkqhkiG
9w0BAQsFAAOCAQEABaCdpCtBSHSfPFruKyInaGAdskpCGg51MqW63wZ4UrKBUgrz
VKAS00ke1Oto2qg5YkciBv3zF4gXHoeu3M3UmsZ79dDI1ylZG3LlOA5kzwqvXRCb
HG5WUu85an8t6hT4I79k70Hm/1tgmmYziY2XtPs1MCWCauPQxywAhh0EieLig5e2
sU4iCVzfEJBTen1jWlybgUhvMC/aF9J4BAPbtjokyx+VvEaTWTJZn35b3lcxeZNp
osYG/CqtprADpltezNXy2tELscB/jnYtFj82FmL7wXeg/xdeqfpyyOYKftVogO73
KoSb8YYnVfhSXxvtDH9YqeH/GA1AxI5C1MG10w==
-----END CERTIFICATE-----
Generated at Thu May 7 04:31:32 2026 by rpki-client