Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32332d3233203d3e203538343837.roa
File:                     3230322e31302e33342e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier:          2ddCHw70yQoOqEPC5Ed40kFggbH2/2gGXTbF41JWeA8=
Subject key identifier:   5E:2B:93:A4:1C:DF:18:C6:6D:20:9F:E7:DA:3C:F8:FB:53:1A:0C:88
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       1A95AE9D640FA26C4DE5B7E6A3182D73253E7367
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32332d3233203d3e203538343837.roa
Signing time:             Thu 12 Feb 2026 10:02:37 +0000
ROA not before:           Thu 12 Feb 2026 09:57:37 +0000
ROA not after:            Thu 11 Feb 2027 10:02:37 +0000
asID:                     58487
IP address blocks:        202.10.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:95:ae:9d:64:0f:a2:6c:4d:e5:b7:e6:a3:18:2d:73:25:3e:73:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Feb 12 09:57:37 2026 GMT
            Not After : Feb 11 10:02:37 2027 GMT
        Subject: CN=5E2B93A41CDF18C66D209FE7DA3CF8FB531A0C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:37:a8:61:ef:51:34:29:9f:ee:11:91:f7:
                    93:fd:35:ca:1d:4f:b4:71:40:a0:4c:13:18:1b:d7:
                    5d:38:09:ea:db:45:2d:c6:1f:e7:5a:7d:87:e0:6e:
                    3c:91:a6:ae:24:a9:ff:b5:93:f3:56:19:13:e3:08:
                    6b:57:f6:41:d2:bd:1a:3b:45:60:d9:1a:d0:61:f2:
                    89:e4:bb:3d:5f:46:29:8b:8d:94:9a:69:b4:ad:c2:
                    4e:99:ac:4e:46:06:d9:f7:8d:b9:d8:e6:20:83:c1:
                    6e:99:96:b6:30:1a:52:4b:4b:70:8c:33:ff:e5:1a:
                    e9:3b:3c:07:5b:3e:ad:77:27:cc:96:fd:22:72:4f:
                    2d:30:1b:7a:6a:b7:41:f7:6b:41:1f:60:c6:04:fe:
                    ed:6f:a9:c9:68:a3:e7:b0:39:9d:0d:1b:35:f9:7e:
                    8c:db:3c:83:82:49:b4:dd:a6:fd:09:e8:da:86:66:
                    01:ee:6c:6d:43:de:65:17:cd:7d:b7:72:e1:a4:b4:
                    dd:af:c5:33:83:ac:88:46:03:1a:7a:9a:8d:c1:4f:
                    46:a3:38:a8:f9:c0:e3:91:66:17:68:e9:fd:f8:da:
                    3e:90:e3:0f:4a:09:8a:40:87:a4:bc:6a:76:70:77:
                    6b:c5:96:ce:f4:d5:65:01:60:16:24:98:15:ae:6d:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2B:93:A4:1C:DF:18:C6:6D:20:9F:E7:DA:3C:F8:FB:53:1A:0C:88
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32332d3233203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:f2:18:18:f4:6c:78:73:41:2d:76:07:9c:85:1a:10:f5:00:
         28:49:a0:bd:74:a6:15:8c:8e:52:2a:ef:50:e1:b4:a5:11:a2:
         97:73:e8:7f:b9:d4:7e:a9:54:bc:92:bd:6e:35:e6:74:86:bb:
         1d:63:a8:f9:2c:67:2e:cf:11:32:47:7c:8e:e0:27:01:3f:49:
         bc:55:79:b0:e0:43:74:78:8d:26:8e:5b:0e:99:33:91:39:5d:
         e2:c9:a5:0d:8c:10:ac:2d:95:b2:19:a2:ba:0f:35:42:ad:3d:
         11:3e:b1:d6:86:3e:d1:e3:2b:30:a9:8f:af:bd:ad:7f:ac:69:
         51:7b:73:cb:03:61:96:4a:f3:cf:9f:63:c9:6e:6e:25:4a:a0:
         63:27:a3:b1:57:48:be:6c:21:d7:7a:86:20:eb:90:28:7e:5a:
         7e:14:51:6d:fc:ff:e7:5f:c6:36:25:44:60:83:33:1d:40:c3:
         51:e1:31:fe:69:36:04:3e:54:67:03:b9:16:cf:d8:37:42:6b:
         e5:78:db:fa:84:36:aa:8e:5a:3a:84:22:95:9d:7e:7b:7c:d8:
         f0:1f:e8:7d:ef:2d:d8:af:11:be:a9:14:a6:b6:d8:e4:64:a7:
         4a:04:05:1d:e1:a2:f6:07:4c:a7:f8:c5:83:b3:c4:8c:fb:10:
         31:d1:c0:5a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUGpWunWQPomxN5bfmoxgtcyU+c2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5
MkFBQkU2RTAeFw0yNjAyMTIwOTU3MzdaFw0yNzAyMTExMDAyMzdaMDMxMTAvBgNV
BAMTKDVFMkI5M0E0MUNERjE4QzY2RDIwOUZFN0RBM0NGOEZCNTMxQTBDODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CjeoYe9RNCmf7hGR95P9Ncod
T7RxQKBMExgb1104CerbRS3GH+dafYfgbjyRpq4kqf+1k/NWGRPjCGtX9kHSvRo7
RWDZGtBh8onkuz1fRimLjZSaabStwk6ZrE5GBtn3jbnY5iCDwW6ZlrYwGlJLS3CM
M//lGuk7PAdbPq13J8yW/SJyTy0wG3pqt0H3a0EfYMYE/u1vqcloo+ewOZ0NGzX5
fozbPIOCSbTdpv0J6NqGZgHubG1D3mUXzX23cuGktN2vxTODrIhGAxp6mo3BT0aj
OKj5wOORZhdo6f342j6Q4w9KCYpAh6S8anZwd2vFls701WUBYBYkmBWubWthAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUXiuTpBzfGMZtIJ/n2jz4+1MaDIgwHwYDVR0j
BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx
NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB
QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05
N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzNDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKCiIwDQYJKoZIhvcN
AQELBQADggEBAM/yGBj0bHhzQS12B5yFGhD1AChJoL10phWMjlIq71DhtKURopdz
6H+51H6pVLySvW415nSGux1jqPksZy7PETJHfI7gJwE/SbxVebDgQ3R4jSaOWw6Z
M5E5XeLJpQ2MEKwtlbIZoroPNUKtPRE+sdaGPtHjKzCpj6+9rX+saVF7c8sDYZZK
88+fY8lubiVKoGMno7FXSL5sIdd6hiDrkCh+Wn4UUW38/+dfxjYlRGCDMx1Aw1Hh
Mf5pNgQ+VGcDuRbP2DdCa+V42/qENqqOWjqEIpWdfnt82PAf6H3vLdivEb6pFKa2
2ORkp0oEBR3hovYHTKf4xYOzxIz7EDHRwFo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:23 2026 by rpki-client