Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e33342e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          jg0O1is30DVx7ffOfg+37/7iFtawswUUEAwfW5ItGXQ=
Subject key identifier:   7F:3C:57:83:DC:6D:89:D7:A3:09:23:76:7D:93:1B:7E:F2:0F:4B:19
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       4FA7E867F49E96435E4EF2D350E3988BAF6DFFE1
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 12 Feb 2026 10:02:37 +0000
ROA not before:           Thu 12 Feb 2026 09:57:37 +0000
ROA not after:            Thu 11 Feb 2027 10:02:37 +0000
asID:                     58487
IP address blocks:        202.10.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a7:e8:67:f4:9e:96:43:5e:4e:f2:d3:50:e3:98:8b:af:6d:ff:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Feb 12 09:57:37 2026 GMT
            Not After : Feb 11 10:02:37 2027 GMT
        Subject: CN=7F3C5783DC6D89D7A30923767D931B7EF20F4B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:c7:54:88:69:4f:1d:72:54:0d:94:22:50:
                    6f:98:8f:49:68:95:31:e5:b8:c0:37:a1:b7:d4:f2:
                    fc:90:3c:79:24:0d:73:95:01:ab:6f:c7:b3:cd:79:
                    2b:2a:24:02:a6:25:1b:77:1e:67:cf:6e:72:67:b0:
                    01:7a:56:ef:02:30:0e:7e:5f:6a:3b:94:11:e1:e3:
                    ec:3e:8e:cb:41:af:fd:7c:17:71:fc:e7:bc:86:53:
                    14:09:2b:05:50:cf:c1:90:81:1d:7e:3a:12:4e:98:
                    88:b6:f7:1a:40:a5:26:06:e1:5e:28:31:3f:8f:94:
                    5e:a5:ef:4b:c2:d9:7c:9a:3e:65:fc:42:f0:98:0f:
                    da:86:d8:6f:16:99:33:95:35:f7:b0:34:66:ea:94:
                    82:74:02:b4:7e:df:2e:7a:3e:f7:e2:62:04:cf:f7:
                    d2:f6:c5:eb:28:6a:23:75:51:30:3c:72:fd:78:23:
                    fa:4c:19:ca:b7:b6:b9:5d:d4:f7:e9:9e:60:9a:23:
                    38:5a:75:ed:e8:8f:ca:fa:81:15:c7:d3:cb:08:d9:
                    e4:40:ad:97:16:6a:58:57:91:91:97:80:1e:f7:da:
                    37:19:07:b8:66:ff:76:83:2b:01:72:11:8d:30:1f:
                    44:c9:e8:f9:59:03:a5:fb:e0:84:94:1e:8d:32:d8:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3C:57:83:DC:6D:89:D7:A3:09:23:76:7D:93:1B:7E:F2:0F:4B:19
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:76:c4:ad:16:1d:3c:41:7f:2a:75:17:32:b9:05:ba:68:
         ca:e7:65:31:74:3e:a3:a2:8c:d4:df:be:a7:ea:6d:b2:a9:f2:
         d8:04:95:07:58:68:6b:04:9c:78:8f:8d:d0:9c:f9:3d:d3:3c:
         fb:bb:0d:99:24:1a:5e:06:44:bd:0c:ac:39:6c:e7:23:ba:d4:
         af:93:00:4e:49:df:30:d9:59:6a:d4:4d:4e:51:b5:38:b3:7d:
         7a:69:80:03:8f:20:b4:e1:38:ae:4b:47:d2:ae:2a:f7:ce:4b:
         38:d6:fa:71:5e:ab:c9:82:0f:ef:0a:74:c5:20:be:c5:12:2c:
         e1:c8:de:7d:c9:6a:32:b2:c2:6f:e7:8c:37:e2:bc:2a:79:03:
         8a:cf:84:27:22:79:e3:0b:d6:1e:bf:21:08:51:91:37:4c:bc:
         2f:f6:2f:23:ef:69:27:65:3d:fc:24:26:d8:9d:04:02:ff:5c:
         75:43:0c:f3:15:20:00:c6:10:1a:fc:0a:01:23:5a:e2:ec:2e:
         fb:75:ee:81:c4:05:8b:03:d7:c1:c0:90:b5:c3:da:59:a2:ce:
         4e:42:7e:c4:57:70:b5:3c:be:fc:a8:97:9f:b3:51:51:77:58:
         5c:d8:44:6e:b3:ea:24:75:6e:2b:a9:b2:ed:a5:42:97:18:a4:
         31:d9:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:15 2026 by rpki-client