Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e33362e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          HiL9fcdXpqkMMW2ZESbuCGJ+KnzYhd5S43VjD+RdI2g=
Subject key identifier:   DE:CF:E8:6D:94:D4:08:C9:9F:E2:AF:F1:95:D2:17:5A:7F:D6:19:02
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       4FC47CBD31229A4959D3FA0F86B1F56A5A22C90A
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 12 Feb 2026 11:02:41 +0000
ROA not before:           Thu 12 Feb 2026 10:57:41 +0000
ROA not after:            Thu 11 Feb 2027 11:02:41 +0000
asID:                     58487
IP address blocks:        202.10.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c4:7c:bd:31:22:9a:49:59:d3:fa:0f:86:b1:f5:6a:5a:22:c9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Feb 12 10:57:41 2026 GMT
            Not After : Feb 11 11:02:41 2027 GMT
        Subject: CN=DECFE86D94D408C99FE2AFF195D2175A7FD61902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:4d:a4:69:d3:2a:fc:90:17:7d:82:a4:24:
                    7e:e9:c6:2e:b5:3d:09:e6:a2:4c:86:73:51:a2:14:
                    ae:03:ac:47:01:a9:fa:61:f5:2a:9c:de:9e:6d:d4:
                    03:0a:91:eb:52:e0:75:0e:99:f4:42:91:4b:bb:03:
                    51:f6:a0:44:fc:55:c0:2b:a6:95:00:53:53:f0:ba:
                    43:41:43:a2:b1:82:ef:51:cc:c5:6b:d7:2d:a5:5e:
                    16:49:a7:30:ca:1a:4a:85:07:2b:ce:f6:f6:ca:de:
                    f6:99:12:70:43:42:0d:23:fa:1a:49:b9:56:0f:2a:
                    82:f3:0a:a0:2f:80:e1:a5:9c:d5:cb:6b:23:65:7b:
                    5b:6f:47:0e:b9:7c:7c:0d:b6:c0:ee:8e:cc:61:05:
                    dc:42:e1:dc:34:23:ad:fb:05:f3:83:f1:a8:b1:46:
                    90:68:12:f8:e8:e7:42:a0:18:7e:01:7e:1c:8b:32:
                    8d:c8:f8:f8:80:04:14:bb:f5:da:7c:ae:b0:d4:91:
                    5c:3d:b6:da:72:97:ba:d5:fe:b8:1d:ed:04:40:31:
                    8b:8f:8c:ce:a0:90:aa:3d:da:c8:b9:20:0f:04:42:
                    c7:01:56:d3:61:81:0e:54:55:51:c0:dc:ef:14:62:
                    ce:7e:df:d1:e3:f7:a2:13:6c:f0:67:11:bb:4c:fa:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CF:E8:6D:94:D4:08:C9:9F:E2:AF:F1:95:D2:17:5A:7F:D6:19:02
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:53:fb:29:b7:5b:59:fe:e1:6d:43:99:85:98:6f:e4:b0:d8:
         67:e1:a1:44:c9:09:71:d7:9a:69:0d:ef:23:8d:db:8b:1a:40:
         a3:e8:e3:64:78:ff:b5:1b:f0:42:c1:02:1c:58:25:6f:ba:58:
         fb:33:92:8c:9f:63:a1:49:d2:3b:fe:bf:99:cb:3d:1b:7d:77:
         9e:76:bb:63:78:6f:3b:77:27:2c:97:9c:aa:a3:86:1d:30:56:
         68:c2:44:27:42:17:33:6d:05:3d:53:5c:a8:54:fa:d3:1b:04:
         2f:11:09:ff:c9:31:c2:ab:3c:8e:b8:09:1a:9a:7d:b9:22:4c:
         51:1f:1f:27:3c:80:3b:c2:5a:e3:4a:9e:23:09:0f:ce:fc:f3:
         01:ed:0f:8b:a8:b5:1c:e2:a5:c8:48:55:03:4a:ed:90:98:50:
         14:ec:5b:cb:21:ec:75:73:47:02:91:ce:b7:d3:c7:fe:6b:9b:
         bf:82:98:18:00:5a:a1:29:d9:bd:21:7c:d9:db:08:ec:f4:d6:
         79:fd:16:61:54:24:35:a1:e6:ee:99:39:26:4e:36:b9:db:4d:
         67:b6:09:3c:c7:59:bf:44:b2:8f:18:34:72:17:d9:bc:ca:97:
         04:9a:96:9d:d6:b6:1d:db:2f:c0:8b:87:e3:4d:76:8a:5a:70:
         1e:85:e8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:20 2026 by rpki-client