Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32332d3233203d3e203538343837.roa
File:                     3230322e31302e33382e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier:          Qujps6hjrW9jXeeOvYLqvxcadOk9/6yRqD+JpFLuoNI=
Subject key identifier:   01:48:EF:6D:CC:A7:03:6A:EF:46:07:E9:DF:90:65:CB:E7:4A:FE:7C
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       05F6859BF04112A236710FADB7C161C4F8E59343
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32332d3233203d3e203538343837.roa
Signing time:             Thu 12 Feb 2026 11:02:42 +0000
ROA not before:           Thu 12 Feb 2026 10:57:42 +0000
ROA not after:            Thu 11 Feb 2027 11:02:42 +0000
asID:                     58487
IP address blocks:        202.10.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f6:85:9b:f0:41:12:a2:36:71:0f:ad:b7:c1:61:c4:f8:e5:93:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Feb 12 10:57:42 2026 GMT
            Not After : Feb 11 11:02:42 2027 GMT
        Subject: CN=0148EF6DCCA7036AEF4607E9DF9065CBE74AFE7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:14:7f:e6:5f:2c:66:cc:1d:f6:47:e8:7c:
                    16:4e:3c:b4:90:26:fb:8b:80:10:1b:1f:8b:cc:a9:
                    95:d1:73:9c:ef:2c:8f:63:5e:68:97:ab:49:7a:ee:
                    15:ce:1d:a3:c0:01:ee:40:81:c9:38:67:40:ad:03:
                    1d:bd:e0:6b:96:f1:11:1f:82:d7:b9:0e:73:37:d1:
                    a7:3b:82:05:a8:f0:49:a8:35:6c:3d:a7:1d:b7:fc:
                    3b:86:63:ab:ae:eb:5c:19:c0:55:b4:60:be:62:62:
                    23:50:83:4d:6e:2e:9e:c8:b6:a7:3c:61:48:f2:4e:
                    78:51:3a:7a:9a:cb:6f:b5:ec:e5:05:2c:4e:3a:80:
                    26:23:f5:c9:b6:f9:75:04:23:34:33:07:99:65:f6:
                    4d:1e:3b:25:a8:35:7c:56:9e:df:37:51:08:28:d2:
                    bc:63:dd:b3:80:74:87:ba:78:be:5a:b9:6e:11:76:
                    03:0d:33:8e:65:26:51:15:94:8c:ef:c0:69:22:21:
                    0a:2b:f3:1a:28:37:31:db:97:93:a8:92:6a:d0:23:
                    6b:43:d8:cb:af:2f:ad:f8:6d:a8:f7:32:01:3d:09:
                    bd:4f:fe:d9:bd:bf:27:92:ad:c4:15:28:dc:c0:6a:
                    d2:0c:61:00:88:34:a3:b8:71:ea:1f:f8:c2:6e:ac:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:48:EF:6D:CC:A7:03:6A:EF:46:07:E9:DF:90:65:CB:E7:4A:FE:7C
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32332d3233203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:37:b8:f7:0a:ff:d9:21:d5:6a:5a:a7:9f:29:01:88:e2:23:
         3f:47:cb:4d:d1:a4:c5:fe:10:21:7f:f1:d3:2c:9a:31:a9:f1:
         e2:be:d9:da:9c:0c:74:25:64:36:d1:31:dd:e6:60:f3:aa:23:
         61:d5:fd:4d:68:9a:42:a5:c5:e3:cb:6f:73:b7:b4:75:4c:b8:
         25:de:bf:17:29:f6:47:9f:02:86:a4:97:07:15:56:e7:15:5e:
         32:55:f7:b4:74:fe:a5:47:9f:fa:ae:34:61:d4:2d:ee:fd:dd:
         6a:5f:b0:55:48:b6:78:d1:a9:99:9f:d2:b5:02:8d:19:35:0e:
         cf:0f:d7:84:6b:9a:c9:91:3a:64:54:df:6c:66:41:5a:24:83:
         b5:49:d6:d8:67:11:43:ba:53:09:d9:73:32:d2:d9:e6:a2:d8:
         ab:78:fd:59:86:e5:16:cc:4f:ea:38:1d:06:64:07:f7:4b:09:
         4e:f8:56:5e:bc:b9:be:5b:bc:7f:81:21:fa:18:f0:32:25:dd:
         b1:11:26:c8:a3:66:00:0f:ec:37:89:77:cd:b6:4e:d8:dc:45:
         e1:02:b4:67:8a:35:11:fb:2e:4c:38:8d:4b:44:22:c1:58:87:
         4a:8d:d9:ba:4f:96:e4:d9:c1:28:c1:05:bc:5e:6c:fb:ad:87:
         d2:61:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:11 2026 by rpki-client