Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e33382e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          scjisHZDVN8p1uCiTyYd38lnNJwavjHFpP7UJ3FyeEg=
Subject key identifier:   AA:B1:D6:BE:7C:B6:67:F4:09:E0:06:5B:B8:62:89:B8:90:36:70:0F
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       635950E7B0DC4A0253BF4DA5893569BE354023BA
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 12 Feb 2026 11:02:42 +0000
ROA not before:           Thu 12 Feb 2026 10:57:42 +0000
ROA not after:            Thu 11 Feb 2027 11:02:42 +0000
asID:                     58487
IP address blocks:        202.10.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:59:50:e7:b0:dc:4a:02:53:bf:4d:a5:89:35:69:be:35:40:23:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Feb 12 10:57:42 2026 GMT
            Not After : Feb 11 11:02:42 2027 GMT
        Subject: CN=AAB1D6BE7CB667F409E0065BB86289B89036700F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:dc:a8:cb:db:41:cf:b0:d7:f9:25:e9:1a:
                    8c:93:53:5b:dd:a8:31:d4:10:14:5c:2e:22:1a:a6:
                    d3:59:23:a1:b3:4c:69:3d:6d:dd:de:bf:67:53:e9:
                    a9:20:5a:90:b3:cc:f9:90:df:1b:29:12:fa:17:55:
                    4f:bc:9b:a3:28:5d:ac:78:8d:35:89:4b:68:83:95:
                    be:8c:48:14:0b:e2:a7:2e:7f:94:0d:64:eb:67:d3:
                    e1:6c:fa:e2:d6:79:27:86:e3:e9:2a:9c:90:8a:e7:
                    02:5c:f5:88:4b:3a:4e:ff:51:4a:5b:58:f7:75:a3:
                    6d:4c:9d:e6:e0:08:09:64:b6:84:b2:bf:8a:44:c6:
                    69:93:4d:4a:39:d3:47:a0:fe:63:5c:de:4f:bf:2e:
                    59:08:68:e7:f3:c1:e6:bb:25:9f:68:b7:49:e1:91:
                    33:54:fa:56:98:87:d9:3e:78:45:b0:7c:91:31:f6:
                    c7:20:63:db:ad:7d:1e:70:2d:de:2d:01:df:82:d4:
                    fa:22:51:9e:97:00:93:b2:79:d8:54:df:5b:c9:87:
                    cf:2e:e9:42:f2:05:e0:02:24:bd:70:71:c6:34:27:
                    ab:b0:e8:54:25:f9:3f:44:45:61:59:da:1c:c7:24:
                    c6:be:a4:c4:1b:40:99:e8:03:c7:6c:bd:53:71:16:
                    31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B1:D6:BE:7C:B6:67:F4:09:E0:06:5B:B8:62:89:B8:90:36:70:0F
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:da:69:ae:ac:91:e3:01:fe:3c:8f:2b:36:72:5d:e7:9e:dc:
         4e:3f:82:cf:5f:ae:9e:1f:3e:79:d1:35:df:3e:9d:2b:dd:d6:
         fb:2b:17:53:bb:31:c6:74:bc:f9:93:de:42:00:f1:a5:a5:b7:
         ac:15:d7:4b:ba:96:a0:10:4e:55:8b:74:e7:c7:48:a9:0c:7f:
         6a:d9:7c:8c:46:69:ef:89:10:9c:75:cc:d4:07:ff:e0:d0:25:
         ef:4f:61:66:cb:df:8e:6b:96:94:4f:60:3e:0e:bf:66:be:76:
         14:c6:b6:32:8f:66:44:80:b9:5c:d4:f4:91:70:ee:60:bf:06:
         0f:8f:de:a0:b3:41:bb:f4:c8:a9:9a:b7:cb:70:aa:76:e2:3a:
         a1:d0:ef:0f:c5:ab:9c:2e:cb:c7:bf:63:ea:c8:84:1b:a8:6b:
         be:11:0b:21:ef:ef:3e:c5:ba:33:b3:6b:72:02:08:1e:a8:3d:
         df:b6:63:c4:2a:08:5a:49:fb:72:77:38:7c:b2:ff:0d:50:ff:
         d3:40:a0:1d:24:ae:54:3b:22:0c:d6:f6:68:9e:2f:de:04:27:
         b2:d5:21:6a:c5:9a:0b:64:8a:b9:ef:51:3e:5f:93:04:9f:7a:
         e4:83:cd:33:a8:26:e5:8f:a5:00:a9:e4:41:f2:ac:94:6e:42:
         6b:1e:c7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:33 2026 by rpki-client