Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32332d3233203d3e203538343837.roa
File:                     3230322e31302e34302e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier:          5/VXdcQfhvCIwrAO21i2SACXTkt6iLhYBg+R5oYTSac=
Subject key identifier:   8A:9F:79:D7:76:67:0F:B0:F5:82:DB:60:0F:4A:FC:78:E7:F9:B8:47
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       49C839F6025737B4B5309855F38D54D7852BD462
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32332d3233203d3e203538343837.roa
Signing time:             Thu 12 Feb 2026 11:02:41 +0000
ROA not before:           Thu 12 Feb 2026 10:57:41 +0000
ROA not after:            Thu 11 Feb 2027 11:02:41 +0000
asID:                     58487
IP address blocks:        202.10.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c8:39:f6:02:57:37:b4:b5:30:98:55:f3:8d:54:d7:85:2b:d4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Feb 12 10:57:41 2026 GMT
            Not After : Feb 11 11:02:41 2027 GMT
        Subject: CN=8A9F79D776670FB0F582DB600F4AFC78E7F9B847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:2a:0d:a3:c9:2b:86:f2:72:fa:e7:30:2c:
                    10:a5:4c:5d:e4:88:e5:80:91:57:e8:e7:f4:a4:74:
                    3a:cf:70:26:1f:0e:c9:be:29:2e:af:73:da:11:62:
                    04:a3:53:d2:c1:46:3d:5c:70:46:62:6c:22:f9:55:
                    8c:c4:20:b1:ed:66:29:b8:e5:c5:7d:4e:4a:6c:d9:
                    79:88:dd:60:af:94:e9:e1:a0:1b:b0:f0:34:25:d5:
                    53:b4:f1:0c:89:13:57:fc:ad:6a:b6:ce:5a:d3:66:
                    1b:d5:92:ce:e1:0d:e9:6d:a1:b0:cc:9c:38:bd:26:
                    8c:37:27:8b:8b:46:bb:eb:3a:33:58:a3:5d:99:e2:
                    c4:4c:ce:fe:34:a6:10:ea:87:f3:a4:48:7b:36:f9:
                    2f:d9:72:d8:fe:ef:86:70:56:cf:a3:f5:f7:37:f5:
                    73:a7:98:fa:3c:94:83:5c:e0:cd:79:44:20:ef:ae:
                    11:22:1e:61:9f:0a:df:72:8e:78:82:59:27:9f:de:
                    1b:ac:96:bf:28:89:61:2a:49:d0:7f:70:5b:2c:d8:
                    50:93:8a:99:35:b4:a4:17:1d:93:fd:1f:f6:4d:48:
                    ee:10:c0:31:3d:2b:eb:ce:77:a3:c0:79:42:4b:3e:
                    a5:00:05:44:88:bb:15:f6:47:e2:4b:8a:1b:3f:db:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9F:79:D7:76:67:0F:B0:F5:82:DB:60:0F:4A:FC:78:E7:F9:B8:47
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32332d3233203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:e7:28:a2:d8:ba:17:5d:16:ae:0b:42:d5:6d:94:93:28:1a:
         48:d3:24:c4:8b:9c:e5:c6:7e:91:d7:2a:c0:48:8c:ea:c7:e9:
         f8:4f:cf:67:b3:f3:8d:af:8c:72:01:da:0a:1b:80:37:db:ea:
         89:0d:7f:2a:51:94:f7:30:67:bb:18:8e:10:b7:0e:4a:30:b4:
         b0:30:b8:37:d1:fc:26:2e:32:26:03:59:16:f7:80:ab:05:11:
         94:f8:68:97:ac:9c:df:f0:39:5b:62:1c:45:74:26:43:5f:ea:
         d8:58:ff:85:af:94:54:ed:80:6f:ec:f4:57:6f:83:d0:d7:e3:
         2d:8f:0a:bb:d2:6d:8b:e1:ec:66:f4:7c:a4:98:4d:17:7c:04:
         c0:a4:a0:cb:2f:51:47:69:d9:1e:1c:ec:e8:55:4c:72:a9:00:
         c8:04:11:d9:96:71:a3:61:b0:17:8b:21:2d:d3:c6:1f:aa:a4:
         a3:db:56:e0:ca:e7:de:03:bd:be:1d:5c:02:fd:f1:6e:64:d8:
         01:63:01:6a:79:61:8d:cb:2a:13:e9:ae:83:f5:23:82:c7:0b:
         14:35:f6:07:e8:ca:44:e6:f3:c9:3d:7b:d9:f2:2e:f8:a1:57:
         f7:a3:3b:32:5c:aa:c5:f8:83:b4:94:94:c5:2a:bb:25:fb:7f:
         89:df:27:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:06 2026 by rpki-client