Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e34302e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          YvxzaqRNEQSN1lbN19tkW9+srlKU+9/cBpD0Xrj7jEk=
Subject key identifier:   D5:62:CC:17:03:D5:51:C9:12:66:10:3A:D5:0A:91:9A:8D:79:BC:B2
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       F5120BEE5BDC1824CDF867E106188D1D4D3617
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 12 Feb 2026 11:02:41 +0000
ROA not before:           Thu 12 Feb 2026 10:57:41 +0000
ROA not after:            Thu 11 Feb 2027 11:02:41 +0000
asID:                     58487
IP address blocks:        202.10.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f5:12:0b:ee:5b:dc:18:24:cd:f8:67:e1:06:18:8d:1d:4d:36:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Feb 12 10:57:41 2026 GMT
            Not After : Feb 11 11:02:41 2027 GMT
        Subject: CN=D562CC1703D551C91266103AD50A919A8D79BCB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:9e:d0:32:ec:b3:3b:fc:a0:98:ab:14:9c:
                    c6:6f:3a:c8:41:19:31:dc:5b:fa:d8:33:5d:6c:cf:
                    53:ab:33:23:09:d6:90:de:f8:f4:57:1d:17:7a:f7:
                    52:36:7b:aa:2b:7c:ca:75:c8:78:7f:0d:e1:01:14:
                    37:3b:c5:97:09:06:dd:10:7a:5f:d0:1a:06:9e:94:
                    9b:db:0a:b8:cb:a2:ab:05:f4:6c:c7:3a:d6:7a:1f:
                    23:e1:a4:8b:4b:43:b3:da:04:d1:7e:80:e1:52:ea:
                    5e:fe:c5:2d:06:37:59:f1:5f:cf:54:71:e8:9c:48:
                    3a:75:26:0d:6c:91:5d:5f:71:4f:a9:46:91:63:02:
                    df:17:3a:14:c9:4d:df:03:ef:c0:92:27:ae:08:3f:
                    97:0e:6f:f1:04:3f:95:af:f9:cd:4a:cc:fd:b4:48:
                    02:fe:f7:a7:11:1c:18:4f:0a:20:a1:e6:34:2a:53:
                    bb:2e:c7:d6:e3:85:a6:e9:85:19:56:dc:6c:bf:4b:
                    36:eb:d6:36:78:ea:fc:e6:9b:5f:d8:03:ba:ab:b2:
                    d4:a9:35:c3:34:78:6b:65:f4:a5:51:c6:3e:e1:22:
                    6b:a9:5b:d8:23:2a:4e:24:90:0d:31:16:18:b5:64:
                    6e:47:5b:2a:7b:34:48:03:5f:59:da:93:c1:49:4f:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:62:CC:17:03:D5:51:C9:12:66:10:3A:D5:0A:91:9A:8D:79:BC:B2
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:9b:79:9f:64:4c:3a:6d:41:50:4a:03:44:11:77:f0:1d:
         f6:d3:02:2b:70:28:fe:2e:1e:05:12:d0:c2:62:2d:79:95:f5:
         95:01:b3:bd:2f:97:c6:83:a6:16:91:3b:83:63:53:cc:c5:3f:
         68:9d:c9:c6:a2:2c:a7:03:31:7e:dd:38:3e:a4:7a:b0:f7:56:
         5e:b1:a2:f6:c4:86:bc:f9:48:e0:1c:19:bb:4b:c4:33:df:eb:
         34:aa:3a:4f:20:cb:e2:91:11:57:84:5f:ef:22:5b:3c:8b:e5:
         49:35:e2:bd:d9:61:9a:e2:86:a4:d0:e8:de:a9:f6:91:62:3e:
         48:fb:ac:b6:51:10:bf:a8:c1:a2:c3:2c:cf:e3:7d:be:03:ed:
         9d:6c:dd:97:49:89:84:c6:a4:3d:15:0d:ca:4f:ab:5d:2a:18:
         5d:16:b3:4e:42:7d:b1:c1:13:cd:eb:d3:e2:32:d1:76:55:25:
         e9:a0:37:cd:a5:17:93:b0:8d:c5:44:d7:c3:81:b0:7a:2a:33:
         67:e0:a5:4f:8d:c3:2d:c1:98:c2:9c:d3:34:6f:03:27:36:b5:
         66:45:0c:b7:be:9c:ad:dc:82:cd:5c:c3:ed:38:a9:96:45:55:
         b4:42:57:9e:79:e7:68:48:9c:b5:89:57:77:a0:01:71:70:9d:
         1c:7c:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:54 2026 by rpki-client