Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32332d3234203d3e203538343837.roa
File:                     3230322e31302e34362e302f32332d3234203d3e203538343837.roa (raw, json)
Hash identifier:          e1wm2PVOXPAwybpdh7jgTKZqay/w3JV9qcsQaUMfHJ4=
Subject key identifier:   06:79:40:DA:C8:D6:9D:79:BC:A9:38:76:E3:84:27:0E:A4:1E:E3:9A
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       268FD7E640845D80EE3B8043BD9C6509841DAA9F
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32332d3234203d3e203538343837.roa
Signing time:             Thu 12 Feb 2026 11:02:43 +0000
ROA not before:           Thu 12 Feb 2026 10:57:43 +0000
ROA not after:            Thu 11 Feb 2027 11:02:43 +0000
asID:                     58487
IP address blocks:        202.10.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8f:d7:e6:40:84:5d:80:ee:3b:80:43:bd:9c:65:09:84:1d:aa:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Feb 12 10:57:43 2026 GMT
            Not After : Feb 11 11:02:43 2027 GMT
        Subject: CN=067940DAC8D69D79BCA93876E384270EA41EE39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:b9:3b:93:10:f5:2c:d6:af:ed:b6:5c:51:
                    25:53:f4:13:9a:01:f3:85:50:0b:76:c3:11:78:a4:
                    c2:4f:a2:c2:ff:51:08:98:2e:01:5d:08:88:a3:cc:
                    44:63:46:8e:6f:af:67:32:c9:8e:13:9f:99:8a:c5:
                    eb:aa:ce:ec:5f:25:e8:d0:22:91:11:fa:72:ba:92:
                    88:ca:56:27:75:e6:40:09:db:9b:e7:fb:08:f3:ea:
                    af:e9:61:a0:9b:f1:f2:c0:ce:87:5e:dc:cf:76:b3:
                    39:66:d0:4d:c6:8b:bc:5e:bb:3d:2a:06:d2:61:cc:
                    7e:17:83:9b:8c:a4:ac:e6:08:b6:86:bd:50:af:44:
                    ab:80:b2:f6:85:da:df:40:69:d2:ca:2e:ca:1f:0b:
                    79:83:99:4b:a2:82:c2:20:bc:be:6d:83:20:bd:06:
                    0e:e1:ef:b0:a3:d2:f2:f2:a7:53:f1:6e:90:9f:02:
                    1d:3e:68:d4:d2:74:62:2b:2c:ac:74:3e:af:ca:45:
                    95:bb:43:37:d5:78:05:a5:7f:a9:83:05:38:d9:a1:
                    47:2c:b3:76:e4:4d:8d:de:b1:81:7a:17:64:da:c2:
                    45:b5:42:56:5a:26:9a:e4:13:43:17:67:a8:30:ae:
                    64:46:28:32:a5:eb:4f:12:61:f0:c0:98:d6:8f:0b:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:79:40:DA:C8:D6:9D:79:BC:A9:38:76:E3:84:27:0E:A4:1E:E3:9A
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32332d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:be:b4:c8:51:9f:84:8a:32:6b:f3:77:1f:b7:af:52:64:0e:
         86:d2:e8:1c:6b:24:47:33:87:95:f9:06:c3:47:d3:26:cb:6f:
         4f:b8:e2:85:84:4a:18:e2:2b:21:9a:73:92:e5:cf:7d:5a:68:
         90:d0:83:4d:57:2b:25:34:97:3c:8c:a8:1a:ea:47:2a:c9:15:
         2c:d8:ba:74:a8:29:e9:7d:90:d8:4d:50:ed:d0:f5:15:0c:93:
         7b:da:c5:cc:ec:7e:22:96:d1:7f:6f:56:55:e3:be:95:af:18:
         ee:1b:7d:03:68:0a:ba:09:25:e0:0a:99:1c:4b:37:f2:fd:b0:
         1f:07:ed:59:fb:91:4a:db:2f:25:21:9a:aa:f1:29:5c:e3:18:
         e9:66:11:56:fe:f0:22:a7:a8:81:24:cb:74:dc:aa:77:b4:f8:
         7e:35:e2:7a:cd:dd:7a:f3:bd:1e:16:cb:d9:10:1e:31:f4:5e:
         fc:46:82:a0:87:fd:b4:8a:d5:3b:bd:42:8c:e3:59:57:67:c0:
         5a:1f:45:13:6d:72:2f:76:8f:7a:1f:9b:9c:4d:4f:11:c5:e8:
         7f:eb:49:f0:ee:9a:1e:c5:87:14:dd:f0:d4:0d:e5:93:49:b5:
         3c:b5:dc:38:26:5d:ae:1b:ae:cc:e1:bc:3d:eb:96:c3:d6:54:
         0f:67:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:31 2026 by rpki-client