Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e34362e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          mWkCj5J6k/7jT0udwEQw/ni14C2HNSxVQOUIMvJCPig=
Subject key identifier:   80:55:A3:76:A7:26:9E:B5:00:A2:70:FF:0E:06:48:A1:96:C4:F6:66
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       41CA27515EBFD7A87FC79DA2E07C921E93800ADC
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 12 Feb 2026 11:02:42 +0000
ROA not before:           Thu 12 Feb 2026 10:57:42 +0000
ROA not after:            Thu 11 Feb 2027 11:02:42 +0000
asID:                     58487
IP address blocks:        202.10.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ca:27:51:5e:bf:d7:a8:7f:c7:9d:a2:e0:7c:92:1e:93:80:0a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Feb 12 10:57:42 2026 GMT
            Not After : Feb 11 11:02:42 2027 GMT
        Subject: CN=8055A376A7269EB500A270FF0E0648A196C4F666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:16:4d:6b:22:ee:e3:22:a1:95:40:a3:e2:
                    33:02:c0:ec:c2:b1:dd:d8:08:ee:b9:1a:78:d6:fe:
                    2e:6b:40:66:3f:56:a5:1d:1f:7b:4c:e0:29:c0:5f:
                    92:60:32:33:02:0c:20:2c:af:b9:c3:a6:a4:21:6c:
                    fc:2e:81:59:b4:dd:2e:31:66:ea:26:24:e3:6f:78:
                    96:e2:47:7b:0a:82:64:e8:02:29:35:d3:d5:bd:87:
                    1a:18:0b:ce:fc:26:1c:b7:cb:d1:21:77:ea:f1:89:
                    04:ba:23:5b:3a:e7:7f:7f:f0:41:48:59:2f:e9:9e:
                    33:28:a8:57:f4:91:a4:e0:2c:b3:0e:f5:d4:a2:f9:
                    3d:03:7e:cf:4f:d2:71:ee:af:f8:d1:04:94:56:6f:
                    2c:c3:bb:fc:e1:6a:b9:0a:c3:c5:7e:f5:11:e6:15:
                    0e:5b:62:9a:13:ae:9b:a0:7f:03:d0:25:62:04:62:
                    4f:19:86:79:07:72:fb:03:48:66:2d:99:e6:0f:d0:
                    fb:74:ae:20:80:c0:c5:76:07:92:fb:05:31:80:b0:
                    39:a5:d1:2d:25:9c:cd:ad:47:11:9f:d4:ff:7e:73:
                    75:d1:d2:a7:a2:8e:e8:4e:bb:ac:cf:d8:b0:24:02:
                    2d:e2:81:42:07:9c:ef:64:bd:4f:53:42:0c:19:af:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:55:A3:76:A7:26:9E:B5:00:A2:70:FF:0E:06:48:A1:96:C4:F6:66
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c7:6c:be:ae:95:a2:8c:11:85:8c:1f:30:f0:8d:4d:c3:d9:
         25:c1:70:de:d8:0d:e3:c6:38:d9:df:63:dc:40:68:3e:42:99:
         dc:4d:c3:51:e6:0c:d7:aa:68:f9:5f:4f:af:cc:af:b3:b0:61:
         1c:29:65:21:91:0c:ac:ce:45:75:fe:dd:b5:45:13:ae:b2:f6:
         f0:53:41:a0:a6:f9:32:36:34:a7:e3:e1:40:49:4a:3e:10:d5:
         54:da:39:f6:bf:b3:e8:91:8c:c7:ac:52:53:e9:92:fd:c2:b6:
         db:19:ef:d5:44:39:eb:e4:bc:43:9a:32:a5:fa:02:b6:f7:40:
         bd:0d:70:b7:56:24:eb:b4:3c:02:58:a8:54:45:21:a3:1a:a4:
         8b:a0:2a:6e:25:68:0e:7b:71:c2:51:9a:5f:6d:d0:af:f3:a4:
         d5:6b:1e:36:99:0b:fb:21:f5:e6:62:7c:e4:e0:32:27:8d:59:
         68:7e:32:24:f1:0e:96:a4:b1:e0:14:fe:49:3a:fe:d1:31:30:
         78:1e:20:bd:a2:ce:33:1c:8b:a5:13:b9:85:ed:dc:25:a1:32:
         e5:f7:bb:3c:2d:0b:73:1a:c4:b0:66:f9:4c:14:33:23:b9:70:
         01:0d:c6:be:af:81:8f:a4:37:db:33:2c:77:0b:92:36:4b:32:
         65:93:ba:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:29 2026 by rpki-client