Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3230322e37332e3232342e302f32312d3234203d3e203138303034.roa
File:                     3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (raw, json)
Hash identifier:          j197qNOY6wT7VNdm2bQJsJLcn2mn63fggKQKF5A/w3Q=
Subject key identifier:   49:F1:99:DC:E3:6C:58:85:19:84:87:38:6B:A8:A7:49:E7:98:9D:7C
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       6E0B0CEB0CB88CB392318911A2065F8EF5B27651
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3230322e37332e3232342e302f32312d3234203d3e203138303034.roa
Signing time:             Sun 05 Apr 2026 04:00:02 +0000
ROA not before:           Sun 05 Apr 2026 03:55:02 +0000
ROA not after:            Sun 04 Apr 2027 04:00:02 +0000
asID:                     18004
IP address blocks:        202.73.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 18:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0b:0c:eb:0c:b8:8c:b3:92:31:89:11:a2:06:5f:8e:f5:b2:76:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Apr  5 03:55:02 2026 GMT
            Not After : Apr  4 04:00:02 2027 GMT
        Subject: CN=49F199DCE36C5885198487386BA8A749E7989D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:57:d0:f9:d1:68:c1:a7:9b:c3:d7:2c:b7:
                    ff:29:72:06:85:a4:bd:b3:4f:08:8f:00:19:9c:3c:
                    54:d7:7b:5c:83:59:9b:a7:94:da:ec:86:6e:f2:ed:
                    48:28:b3:4c:94:bd:46:59:bc:f1:c8:0c:42:2b:d8:
                    5b:df:27:1c:09:fb:4b:40:76:6d:51:3e:bb:48:b1:
                    61:42:fa:ba:0d:0f:98:da:9e:b7:bb:67:f0:c1:9d:
                    fd:c5:fc:e9:f5:76:dd:bd:b8:d4:9a:d7:80:f3:b1:
                    cd:ae:0b:fb:78:0b:03:c2:25:55:7a:9e:ed:85:57:
                    1c:00:7b:69:35:35:93:f7:38:fc:75:aa:9b:a8:34:
                    96:d3:9e:6f:51:9e:08:43:b0:94:bc:11:41:93:f1:
                    77:e5:52:3d:d5:42:4c:a4:62:02:61:db:17:aa:51:
                    d8:62:fc:d8:6e:5e:fe:11:9b:47:bb:a0:58:55:7c:
                    95:25:78:e6:86:68:81:28:ac:b4:c7:64:00:c6:93:
                    cc:48:33:38:f1:6f:9a:69:2c:86:18:72:57:7d:95:
                    a7:4b:d9:2f:a0:0d:0c:5b:57:d1:5b:5b:64:37:5f:
                    4f:c4:a7:c1:d3:69:03:6c:27:03:f3:e3:00:1a:94:
                    6e:b2:6c:86:32:ea:1a:8f:4c:71:ca:24:1d:e9:eb:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:99:DC:E3:6C:58:85:19:84:87:38:6B:A8:A7:49:E7:98:9D:7C
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3230322e37332e3232342e302f32312d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:30:d6:19:1a:c4:73:1a:e6:c2:26:8d:c2:69:3f:a2:17:ec:
         7b:2e:7a:69:49:64:f0:1f:b7:9e:2c:6c:ee:94:97:5b:38:85:
         67:d9:1b:c4:51:39:15:9d:e1:41:49:8d:87:a6:f2:4c:22:80:
         a8:d2:a3:86:51:b6:61:52:95:f4:c8:3b:1d:5f:49:45:32:30:
         23:a3:c4:2d:a3:40:61:8d:e4:72:b2:37:e4:71:1c:0d:d4:9f:
         6d:0d:76:ca:31:36:8c:62:97:8c:4c:db:48:c4:30:af:e5:c4:
         0e:81:a3:2a:81:0b:e9:5f:7f:00:5d:a6:7c:43:75:ba:83:67:
         42:e5:74:74:f4:b2:a8:11:87:68:da:6c:39:2b:d4:44:de:f4:
         44:66:46:c7:72:19:21:41:7b:27:e5:2e:08:c1:4d:d0:fe:16:
         3d:b8:de:2b:c0:a0:be:79:f5:44:13:87:72:3c:f9:09:63:9c:
         cb:fa:08:dd:8b:f2:7c:7d:11:33:f1:44:6f:2e:dd:f2:83:96:
         b7:48:3b:6d:ed:16:b5:dc:b9:f4:88:d5:02:55:f4:7a:7c:84:
         2f:9e:a9:85:9d:2a:8e:d2:ec:16:d1:ec:32:a8:94:55:d7:b9:
         e9:86:3c:c6:76:82:c7:6c:60:02:f7:16:d5:f5:d3:68:e3:d2:
         45:f1:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:28 2026 by rpki-client