Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32312e302f32342d3234203d3e203538383136.roa
File:                     3230322e37332e32312e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          iFyu0RvIHIUxWpTx5iIUKX8JKYiR6jVxgsobha6SsLM=
Subject key identifier:   B2:33:92:1A:50:EE:00:7B:43:97:F4:E5:5E:0A:80:48:3F:2D:D9:7F
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       1D37CBE66B40ADBCF6B6321EF51F396DFE7CBB87
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32312e302f32342d3234203d3e203538383136.roa
Signing time:             Thu 12 Feb 2026 11:02:03 +0000
ROA not before:           Thu 12 Feb 2026 10:57:03 +0000
ROA not after:            Thu 11 Feb 2027 11:02:03 +0000
asID:                     58816
IP address blocks:        202.73.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:37:cb:e6:6b:40:ad:bc:f6:b6:32:1e:f5:1f:39:6d:fe:7c:bb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Feb 12 10:57:03 2026 GMT
            Not After : Feb 11 11:02:03 2027 GMT
        Subject: CN=B233921A50EE007B4397F4E55E0A80483F2DD97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:4e:35:6c:c0:54:f2:f1:d9:38:86:13:60:
                    7c:cf:a0:d0:c7:e2:f4:32:7a:25:cf:c8:89:a3:24:
                    4a:8d:a1:a9:f0:3f:01:d4:a0:32:78:e7:18:65:00:
                    0b:2f:81:b6:2d:7f:38:d0:52:d2:b7:e7:b5:62:ef:
                    a9:11:4d:85:36:b5:fc:d7:ad:3d:60:b4:72:b1:75:
                    5a:88:82:e5:d5:93:a4:36:5a:5d:9e:20:d3:f7:64:
                    0c:bd:3c:6e:78:8e:b3:56:45:ff:d6:44:72:23:05:
                    75:e9:af:92:bd:1e:8d:40:d0:22:32:fd:99:8b:93:
                    df:f3:23:6d:73:12:95:46:5c:4b:7d:65:7f:9e:bb:
                    3d:f4:b3:0f:69:7a:ae:94:4b:9e:0e:c3:59:02:5d:
                    4c:49:cf:f7:9f:0e:0a:a4:52:a4:7b:d4:3b:cd:22:
                    64:b2:3b:15:fa:ac:a8:72:7e:b3:4b:61:de:7f:70:
                    02:72:9d:4e:c7:e1:8c:95:88:88:80:49:3c:fb:30:
                    f0:ce:77:be:7a:e9:2a:c1:4e:ae:5a:ce:13:7b:3b:
                    21:e6:77:a9:95:7f:a3:8d:3f:bb:d8:36:a0:fc:b8:
                    40:25:5f:90:8b:9c:a4:7c:1f:77:ae:21:83:20:07:
                    10:27:f5:e1:0e:8e:0f:2f:63:b3:ff:8a:6a:28:af:
                    b9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:92:1A:50:EE:00:7B:43:97:F4:E5:5E:0A:80:48:3F:2D:D9:7F
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32312e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:00:ae:e4:32:fb:66:c9:3a:1d:ec:61:8e:5a:52:05:ad:e1:
         35:3e:11:8c:00:19:3e:52:cf:34:59:8f:0c:6b:e4:c7:0a:dd:
         82:a7:ff:c5:67:e1:18:03:f5:e0:b2:e2:05:68:51:4f:eb:a9:
         83:b2:82:8e:83:2b:af:e7:44:d8:f8:3b:b9:5f:04:e4:da:c2:
         51:ef:df:19:56:96:82:c7:3b:47:e6:4a:2f:38:cc:fe:9d:88:
         a4:fc:a3:4a:9f:a5:ee:33:34:6a:44:cd:11:67:b5:61:39:8f:
         c4:52:5a:df:07:dd:b0:c3:8a:e2:d0:55:5b:25:1c:70:a5:f0:
         0d:19:fb:f8:d4:5b:e5:67:af:67:89:12:ec:cc:18:f7:3a:3f:
         aa:89:ee:5d:5d:c7:fa:63:7d:e2:b8:98:d5:38:f0:c0:63:3a:
         99:0d:b3:15:fd:11:9a:80:cc:2d:21:15:71:94:4f:e5:ab:93:
         80:6a:c0:a1:0a:21:f5:ff:48:4d:5e:21:f6:17:38:b1:ba:82:
         95:48:c3:e8:21:68:e2:0b:19:5c:d7:53:58:79:13:28:d9:d7:
         ea:d1:48:74:b9:72:ca:54:01:3b:c3:89:ae:61:63:61:fa:23:
         93:c9:8f:b3:7d:d2:df:f5:4b:b9:ab:ce:0b:69:79:c2:1b:53:
         1a:db:74:ed
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUHTfL5mtArbz2tjIe9R85bf58u4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF
MkY5MjE2NjAeFw0yNjAyMTIxMDU3MDNaFw0yNzAyMTExMTAyMDNaMDMxMTAvBgNV
BAMTKEIyMzM5MjFBNTBFRTAwN0I0Mzk3RjRFNTVFMEE4MDQ4M0YyREQ5N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQE41bMBU8vHZOIYTYHzPoNDH
4vQyeiXPyImjJEqNoanwPwHUoDJ45xhlAAsvgbYtfzjQUtK357Vi76kRTYU2tfzX
rT1gtHKxdVqIguXVk6Q2Wl2eINP3ZAy9PG54jrNWRf/WRHIjBXXpr5K9Ho1A0CIy
/ZmLk9/zI21zEpVGXEt9ZX+euz30sw9peq6US54Ow1kCXUxJz/efDgqkUqR71DvN
ImSyOxX6rKhyfrNLYd5/cAJynU7H4YyViIiASTz7MPDOd7566SrBTq5azhN7OyHm
d6mVf6ONP7vYNqD8uEAlX5CLnKR8H3euIYMgBxAn9eEOjg8vY7P/imoor7mbAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUsjOSGlDuAHtDl/TlXgqASD8t2X8wHwYDVR0j
BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD
ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5
MjE2Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04
NzZlLWU5ZTIzYThkOGFkOS8wLzMyMzAzMjJlMzczMzJlMzIzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzODMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKSRUwDQYJKoZIhvcN
AQELBQADggEBABgAruQy+2bJOh3sYY5aUgWt4TU+EYwAGT5SzzRZjwxr5McK3YKn
/8Vn4RgD9eCy4gVoUU/rqYOygo6DK6/nRNj4O7lfBOTawlHv3xlWloLHO0fmSi84
zP6diKT8o0qfpe4zNGpEzRFntWE5j8RSWt8H3bDDiuLQVVslHHCl8A0Z+/jUW+Vn
r2eJEuzMGPc6P6qJ7l1dx/pjfeK4mNU48MBjOpkNsxX9EZqAzC0hFXGUT+Wrk4Bq
wKEKIfX/SE1eIfYXOLG6gpVIw+ghaOILGVzXU1h5EyjZ1+rRSHS5cspUATvDia5h
Y2H6I5PJj7N90t/1S7mrzgtpecIbUxrbdO0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:29 2026 by rpki-client