Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3134362e35362e302f32312d3234203d3e2039333431.roa
File:                     3230322e3134362e35362e302f32312d3234203d3e2039333431.roa (raw, json)
Hash identifier:          UqKiaHD+3+BmFFol6ZVnM3m0RNawG7GlVm3gCBG0tUc=
Subject key identifier:   3D:ED:DD:FB:B0:7B:79:7A:5A:62:96:6A:21:B9:C8:CA:40:6E:3B:BC
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       48C105DFFEEBCC01F59271DE2153191EDDE33787
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3134362e35362e302f32312d3234203d3e2039333431.roa
Signing time:             Wed 18 Feb 2026 09:15:38 +0000
ROA not before:           Wed 18 Feb 2026 09:10:38 +0000
ROA not after:            Wed 17 Feb 2027 09:15:38 +0000
asID:                     9341
IP address blocks:        202.146.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c1:05:df:fe:eb:cc:01:f5:92:71:de:21:53:19:1e:dd:e3:37:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Feb 18 09:10:38 2026 GMT
            Not After : Feb 17 09:15:38 2027 GMT
        Subject: CN=3DEDDDFBB07B797A5A62966A21B9C8CA406E3BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:ac:6b:1b:61:68:c5:e5:82:28:6b:62:7a:
                    e5:28:3b:29:49:23:62:a3:81:49:4b:15:47:31:0d:
                    78:d3:e6:27:dd:95:3f:3b:dc:67:b2:1b:cb:40:c5:
                    0c:91:93:4a:e4:ee:30:bd:86:9e:9b:27:58:4b:1b:
                    e3:9a:f5:c5:6c:62:4a:f8:ae:3c:39:44:46:ec:91:
                    77:af:c7:88:82:e7:e4:be:cf:5b:ad:fe:4b:35:91:
                    0c:88:46:dd:69:83:6f:33:da:92:ef:bf:38:ab:2a:
                    ce:1e:c7:ab:16:07:5f:f1:eb:04:87:2e:0e:49:ed:
                    a6:2a:e4:99:52:c3:32:3b:ce:4a:db:5a:19:d5:e4:
                    ff:33:05:5a:bc:8a:26:0b:d4:64:0c:87:33:c6:f5:
                    a5:44:12:34:47:2a:65:a8:e0:3a:34:c0:45:a4:0e:
                    a6:c6:8b:e7:03:a5:d8:19:7b:7b:e8:51:9a:3a:1e:
                    29:8a:b6:6f:c3:11:ba:4a:ff:6a:58:fa:9e:61:6d:
                    02:7b:af:71:09:78:a9:f0:05:3c:9b:29:88:91:be:
                    d6:99:da:a7:03:e5:b6:14:3c:8c:2c:69:fb:b4:42:
                    f6:10:bb:42:99:30:8b:96:ad:8c:98:69:db:ad:f7:
                    ad:88:c0:30:ba:6c:85:7f:a9:29:4a:78:45:aa:c1:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:DD:FB:B0:7B:79:7A:5A:62:96:6A:21:B9:C8:CA:40:6E:3B:BC
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3134362e35362e302f32312d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.146.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:cc:4a:db:fe:b4:e8:4e:d0:f1:20:bc:ef:de:16:40:f3:
         ee:41:b9:30:78:ad:40:32:af:e0:53:9e:79:b7:62:6e:29:44:
         38:23:a3:c8:68:18:e7:46:db:cf:9d:a7:dc:c0:7b:19:ca:0c:
         40:3b:f1:47:66:23:1f:f5:d3:ec:72:e9:fe:b4:83:52:69:52:
         64:bb:0b:71:bf:ff:18:71:b5:ae:1d:d4:08:60:89:b9:44:ba:
         26:e8:5f:0f:6e:7e:76:15:2a:bb:ea:cc:c3:23:3c:6f:f5:a2:
         7e:9d:13:70:29:3d:74:f3:c7:0d:de:8d:d7:e3:7f:67:85:16:
         f3:01:c8:89:1e:33:38:63:20:64:bb:5d:cd:ae:39:8f:f2:90:
         f1:56:58:c8:30:64:93:a6:18:24:6f:e6:ce:46:72:1e:ca:45:
         2f:3c:fa:c5:c2:cc:a8:f1:f8:86:a0:1d:cf:64:07:47:6f:41:
         89:be:1f:92:91:a9:b9:69:35:75:c6:3d:87:5c:ab:bd:aa:08:
         6a:e2:1c:40:72:57:b2:11:1d:79:84:8f:a1:1c:51:ad:4f:e1:
         5e:49:27:0b:52:20:91:69:0f:93:33:0b:ec:d8:59:b9:d7:b2:
         d9:00:d6:17:79:92:5a:a8:91:67:da:61:8a:98:ec:34:1c:9b:
         de:f9:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:45:49 2026 by rpki-client