Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3232203d3e2039333431.roa
File:                     3230322e36322e382e302f32322d3232203d3e2039333431.roa (raw, json)
Hash identifier:          HNmgqxve9fojjBoI0c9LjOMp4gEp+NrKoyYA7CQrCLs=
Subject key identifier:   E5:E9:30:19:A9:99:6D:D5:2E:04:9E:49:7E:80:FC:F0:E3:B2:C1:A4
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       2A97F7E4B60D68274EE2E21FCA4BE8E14500CF32
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3232203d3e2039333431.roa
Signing time:             Tue 07 Apr 2026 06:02:46 +0000
ROA not before:           Tue 07 Apr 2026 05:57:46 +0000
ROA not after:            Tue 06 Apr 2027 06:02:46 +0000
asID:                     9341
IP address blocks:        202.62.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 16:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:97:f7:e4:b6:0d:68:27:4e:e2:e2:1f:ca:4b:e8:e1:45:00:cf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr  7 05:57:46 2026 GMT
            Not After : Apr  6 06:02:46 2027 GMT
        Subject: CN=E5E93019A9996DD52E049E497E80FCF0E3B2C1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:d7:5d:7a:98:38:8e:fa:93:30:a5:b2:89:
                    83:4a:68:c1:61:33:64:f9:6d:ad:d9:ba:cb:b6:bc:
                    ef:84:fb:d9:20:07:1a:c2:23:ec:d9:6f:6b:79:f3:
                    1b:c8:0b:3b:80:5f:8e:50:7c:56:f9:0c:62:2c:7d:
                    98:e5:d3:0c:cb:95:19:24:5c:a6:7d:9e:e0:4f:24:
                    f8:11:0e:39:f4:6e:eb:e0:4f:73:8a:f6:d8:c3:24:
                    e2:fd:39:71:cd:21:4c:b7:ef:c3:de:79:e8:ad:71:
                    6a:37:37:6b:5c:f0:3d:5f:68:42:1e:e8:e6:22:58:
                    12:47:dc:db:44:50:af:56:dd:9e:6e:31:d2:f9:59:
                    bd:45:35:57:39:5c:b6:11:73:2e:12:55:a3:c8:01:
                    e9:45:c0:33:59:e1:a7:4f:37:8a:ff:82:7d:4b:c7:
                    b3:3a:c0:6c:9a:92:bf:62:30:cd:82:bd:7b:18:6a:
                    e7:6f:7b:4f:d6:59:53:ae:ad:69:2c:a9:e0:12:de:
                    c9:a8:f8:ef:89:6c:57:1d:9c:f4:37:94:6e:5b:d7:
                    dc:60:5f:60:87:70:25:dd:f8:a5:13:74:d7:f5:fc:
                    1e:52:8b:41:6c:43:a5:ad:c9:cd:44:94:3b:44:0c:
                    2a:57:66:e6:97:3d:86:10:fe:a1:9d:76:b4:a5:da:
                    b4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:30:19:A9:99:6D:D5:2E:04:9E:49:7E:80:FC:F0:E3:B2:C1:A4
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3232203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:6c:dd:28:ff:61:47:d6:df:0e:a7:27:aa:d4:a1:1d:ae:0e:
         73:2a:a7:00:be:6c:a5:36:a4:1d:d1:5a:24:c4:32:3f:ac:20:
         11:55:62:12:37:3f:75:bd:b9:ed:b2:be:93:5a:9f:f2:ad:f8:
         ec:84:6f:89:19:c9:e2:a1:86:14:43:d4:c5:60:0e:0f:5c:b0:
         82:6e:3e:73:50:a9:f2:34:6f:ef:1e:c0:ea:49:fc:40:f3:b5:
         df:09:76:94:2c:4c:0a:21:97:54:dc:aa:31:be:6b:72:ec:a7:
         eb:fe:50:4c:d3:40:6c:30:c2:d3:13:ca:81:e3:d9:08:9e:ae:
         d8:0a:1c:d3:58:98:4c:50:39:65:a0:39:5d:01:f9:5d:cf:41:
         ee:a5:a5:a4:bc:60:51:df:e1:fb:01:20:6d:07:83:f6:21:67:
         e9:7b:8c:c3:92:a4:ba:27:27:e1:b2:7c:2a:6a:f9:49:0f:df:
         18:7b:e4:75:74:84:2e:c4:3f:a7:ec:57:84:49:f2:82:88:10:
         9a:88:35:f4:b3:62:b3:3f:d1:22:e9:17:07:b9:85:c3:67:4b:
         17:52:22:b9:d6:95:c2:cc:93:53:64:e2:73:2a:64:05:82:9e:
         f8:64:51:f9:2d:ba:aa:51:76:62:71:6c:6a:0a:0b:e9:07:9f:
         ad:1d:0e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:53 2026 by rpki-client