Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3234203d3e2039333431.roa
File:                     3230322e36322e382e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          jMWa0/slXN3PRrmtYBVoU1viMEkasJw9vswSM8r08Kg=
Subject key identifier:   91:3E:12:6B:4D:B6:7F:69:94:DF:CC:81:A0:1F:7C:14:44:F3:E8:43
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       2FA222FB5E82991877B52A627FCE2B176A665921
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3234203d3e2039333431.roa
Signing time:             Tue 24 Feb 2026 03:00:02 +0000
ROA not before:           Tue 24 Feb 2026 02:55:02 +0000
ROA not after:            Tue 23 Feb 2027 03:00:02 +0000
asID:                     9341
IP address blocks:        202.62.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a2:22:fb:5e:82:99:18:77:b5:2a:62:7f:ce:2b:17:6a:66:59:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Feb 24 02:55:02 2026 GMT
            Not After : Feb 23 03:00:02 2027 GMT
        Subject: CN=913E126B4DB67F6994DFCC81A01F7C1444F3E843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:d3:94:5c:a5:03:46:40:fb:c3:b7:00:f0:
                    b6:59:be:65:24:32:1d:68:e3:1f:d0:10:c8:cd:91:
                    b9:4f:ba:bd:5a:8d:81:f2:a9:f0:f2:4a:0a:75:5e:
                    65:1a:ea:40:dc:8e:0a:f9:46:dc:b8:05:ff:3e:6e:
                    3e:70:61:32:b0:57:85:1d:58:3c:85:23:ba:18:81:
                    9a:48:9a:3a:42:1b:ac:38:32:54:c0:d9:c5:6d:e0:
                    19:f1:ad:7a:45:bd:fc:ed:62:5c:d7:12:bd:75:46:
                    2b:40:f4:24:09:ea:2e:ec:f5:2f:98:93:1a:d8:cc:
                    48:54:06:98:dd:2b:83:d6:6c:33:40:04:38:1e:e1:
                    1e:2f:44:fa:08:78:fc:25:23:06:53:c1:69:56:de:
                    97:7e:5d:60:a7:81:ea:98:49:01:f8:9a:40:e1:9d:
                    bb:94:45:11:06:e3:b5:11:f5:03:53:67:d5:d6:2a:
                    0b:9b:b5:c8:53:80:68:20:98:2e:d3:86:c7:20:8d:
                    0d:09:f3:21:61:85:39:35:bd:57:cb:04:1c:0e:3a:
                    b3:86:ee:ee:6c:a6:bb:9f:18:0d:62:0d:d9:2e:3b:
                    90:d4:e7:c2:ce:86:8a:48:8a:ba:44:79:63:f3:14:
                    5c:b9:f5:70:5a:0e:62:a8:62:b3:02:c8:59:36:40:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3E:12:6B:4D:B6:7F:69:94:DF:CC:81:A0:1F:7C:14:44:F3:E8:43
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:4f:4a:20:f5:b9:66:79:2a:44:8c:f5:47:fa:f4:59:43:d1:
         ad:0e:54:9d:67:10:d8:ab:43:70:af:9b:83:0e:9e:c4:2a:a3:
         a8:36:ad:fc:8d:9b:1a:1d:dd:09:1d:f3:96:10:b6:5c:d6:c7:
         18:94:f4:59:a0:b1:80:77:63:05:79:46:c5:28:d1:fe:e2:ef:
         03:7e:51:3c:4d:a6:68:da:42:f6:b0:01:36:b1:1d:4d:15:35:
         3f:7b:5b:3e:6f:ea:4e:c3:89:37:2d:7b:0d:bf:0f:37:f1:c7:
         f6:cb:6e:65:63:eb:e5:2d:87:66:a6:9f:51:e8:c6:63:ac:86:
         74:b2:d9:e1:04:ed:24:a3:37:88:db:c0:96:ea:e2:4f:a2:79:
         f8:9c:40:79:45:d1:d2:f9:0e:9d:ca:be:91:f8:4e:89:3b:6d:
         20:36:bf:d7:76:ef:c7:46:9d:b0:4f:df:e7:bc:0b:0b:4c:98:
         a4:31:57:3c:33:33:59:f5:26:a4:36:7a:d7:ee:9a:d0:b9:c3:
         9f:a0:ff:1d:9f:3a:5c:ba:44:63:24:36:73:c1:56:29:2e:26:
         4d:a3:2d:0f:49:b9:91:4a:89:ea:ea:65:15:45:b5:62:1a:99:
         95:d1:30:d6:56:17:08:ce:97:0a:85:ec:cf:d2:88:8c:e7:b4:
         30:56:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:41 2026 by rpki-client