Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa
File:                     3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (raw, json)
Hash identifier:          1Of4tRYWdIQC2abiMWql8ohMmXxvsI3dRCsINQg4dzM=
Subject key identifier:   AF:EC:75:DB:9B:FA:DA:24:99:A1:ED:6B:F3:93:34:D5:F4:15:F8:41
Certificate issuer:       /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
Certificate serial:       50EC9867BEDF072C8A738EEC782FBB6FD2E7753C
Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa
Signing time:             Mon 06 Apr 2026 18:00:02 +0000
ROA not before:           Mon 06 Apr 2026 17:55:02 +0000
ROA not after:            Mon 05 Apr 2027 18:00:02 +0000
asID:                     152081
IP address blocks:        203.169.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl
                          rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ec:98:67:be:df:07:2c:8a:73:8e:ec:78:2f:bb:6f:d2:e7:75:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
        Validity
            Not Before: Apr  6 17:55:02 2026 GMT
            Not After : Apr  5 18:00:02 2027 GMT
        Subject: CN=AFEC75DB9BFADA2499A1ED6BF39334D5F415F841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:b1:82:20:cb:02:1d:c6:82:0d:37:66:9f:
                    e6:a3:a2:fe:93:aa:45:cb:58:f9:38:9f:4f:0a:3d:
                    34:8f:42:b8:ca:9a:63:3b:05:27:34:c6:75:f2:2f:
                    d5:a7:df:06:5d:9c:c8:e5:1a:44:a6:34:ba:2a:50:
                    93:1d:8d:c1:03:be:0a:de:c7:3b:57:ca:ee:45:31:
                    86:7c:38:dd:09:ff:7f:1c:c5:14:01:1f:58:a1:78:
                    49:23:2a:65:1b:2a:a5:6f:8f:cc:56:ec:93:a3:b2:
                    bf:a0:46:d9:75:a6:21:4e:68:90:a0:59:60:2b:17:
                    73:b9:a7:58:0a:7f:49:17:ec:17:af:a0:43:01:7c:
                    63:c1:08:29:6c:18:a0:72:e7:fd:95:9b:7f:94:0e:
                    29:90:19:e9:2f:74:15:14:5c:5f:bb:2e:d0:2c:ac:
                    7d:b9:80:cc:ee:8e:7d:da:9b:b7:2f:0f:ef:b5:0a:
                    75:f1:17:29:fa:d4:b6:4c:b4:a6:fa:b4:1d:57:04:
                    32:f3:1f:cb:e4:d7:cc:0b:53:43:dc:7c:00:e6:6d:
                    b6:ee:ba:bc:cd:4c:c9:d8:4d:b8:89:84:08:0a:f0:
                    c4:70:f7:c8:f2:4e:e9:a0:f0:b1:90:26:85:20:40:
                    2f:3b:d6:1e:2b:60:92:84:52:ee:9a:96:03:8a:51:
                    54:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EC:75:DB:9B:FA:DA:24:99:A1:ED:6B:F3:93:34:D5:F4:15:F8:41
            X509v3 Authority Key Identifier:
                keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:04:0d:8d:1d:53:62:8e:bf:43:fe:0d:2c:b4:f2:41:dc:1a:
         0c:5d:7a:c4:98:38:32:69:61:5b:03:05:d7:b3:74:9a:cd:ca:
         12:50:80:39:71:0f:29:a1:15:0e:00:1f:34:5d:64:6f:0c:67:
         77:c2:55:66:36:79:48:70:9c:29:80:d3:5d:33:05:cf:a5:26:
         bd:71:46:5b:65:8b:d8:3c:87:56:f4:d0:27:a9:cf:52:f2:0c:
         97:85:0a:0c:fc:36:d3:67:b3:d5:41:d1:63:2d:0d:27:f2:a5:
         fe:70:6e:86:9f:98:f3:d6:5c:66:26:63:a5:29:6f:c0:d9:5c:
         cb:f9:2a:98:27:6c:4c:2a:27:36:bb:c5:72:62:c7:51:a9:a9:
         bf:51:0f:e8:f3:18:61:51:5a:d1:d9:24:53:c4:1c:0f:10:f1:
         f2:af:ef:27:3c:00:9a:41:ad:72:64:a0:bf:7e:fd:11:b2:b9:
         3f:ba:df:79:43:5d:23:d3:ff:ab:ca:17:fd:0b:13:06:e4:92:
         78:01:69:29:c1:7c:e0:45:65:7c:8b:7f:51:17:ad:cc:16:87:
         f6:8c:29:38:22:8f:c7:b3:08:b9:6d:5d:ad:05:9d:d3:89:d8:
         2c:4f:52:57:19:97:7a:d9:93:eb:fc:1a:3b:aa:e5:24:ee:98:
         e8:cf:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:08:12 2026 by rpki-client