Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36312e302f32342d3234203d3e20323031333431.roa
File:                     3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          WokSKV1NyKPp5JmVhTT7RX9X4V0DteRntg1alBFixWo=
Subject key identifier:   3B:A6:44:B3:A5:7B:82:A9:81:BA:56:86:19:85:AD:2D:00:4E:66:7A
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       3DA20675CBFEA39C590F0385D2E385CBB0E9D341
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36312e302f32342d3234203d3e20323031333431.roa
Signing time:             Wed 25 Feb 2026 07:03:47 +0000
ROA not before:           Wed 25 Feb 2026 06:58:47 +0000
ROA not after:            Wed 24 Feb 2027 07:03:47 +0000
asID:                     201341
IP address blocks:        202.51.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 21:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a2:06:75:cb:fe:a3:9c:59:0f:03:85:d2:e3:85:cb:b0:e9:d3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Feb 25 06:58:47 2026 GMT
            Not After : Feb 24 07:03:47 2027 GMT
        Subject: CN=3BA644B3A57B82A981BA56861985AD2D004E667A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:d5:85:d6:57:18:6d:86:a1:dd:3a:16:b3:
                    24:0e:51:de:4c:81:65:9f:85:4d:9c:e5:28:96:aa:
                    64:a7:92:1f:1e:bf:87:20:b0:cd:b1:a9:5a:54:e6:
                    54:7a:f6:4d:61:16:56:88:80:b6:d2:13:7b:ad:c1:
                    31:e0:f2:50:f7:fd:5b:b6:08:13:9a:4e:4b:16:fc:
                    e8:52:53:1f:a1:b9:9b:2c:a7:31:5d:87:ce:48:00:
                    7d:24:8e:ec:23:be:c0:8d:b7:ec:fd:44:19:77:4a:
                    4c:50:de:f8:85:78:27:cf:e8:4e:e9:6c:1a:10:52:
                    6e:df:b5:d7:b0:01:2e:01:7a:05:1c:d7:2e:07:3c:
                    2e:e8:10:51:fe:96:3f:31:11:27:ca:36:50:15:09:
                    67:d2:7d:bb:2b:77:9f:4b:45:23:b7:d0:89:d5:bf:
                    fc:76:df:af:c7:6c:14:f3:f6:93:ae:ed:e3:8a:fa:
                    ef:c9:15:18:81:79:63:47:31:e9:67:f6:71:8c:60:
                    49:df:7e:39:a9:02:e0:31:3f:ed:24:dc:94:99:7a:
                    6e:24:97:d4:c5:92:bd:51:4a:ef:4e:e8:c7:15:88:
                    2c:22:a7:91:52:ab:44:50:ef:5f:48:33:3b:fd:2c:
                    ef:b7:d6:55:9e:e0:9a:62:07:db:4b:69:54:51:4e:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A6:44:B3:A5:7B:82:A9:81:BA:56:86:19:85:AD:2D:00:4E:66:7A
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36312e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:59:58:2b:6c:ca:b8:bb:18:1a:b7:ea:09:aa:4a:16:86:8f:
         d2:18:6b:14:59:e7:bd:e4:48:40:e8:41:26:33:fc:52:5c:0b:
         1d:4e:4c:4a:08:e5:88:3b:fa:a8:5e:96:99:50:8a:e5:db:30:
         6c:be:a5:f6:7a:18:43:20:bd:bd:64:6c:fc:35:ce:ca:99:0d:
         a9:73:de:02:b7:6c:10:3d:82:67:87:4b:7b:ab:9d:54:e1:b5:
         56:e6:7d:9e:dd:29:ba:6a:1e:61:6f:cc:66:ad:41:93:3f:29:
         21:43:c1:3e:09:80:44:5b:82:a5:81:c9:c4:b8:14:79:b0:7e:
         a0:85:c1:80:a2:e3:1c:f4:8c:f8:94:35:19:6b:1e:38:c0:1c:
         78:27:ae:b9:12:c8:d2:33:45:16:be:fe:b8:c4:9f:74:d4:d7:
         55:d0:db:d8:6d:ff:4c:0c:97:df:24:10:af:23:88:42:9e:1b:
         c9:45:75:01:47:1e:a9:bf:d6:ba:69:fd:17:f9:6b:83:87:be:
         4b:59:12:4c:99:29:7b:e7:4a:21:c2:83:42:99:67:b8:99:ee:
         f5:bd:1a:7e:ec:22:22:eb:c3:b3:5d:20:0a:5d:6c:6e:c4:e2:
         f7:6e:e1:ed:f7:a0:cf:95:b8:0a:e2:04:00:cd:a3:ad:dc:af:
         53:6a:92:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:07 2026 by rpki-client