Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32342d3234203d3e20323031333431.roa
File:                     3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          YGy0DWIan0m6cHj+i356tb49y0BOxHi+yJ0Q2w1l+a8=
Subject key identifier:   60:55:51:D6:94:DF:62:3D:13:D1:DC:9A:5C:0B:28:C4:88:A5:8A:BF
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       762A6ACF9CA81502B416A8425B1C045E6BCAF9BF
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32342d3234203d3e20323031333431.roa
Signing time:             Wed 25 Feb 2026 07:03:46 +0000
ROA not before:           Wed 25 Feb 2026 06:58:46 +0000
ROA not after:            Wed 24 Feb 2027 07:03:46 +0000
asID:                     201341
IP address blocks:        202.51.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 21:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2a:6a:cf:9c:a8:15:02:b4:16:a8:42:5b:1c:04:5e:6b:ca:f9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Feb 25 06:58:46 2026 GMT
            Not After : Feb 24 07:03:46 2027 GMT
        Subject: CN=605551D694DF623D13D1DC9A5C0B28C488A58ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:88:10:97:b6:b3:fa:c0:eb:ba:19:64:d5:
                    3c:3c:ee:54:94:a1:1a:20:3f:a9:3a:6f:f4:e0:2f:
                    47:35:08:50:c5:f4:0e:45:e6:1b:fa:1e:ce:a7:10:
                    cf:a4:10:56:ad:3c:4c:41:ae:e7:af:76:98:5b:ad:
                    6b:6d:5f:f6:77:51:d1:4a:5b:0a:41:33:f1:1a:65:
                    82:f9:5f:d5:0a:7c:6c:b1:3e:31:b4:8f:3a:a9:6b:
                    ad:72:f2:96:b1:ae:8b:9b:04:d6:f6:a6:2c:6e:fa:
                    ea:a7:18:6d:89:af:e5:fd:a8:d8:fc:5a:d3:c2:b2:
                    c4:55:89:f6:41:a3:88:e8:4a:1a:ce:ec:b9:9f:3f:
                    69:be:a3:d0:e8:54:79:fa:55:93:26:68:e2:6a:31:
                    02:72:ef:d2:c4:47:f0:cf:c9:3f:58:17:00:f3:0c:
                    f5:f9:21:c7:99:c8:19:93:56:94:86:d2:62:71:73:
                    3a:41:fb:fc:fe:5e:63:ca:9c:e7:15:dd:89:91:7c:
                    58:ca:13:59:c1:2d:6e:cd:5d:fb:84:e4:88:b1:46:
                    40:f8:00:6a:48:a4:7a:f1:1a:e1:92:54:40:bf:b6:
                    f2:e3:0b:72:05:ab:15:18:86:43:00:46:d0:12:84:
                    e7:69:b5:99:b5:45:09:14:4c:29:ec:53:03:cf:9e:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:55:51:D6:94:DF:62:3D:13:D1:DC:9A:5C:0B:28:C4:88:A5:8A:BF
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:83:89:00:33:0f:94:e4:57:3e:40:23:0f:81:42:54:1d:
         b6:5b:ee:43:dd:c3:78:16:83:cc:1f:f8:88:e4:19:b9:07:3e:
         a3:4e:31:d9:9f:a9:d9:e4:6c:62:2c:7b:50:de:19:58:08:2c:
         1f:b5:22:08:57:49:8e:ee:a4:8c:f4:8f:48:77:5f:6f:9b:5d:
         10:1f:56:46:2c:2e:44:4b:04:01:e4:51:a6:f6:a6:d5:d5:23:
         2d:14:c9:40:53:d7:90:2f:6f:94:05:7f:d6:11:29:d1:54:81:
         18:82:b0:dd:27:8f:60:00:27:50:72:77:c0:a3:c1:6b:a4:8e:
         63:e4:a5:ae:58:b3:ed:76:f4:d5:89:41:34:19:e8:5e:c0:7e:
         9e:4d:a8:91:4d:38:9c:b3:6c:ce:5b:1c:72:32:99:2b:4f:3a:
         e9:5a:85:b3:b7:0e:90:04:0c:3c:eb:44:dc:f4:73:7d:f5:72:
         e9:93:82:34:e0:c5:2e:ad:fc:60:87:02:71:06:6d:6c:f3:25:
         6a:4c:84:d9:ad:d7:86:c6:48:60:b4:9f:e2:62:6e:bd:57:8b:
         cd:88:af:81:0c:df:bf:4e:ee:77:f0:75:7d:e1:46:72:c4:80:
         45:a7:55:19:bb:d4:73:0f:e5:c5:9d:3c:be:e7:8f:63:6a:5a:
         8d:e9:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:02 2026 by rpki-client