Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32332d3234203d3e20313430343735.roa
File:                     3230322e31302e35342e302f32332d3234203d3e20313430343735.roa (raw, json)
Hash identifier:          ZnD/JsqY5sP+EdZhAJ8TmSj+g9b0SrhYVGD1OpeqS50=
Subject key identifier:   9B:66:1D:1B:31:81:42:91:92:28:C9:A0:79:D3:D9:07:1E:F4:EA:12
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       57AD5042BFE2FC0361F3198E2E86389703162D78
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32332d3234203d3e20313430343735.roa
Signing time:             Tue 10 Feb 2026 10:00:01 +0000
ROA not before:           Tue 10 Feb 2026 09:55:01 +0000
ROA not after:            Tue 09 Feb 2027 10:00:01 +0000
asID:                     140475
IP address blocks:        202.10.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 17:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ad:50:42:bf:e2:fc:03:61:f3:19:8e:2e:86:38:97:03:16:2d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Feb 10 09:55:01 2026 GMT
            Not After : Feb  9 10:00:01 2027 GMT
        Subject: CN=9B661D1B318142919228C9A079D3D9071EF4EA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:73:b4:83:1b:0b:56:dd:9b:84:3e:7b:d6:
                    96:f8:e4:44:67:f4:3b:32:18:a4:5a:8f:06:f6:a6:
                    33:2b:c7:f1:b5:9c:55:31:1d:3f:3b:37:82:33:5a:
                    a2:fe:68:ca:7d:e8:52:c6:80:27:04:bf:c0:41:bf:
                    1e:f5:ab:46:05:cc:61:53:cf:b9:d7:8b:66:f2:10:
                    54:25:bc:23:22:2b:46:a6:87:79:9e:3c:69:01:dc:
                    89:0d:cf:4a:68:4a:42:2e:16:55:27:a5:b5:e9:b7:
                    3e:6f:d0:5b:3c:8b:64:7d:9a:a4:06:d5:e8:02:70:
                    18:de:30:a5:db:ac:7b:37:79:36:22:e2:e8:e0:33:
                    06:76:da:c2:3b:d4:20:40:70:02:d1:46:63:88:15:
                    47:84:e2:8b:3a:35:b1:2b:21:09:8e:af:e1:82:ee:
                    2c:b6:8f:f5:6f:d6:67:e6:43:c5:44:36:02:b0:d5:
                    a6:22:28:f5:2a:22:b2:cc:25:7c:2c:2f:fa:c7:5d:
                    a0:d7:4f:2d:43:18:6f:52:70:d5:ce:f4:0b:5e:e1:
                    99:2e:78:2d:4f:dd:34:32:e5:ff:8c:3b:a8:54:3d:
                    7d:6b:3e:1b:5d:57:76:91:8d:11:f0:f9:6a:9f:e6:
                    b1:67:a4:e0:8b:ed:f5:e2:fd:1a:73:ca:b6:91:83:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:1D:1B:31:81:42:91:92:28:C9:A0:79:D3:D9:07:1E:F4:EA:12
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32332d3234203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:bf:11:61:ff:a8:74:61:ab:32:b8:66:13:60:cd:2f:36:01:
         b9:6c:c0:89:ba:2b:8f:af:cb:a8:e2:1e:dd:b4:b4:de:d0:51:
         dd:1c:3d:aa:0b:73:a4:88:b5:41:16:9e:b2:af:d2:44:e5:b5:
         ba:a8:c6:e5:d3:60:be:2c:34:bf:5f:a6:d6:df:11:04:56:bb:
         e1:95:4f:fb:85:77:02:ce:3c:32:60:b3:2f:b4:98:ab:88:fb:
         2a:c8:d6:b0:6b:0f:7e:46:3c:96:92:a3:bb:8e:1a:0b:07:68:
         d0:2c:8b:c8:71:b4:cc:ef:98:61:21:7f:79:83:61:00:6d:a4:
         e8:d6:a5:89:83:88:56:4b:e6:91:eb:1b:55:bb:e3:54:89:bc:
         7a:ce:85:90:4a:cf:ba:f7:3b:cf:af:4c:97:f0:95:b4:43:26:
         13:3e:85:03:11:48:ce:70:9e:3b:d4:49:07:41:58:a8:de:25:
         84:cc:8f:89:28:0b:d3:2c:af:6c:57:92:c4:ea:15:84:d5:77:
         97:94:fb:5a:f4:46:74:3e:32:ab:b5:b7:a7:5e:fe:09:10:85:
         0b:df:5c:4d:a7:83:cc:9d:a8:91:15:95:12:73:04:96:03:f6:
         8f:6c:e0:56:ab:7b:10:ab:f8:9a:7e:c0:d3:12:ed:6d:e0:29:
         89:2a:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:13:31 2026 by rpki-client