Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa
File:                     3230322e31302e35342e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier:          t5Iw0lmBrLhAZi4QG0QHngM6PjqO/mCm5dbia1vL2ZM=
Subject key identifier:   AC:60:45:EC:2E:B1:61:68:4D:D6:1C:C7:84:A8:33:C8:61:10:E2:E2
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       70CFF68A106A6A12B5D9C11F1B83BFD421BD09A5
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa
Signing time:             Wed 11 Feb 2026 03:00:01 +0000
ROA not before:           Wed 11 Feb 2026 02:55:01 +0000
ROA not after:            Wed 10 Feb 2027 03:00:01 +0000
asID:                     140475
IP address blocks:        202.10.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 17:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cf:f6:8a:10:6a:6a:12:b5:d9:c1:1f:1b:83:bf:d4:21:bd:09:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Feb 11 02:55:01 2026 GMT
            Not After : Feb 10 03:00:01 2027 GMT
        Subject: CN=AC6045EC2EB161684DD61CC784A833C86110E2E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:55:82:30:8d:a4:34:0f:1d:bd:0a:f4:47:
                    33:be:98:ac:03:c5:24:08:bf:05:44:80:98:af:f2:
                    eb:43:e9:17:e4:dd:39:aa:79:f7:1a:14:af:c1:11:
                    c8:eb:c4:e9:86:3b:0f:24:50:b0:60:45:0c:21:05:
                    08:f5:90:d8:03:37:0b:40:8b:e0:48:c5:15:ef:aa:
                    12:e3:15:97:53:c7:e9:89:cc:c5:41:9b:71:81:2c:
                    81:71:76:ef:4e:ae:51:17:e1:2c:01:4f:50:e3:95:
                    82:fb:de:ee:01:8d:6f:54:ea:1b:dd:62:86:16:b9:
                    b3:77:47:68:85:0e:dd:31:8a:d5:bf:5d:b9:a6:35:
                    9c:67:d2:ba:3a:e5:91:75:26:f1:6b:9b:2a:b9:fb:
                    b7:b0:1e:b1:58:08:ea:8c:8a:00:f8:77:bb:f8:a7:
                    53:dd:54:5b:6b:9f:91:51:05:db:40:8e:29:e0:0b:
                    c9:35:a4:ae:17:b2:be:eb:71:f4:db:85:b9:d9:68:
                    97:b5:e3:30:05:9f:1e:49:d2:e9:aa:5e:07:d2:9b:
                    54:74:e1:69:94:f4:83:e7:df:da:47:3f:10:67:5c:
                    2e:4f:f4:f0:2f:1c:17:7e:ab:5c:f7:13:7a:35:ef:
                    ee:51:9d:09:88:47:bc:4c:86:e9:29:ff:3d:5a:c3:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:60:45:EC:2E:B1:61:68:4D:D6:1C:C7:84:A8:33:C8:61:10:E2:E2
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:a4:0b:8e:a0:fc:e8:a7:68:a4:0a:d4:eb:c2:21:e3:11:7f:
         e4:49:dd:cf:2d:ac:d5:d1:67:ad:d0:29:c2:fe:97:6c:6e:09:
         21:fb:c4:41:07:86:b8:d7:c9:65:d1:f9:dd:65:0a:ab:01:0f:
         e6:6f:0d:1c:f4:e5:57:58:77:56:43:a4:72:b6:db:d9:9e:6a:
         7e:40:c7:a7:1d:ed:c3:fc:33:3f:8e:fe:b5:82:3c:00:33:17:
         71:2a:cc:07:36:77:48:29:c6:74:3e:0a:76:9a:4c:86:87:9e:
         1f:c5:5a:4d:b6:aa:3e:2e:fa:f1:c9:d5:d6:57:04:6c:df:65:
         58:b9:4e:94:70:2b:69:e6:ef:2b:d4:2d:eb:79:25:16:f1:e5:
         a4:f7:5e:17:b4:73:f1:22:e1:83:ac:fe:ac:95:ca:4e:bd:2f:
         d2:43:86:6c:6b:2a:bd:f3:83:7b:90:ec:3d:c3:49:4f:24:30:
         ff:97:ff:59:20:f2:19:57:d9:a1:9b:25:b7:58:50:cd:71:69:
         23:57:d5:e1:61:54:35:06:8c:5a:77:66:29:37:d6:1a:83:ff:
         77:b3:0e:6d:e9:76:57:d9:a8:5a:65:c0:8e:31:09:24:d8:9f:
         96:91:6d:ae:86:09:86:76:c4:1e:07:25:65:9f:b2:d3:1e:34:
         ce:a0:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:13:25 2026 by rpki-client