Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35352e302f32342d3234203d3e20313430343735.roa
File:                     3230322e31302e35352e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier:          BaiHP/WyfPSKz2ZE250nxB/XeonjCiIZYzss3WPGmGg=
Subject key identifier:   0D:91:62:87:51:07:2D:07:EE:A7:ED:11:44:4B:51:71:F3:14:0C:98
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       28E7FACA148EC3EE0EB7B6A0B2189A7DA6DAD008
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35352e302f32342d3234203d3e20313430343735.roa
Signing time:             Wed 11 Feb 2026 03:00:00 +0000
ROA not before:           Wed 11 Feb 2026 02:55:00 +0000
ROA not after:            Wed 10 Feb 2027 03:00:00 +0000
asID:                     140475
IP address blocks:        202.10.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 17:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e7:fa:ca:14:8e:c3:ee:0e:b7:b6:a0:b2:18:9a:7d:a6:da:d0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Feb 11 02:55:00 2026 GMT
            Not After : Feb 10 03:00:00 2027 GMT
        Subject: CN=0D91628751072D07EEA7ED11444B5171F3140C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:5e:d0:11:ad:7b:22:ca:31:ce:98:84:3a:
                    0d:45:2a:ae:93:bf:5a:35:69:a7:84:ef:2e:6c:22:
                    af:4d:e5:36:b9:53:a8:f4:40:02:e6:69:2a:4a:06:
                    05:76:03:54:7e:89:2c:a6:8a:65:d9:38:52:be:7f:
                    d8:86:e6:46:6d:cc:cd:d8:eb:93:15:32:ae:94:ad:
                    46:47:63:bb:7e:71:e0:30:11:99:82:76:71:19:1c:
                    63:5d:80:86:be:d0:2b:90:cd:18:49:c5:e5:c0:55:
                    c2:06:79:47:a2:31:bd:d0:d0:d9:b1:90:16:33:39:
                    df:92:d2:c5:c8:d3:17:c5:a4:b6:f1:d0:dc:21:12:
                    4e:1e:00:e0:ab:4e:09:f7:dd:c9:7e:f6:2c:e6:0a:
                    33:f7:54:5b:04:bb:ae:dc:bb:2d:7c:af:d4:62:ea:
                    2e:2c:b3:93:f4:bd:4b:03:6c:ff:84:87:82:b1:a2:
                    08:8b:f1:94:de:80:a5:37:c0:58:c6:05:6e:2d:08:
                    c7:3c:52:3c:76:46:e4:ff:12:fa:d9:42:5e:1f:ed:
                    de:16:63:40:49:93:18:95:20:db:09:8b:0f:7d:45:
                    4d:95:f0:8b:76:2f:88:c9:20:af:0b:0d:f9:27:db:
                    b8:e1:5a:dd:9f:54:74:77:1c:e1:c9:67:9c:02:70:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:91:62:87:51:07:2D:07:EE:A7:ED:11:44:4B:51:71:F3:14:0C:98
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35352e302f32342d3234203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:f1:12:88:a8:5e:ea:92:4e:5a:8e:f9:5c:75:d5:32:a4:2f:
         fe:b3:cf:66:2c:b1:16:99:ee:79:76:96:c3:46:3e:3f:03:3f:
         a9:88:8f:af:04:67:9e:b4:f3:97:10:d3:97:57:1e:ad:7a:10:
         7d:14:31:01:d0:ab:aa:76:9e:6b:f7:a7:1e:d2:54:c7:c3:22:
         b3:a2:df:08:e6:77:27:37:08:83:f3:f7:79:cf:b9:8f:55:dc:
         a9:15:61:e2:6c:3e:d4:4c:7f:92:bc:1c:6e:ae:8e:2d:91:02:
         8d:ec:e3:6d:be:67:9d:e8:34:38:b5:65:71:7c:3e:ca:29:fe:
         8a:66:00:f1:57:33:31:db:84:7f:28:c4:eb:3b:58:a1:03:82:
         67:2e:a2:9c:15:19:51:f6:22:5d:71:13:ad:40:78:ca:1f:ec:
         38:3d:74:dc:74:b2:cb:41:2d:06:1a:82:0a:12:be:cd:98:bf:
         73:1d:01:c2:25:fb:76:ae:1a:10:62:2e:4e:ff:41:49:89:d1:
         79:d8:ae:60:5d:81:82:82:e8:1a:57:be:f5:06:d4:d4:e7:95:
         fb:2e:16:2d:5b:00:a5:e2:c0:f9:a0:ab:6c:f4:4b:7b:37:b1:
         42:ed:c9:64:a1:c7:8d:23:91:13:9c:e5:a1:aa:18:97:07:63:
         68:5d:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:17 2026 by rpki-client