Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
File:                     3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          QnpXNgQS0ANzts5qE/GQxLZvArtSxvVua1P/pq1g7S0=
Subject key identifier:   7D:DE:D2:C4:40:F8:BC:62:69:1D:30:8A:57:D4:03:04:AD:7C:E8:AB
Certificate issuer:       /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
Certificate serial:       11D6DCE40AFF5EB4AE96D1802F84A88FEDBD7D15
Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
Signing time:             Wed 18 Feb 2026 10:00:02 +0000
ROA not before:           Wed 18 Feb 2026 09:55:02 +0000
ROA not after:            Wed 17 Feb 2027 10:00:02 +0000
asID:                     133800
IP address blocks:        202.74.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl
                          rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d6:dc:e4:0a:ff:5e:b4:ae:96:d1:80:2f:84:a8:8f:ed:bd:7d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
        Validity
            Not Before: Feb 18 09:55:02 2026 GMT
            Not After : Feb 17 10:00:02 2027 GMT
        Subject: CN=7DDED2C440F8BC62691D308A57D40304AD7CE8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:fe:4b:ff:ef:e5:56:bc:2f:b2:24:b0:52:
                    47:50:a2:67:54:6d:5c:4e:fb:d5:8b:cc:6a:17:37:
                    42:92:bb:6a:93:45:62:23:16:3f:6f:c1:f6:dd:c2:
                    9f:28:c2:d4:0b:16:d5:e6:67:59:65:64:b6:dc:d3:
                    bf:03:d7:bb:2a:7f:a0:b6:0f:93:fb:bd:31:cb:73:
                    84:f9:6b:8e:44:07:3e:42:5b:4b:3c:2f:4a:71:8e:
                    7a:bb:49:6a:7c:ba:07:22:a5:81:44:be:d0:c6:4b:
                    8f:ec:83:fc:2d:e0:b8:a6:d0:bd:fc:37:9f:de:0a:
                    52:08:db:d1:58:56:ca:18:8e:4b:30:bf:7e:d9:f6:
                    11:6a:43:d4:9c:c1:c1:16:ac:cc:b9:12:38:53:5f:
                    93:d9:e3:8d:67:ea:f5:a1:0d:0e:c9:fd:03:5b:25:
                    a4:c4:d4:bd:63:b0:ad:88:d4:9b:c0:e2:6f:27:05:
                    48:e4:57:ef:62:fd:a6:d7:c6:b7:10:73:c7:30:7e:
                    ec:4c:3d:df:2c:a2:47:2f:1e:40:88:f7:06:bb:ca:
                    59:78:bc:b4:1e:cb:24:5c:69:b1:57:73:b7:eb:2c:
                    eb:bc:84:c8:30:72:0e:41:85:38:1d:9a:57:53:06:
                    78:df:31:a0:00:cc:1b:9d:18:85:ba:54:82:74:3e:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DE:D2:C4:40:F8:BC:62:69:1D:30:8A:57:D4:03:04:AD:7C:E8:AB
            X509v3 Authority Key Identifier:
                keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:48:04:e8:e5:de:a3:22:63:34:35:c8:40:a8:c6:a6:2e:d2:
         ac:48:6a:f7:0a:49:fe:08:dd:7f:69:76:45:d1:8f:25:bb:7f:
         9d:31:30:00:81:84:a8:b3:2c:24:b5:a9:56:69:ad:68:69:0c:
         d0:cf:2b:56:5b:fe:b1:91:3b:cb:36:a1:ec:1c:ea:a5:c8:27:
         36:79:06:a7:b4:04:4f:b7:39:de:59:fe:16:4d:9b:f0:bd:9d:
         e9:a0:c0:9b:32:a2:de:03:e1:0c:ba:15:91:bf:29:16:23:03:
         86:32:2f:45:b3:01:e0:0b:82:db:1a:65:9e:e2:09:07:1b:99:
         f8:64:e6:65:eb:13:d8:5b:6b:ef:e6:21:07:8d:80:d0:aa:52:
         7d:5f:61:db:37:93:c2:af:27:6e:a8:19:63:7e:cf:2d:07:c9:
         eb:01:33:01:dd:30:9f:4e:ec:e1:f8:cf:19:41:0f:79:4d:a9:
         a7:46:92:8a:39:96:37:cd:82:03:0c:b0:75:d5:1f:5a:c9:32:
         d3:eb:a8:58:aa:01:54:37:54:f8:4a:42:b7:5a:ee:71:ca:75:
         52:41:0b:7b:6c:99:41:da:5e:40:77:ce:4e:2e:8d:08:15:3b:
         e1:f5:b5:b8:28:69:d3:fd:44:29:22:b9:0b:b9:f3:fb:79:33:
         8a:ae:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:34 2026 by rpki-client