Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e35332e3232342e302f31392d3234203d3e2039333430.roa
File:                     3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (raw, json)
Hash identifier:          Gb7BtMa3ZwQg1TqLmijU1iSRdOGqKu707FAgIn+V6/Q=
Subject key identifier:   6F:C6:36:33:0D:D4:A5:B6:4F:17:70:81:C2:15:C4:C5:29:4A:47:5B
Certificate issuer:       /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Certificate serial:       2AC426C6A9487E0EDDACF34AB180CB3B0674567D
Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e35332e3232342e302f31392d3234203d3e2039333430.roa
Signing time:             Wed 18 Feb 2026 11:00:01 +0000
ROA not before:           Wed 18 Feb 2026 10:55:01 +0000
ROA not after:            Wed 17 Feb 2027 11:00:01 +0000
asID:                     9340
IP address blocks:        202.53.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
                          rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 15:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c4:26:c6:a9:48:7e:0e:dd:ac:f3:4a:b1:80:cb:3b:06:74:56:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
        Validity
            Not Before: Feb 18 10:55:01 2026 GMT
            Not After : Feb 17 11:00:01 2027 GMT
        Subject: CN=6FC636330DD4A5B64F177081C215C4C5294A475B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:1e:a5:f1:c1:36:f7:c6:6b:c6:4a:cf:03:
                    67:5b:0f:1a:81:5a:0b:ce:99:8a:d5:b4:61:5f:1a:
                    8c:f5:5b:d9:5b:49:47:2f:a1:8b:24:15:4a:8e:43:
                    d9:15:28:fe:1c:0e:53:26:74:78:73:0c:73:8b:88:
                    c1:ed:c4:d6:ae:f1:94:0c:1f:68:f6:f4:27:8e:57:
                    7b:99:66:68:46:4e:1c:19:48:06:35:b0:80:a3:eb:
                    71:eb:c0:cf:61:d3:fb:fa:7f:2f:3c:0e:94:eb:4b:
                    63:7a:de:56:0d:cf:b5:9b:49:8c:72:32:0b:fe:20:
                    2b:e0:05:39:be:49:30:c2:e4:e5:d8:9a:ae:3f:d0:
                    78:ce:c6:52:32:47:56:63:f8:80:9a:28:2e:f2:4d:
                    c0:bb:fd:2a:84:d0:9d:e8:d4:ee:2f:81:c9:5d:20:
                    e4:9e:dc:f3:9a:d6:3a:d8:c8:19:be:ad:53:6a:8a:
                    f1:7b:b5:80:45:a6:f0:f4:1d:41:b9:6d:75:e4:10:
                    97:6f:70:f6:33:3e:d4:2b:8e:13:a2:ea:de:81:5a:
                    6d:71:8b:93:b9:66:03:0d:29:8f:2f:fa:cf:3e:05:
                    6f:84:5a:57:34:d9:6c:d1:15:34:33:8e:9f:81:a3:
                    d1:02:2d:d9:50:de:8a:22:7e:46:b3:c7:99:07:ea:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C6:36:33:0D:D4:A5:B6:4F:17:70:81:C2:15:C4:C5:29:4A:47:5B
            X509v3 Authority Key Identifier:
                keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e35332e3232342e302f31392d3234203d3e2039333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.53.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:56:66:7a:bf:83:a2:2e:03:08:49:36:4d:ae:e9:77:ea:ab:
         1c:33:34:1f:42:3c:bd:c3:ee:24:f9:00:b3:50:9c:37:b7:56:
         14:33:5b:fa:2c:54:7d:77:b2:38:30:23:2f:a4:ab:25:83:3f:
         b4:6a:25:d9:a1:83:32:23:6a:59:75:56:06:da:b4:bf:79:1d:
         6b:a8:47:84:7c:c7:e4:33:ee:28:3a:80:c4:df:45:c3:8d:b6:
         d4:f2:0a:f6:b4:f3:61:58:6c:a3:33:99:f3:14:50:6f:7c:03:
         85:cd:52:97:7e:44:27:dc:7d:f7:83:49:3c:66:1c:50:31:1a:
         19:b5:9d:a7:fb:4d:b9:a9:8a:1c:7a:70:b9:de:8e:40:24:0f:
         d5:c8:39:33:f5:52:ab:be:0a:3d:a1:08:5d:18:4b:1f:a7:c6:
         2f:9e:26:57:e6:a3:7f:88:52:40:1d:2b:35:a5:f7:08:33:fb:
         b3:8b:97:ef:ff:f4:75:bd:4f:06:af:53:2d:d4:a8:ba:b1:b7:
         6f:75:04:bb:9c:09:2d:0e:e3:b5:5c:b8:5c:e2:c1:64:e5:8f:
         3e:c0:74:ee:11:a0:f0:b2:d9:34:17:ce:28:9a:0c:41:e4:8e:
         21:14:af:92:d0:73:88:37:c2:73:25:bb:52:69:58:5b:bb:c9:
         63:e7:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:30 2026 by rpki-client