Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/33362e35302e3232322e302f32332d3233203d3e20313532303636.roa
File:                     33362e35302e3232322e302f32332d3233203d3e20313532303636.roa (raw, json)
Hash identifier:          ozSd1u+8bf2XLEBevvXLin5zOowkUYuQYMS45VH+lyo=
Subject key identifier:   82:66:4A:9B:A1:E2:CA:95:56:20:47:AF:31:21:09:83:EE:07:13:4E
Certificate issuer:       /CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C
Certificate serial:       4EDAEBCFE70600896EAB1A5705D790837739015B
Authority key identifier: 94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/33362e35302e3232322e302f32332d3233203d3e20313532303636.roa
Signing time:             Sun 15 Mar 2026 14:00:01 +0000
ROA not before:           Sun 15 Mar 2026 13:55:01 +0000
ROA not after:            Sun 14 Mar 2027 14:00:01 +0000
asID:                     152066
IP address blocks:        36.50.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl
                          rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 14:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:da:eb:cf:e7:06:00:89:6e:ab:1a:57:05:d7:90:83:77:39:01:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C
        Validity
            Not Before: Mar 15 13:55:01 2026 GMT
            Not After : Mar 14 14:00:01 2027 GMT
        Subject: CN=82664A9BA1E2CA95562047AF31210983EE07134E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:34:50:63:80:b4:fb:b5:b0:bf:15:2d:15:
                    83:fd:2e:1c:e1:3b:5a:3c:05:a0:fb:01:53:c2:52:
                    f7:9b:05:eb:6b:73:16:ad:ad:ef:c5:57:bd:95:5c:
                    a9:cc:aa:c9:c5:75:76:8a:e8:c9:b6:a8:2e:2f:39:
                    32:56:b7:01:d1:eb:ac:ea:f5:b8:41:9b:c1:0c:2f:
                    c3:ca:ed:19:73:b8:91:37:44:a9:20:55:9d:6c:e5:
                    50:7e:f9:8a:c9:75:3a:bf:87:4e:f0:07:bf:5a:d3:
                    94:af:80:9c:2c:41:ec:c6:e1:88:ad:28:1d:64:ea:
                    34:68:ad:14:7a:44:3b:4d:6b:c0:4d:3f:fb:ce:cb:
                    50:71:fc:ef:a1:61:49:26:fd:c4:44:77:31:6c:05:
                    6a:59:5d:b4:f6:fa:47:e0:80:54:83:37:56:dd:a3:
                    6a:b8:f5:a7:a1:92:c0:9e:c1:07:1d:fc:e9:f4:df:
                    ba:89:1f:d9:f1:5d:4d:54:b4:93:a9:91:06:a7:5a:
                    9c:36:1f:c9:a9:ee:be:69:bf:f7:74:b8:ca:93:8f:
                    93:e9:3f:49:6d:d2:01:b5:3c:17:be:b0:b5:51:03:
                    dc:db:87:9e:a0:41:3c:af:12:20:29:5f:e2:fa:66:
                    6b:98:b0:f8:50:7b:0e:3f:c9:5c:57:1d:44:26:3b:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:66:4A:9B:A1:E2:CA:95:56:20:47:AF:31:21:09:83:EE:07:13:4E
            X509v3 Authority Key Identifier:
                keyid:94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/33362e35302e3232322e302f32332d3233203d3e20313532303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:e5:84:49:b6:57:5c:84:38:24:2f:b4:48:8f:37:c2:3d:51:
         85:2e:a5:0e:ce:5e:b2:71:b0:47:0f:c3:53:69:6c:26:5b:27:
         67:d6:62:5f:42:6b:c0:15:44:2c:71:8a:9a:52:c9:1e:81:0e:
         2c:39:35:20:fa:12:19:a5:15:30:fd:1f:67:3d:ed:b1:c8:70:
         dc:26:ae:b1:50:a7:8e:6f:43:1b:3d:22:1a:16:6e:16:f0:d9:
         4a:0b:e4:b4:62:90:3b:24:f4:2f:93:f5:a7:78:fd:db:ba:45:
         f2:88:b2:54:c6:dd:f0:8e:8e:c1:12:11:9c:8b:a4:5d:be:22:
         d2:80:e4:25:97:68:ab:83:7a:56:c3:b9:d1:d2:57:f1:80:5c:
         6f:a8:91:a4:69:ce:be:95:c1:ca:77:07:17:5f:60:e3:5f:6f:
         22:3e:39:ed:55:b2:c0:3b:d4:53:33:91:1e:c4:ce:09:fc:1b:
         fd:85:ef:49:f0:7b:ba:22:7d:4a:70:30:3a:41:c4:16:86:e2:
         bd:2f:c9:db:cd:01:4e:26:72:c3:4a:c9:0f:b9:e9:02:c2:93:
         e5:bb:11:a3:d2:ae:af:46:e4:3d:51:e8:f4:25:74:e2:df:ee:
         7b:cd:13:f5:7f:aa:98:f5:e5:1a:5a:e3:82:73:85:87:42:cc:
         da:c4:bf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:11 2026 by rpki-client