Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138342e302f32342d3234203d3e203234353334.roa
File:                     35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier:          QGhKSlIsixKbTEhaqUudsGvUSA4uhlI4HytmJKQImH4=
Subject key identifier:   27:E0:34:FA:D7:CB:4B:C4:C0:E5:73:91:21:0B:5C:CB:35:FD:E2:F4
Certificate issuer:       /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial:       21DB796DD50D696784A6BCF17DCB73A9FBA2D2A0
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138342e302f32342d3234203d3e203234353334.roa
Signing time:             Sun 03 May 2026 02:11:34 +0000
ROA not before:           Sun 03 May 2026 02:06:34 +0000
ROA not after:            Sun 02 May 2027 02:11:34 +0000
asID:                     24534
IP address blocks:        58.147.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
                          rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:db:79:6d:d5:0d:69:67:84:a6:bc:f1:7d:cb:73:a9:fb:a2:d2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
        Validity
            Not Before: May  3 02:06:34 2026 GMT
            Not After : May  2 02:11:34 2027 GMT
        Subject: CN=27E034FAD7CB4BC4C0E57391210B5CCB35FDE2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:f4:53:aa:4a:5c:5e:c2:83:04:1a:9c:cc:
                    0e:fd:d5:7a:e0:d6:4e:32:79:ab:22:e4:ad:38:6d:
                    13:ce:f8:97:c8:55:d6:14:34:a0:f3:b7:15:ea:d1:
                    a6:ca:96:05:5a:f4:0b:e1:de:e8:cb:59:64:35:b8:
                    f3:24:9a:62:87:c4:5a:91:de:63:34:1d:7f:14:48:
                    41:6d:f4:97:c3:3c:06:9f:09:80:97:f1:07:97:db:
                    c9:90:74:71:d4:94:1c:36:04:d2:2c:16:df:91:d9:
                    93:4a:f3:27:dd:5b:8e:4f:11:91:c5:59:02:99:5f:
                    39:c4:b9:b3:3d:7f:c8:56:e0:eb:fe:c5:d2:56:80:
                    dc:bf:51:5e:1a:17:1c:af:09:0a:82:d1:b6:8a:ab:
                    ae:5d:9d:19:f2:9e:a7:b2:f6:5d:44:74:a6:82:5c:
                    66:6e:f9:38:8a:47:dc:a6:ff:ce:ab:be:65:2a:94:
                    d3:64:a6:35:45:08:37:b4:e0:95:12:31:d5:cf:9f:
                    ee:ae:52:e5:61:25:eb:b8:5d:19:22:ca:16:7a:11:
                    a8:38:0f:33:4d:e9:fa:41:e5:92:17:e0:f2:98:32:
                    76:3c:17:96:1f:a6:9e:6c:0e:79:9b:fb:fa:cf:ff:
                    aa:07:fd:09:a5:e1:89:3d:c5:42:f6:2f:94:2c:18:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E0:34:FA:D7:CB:4B:C4:C0:E5:73:91:21:0B:5C:CB:35:FD:E2:F4
            X509v3 Authority Key Identifier:
                keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138342e302f32342d3234203d3e203234353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:84:55:5a:15:44:0d:3c:a6:c3:22:67:1c:09:cd:64:15:8c:
         3a:e5:63:7a:ed:fd:06:50:5d:5b:0a:3c:27:7e:92:fb:c9:1d:
         c1:09:03:5e:f5:3b:31:79:08:09:58:05:57:9d:69:50:b1:9a:
         e1:41:ca:d7:4d:fb:cf:1a:46:ed:7e:1a:68:ad:21:78:fc:09:
         9b:08:bb:be:c7:6c:a6:3c:ea:17:57:74:56:7f:dc:ba:c3:50:
         a0:65:2b:82:0d:3b:91:c6:95:ff:d9:2e:ec:3d:a6:77:ec:4d:
         c5:de:6d:04:3b:72:33:c8:09:81:8d:cd:e4:a0:69:5e:a8:82:
         5c:ec:81:1c:18:82:53:74:a7:1b:c5:01:f4:f1:ea:c3:02:64:
         f9:06:31:91:30:28:f1:88:f0:50:0c:8b:db:ff:ed:94:fb:a9:
         4e:7c:39:34:ec:b0:7a:e8:e8:04:c4:5d:f1:c2:a1:4c:8b:ab:
         9a:f5:d2:f6:dc:af:26:ad:59:ce:58:06:a8:7e:78:dc:b5:72:
         94:39:6d:03:b1:61:32:8f:05:9d:59:a0:21:37:32:1a:59:23:
         d3:49:d1:ad:56:88:9a:ad:94:46:f8:9d:9f:61:60:04:4a:33:
         07:a8:76:70:bd:a0:5a:89:bf:12:f5:f2:3c:fc:53:14:38:72:
         7e:92:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:45:25 2026 by rpki-client