Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa
File:                     35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier:          8g4qg4fTmzGLrdSqeTYMLQ/nhuyOxDCuFX6q9Vci1Gw=
Subject key identifier:   7A:37:D4:FA:52:0B:D5:9B:59:E7:5E:7C:B7:A2:1A:2F:6C:FF:65:FF
Certificate issuer:       /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial:       63AD4C7A4371FA772A1C3E29B0E7523E86EB3CBC
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa
Signing time:             Sun 03 May 2026 02:11:33 +0000
ROA not before:           Sun 03 May 2026 02:06:33 +0000
ROA not after:            Sun 02 May 2027 02:11:33 +0000
asID:                     24534
IP address blocks:        58.147.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
                          rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ad:4c:7a:43:71:fa:77:2a:1c:3e:29:b0:e7:52:3e:86:eb:3c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
        Validity
            Not Before: May  3 02:06:33 2026 GMT
            Not After : May  2 02:11:33 2027 GMT
        Subject: CN=7A37D4FA520BD59B59E75E7CB7A21A2F6CFF65FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:bf:30:ae:86:31:e3:38:83:03:79:73:69:
                    02:39:dd:69:4b:9c:ae:ad:98:68:07:52:59:50:15:
                    6b:53:21:e5:b1:70:f6:42:88:da:ef:d2:59:01:61:
                    26:f2:bf:51:a5:c4:be:f7:75:6a:42:27:6e:f9:d0:
                    cd:20:11:8b:01:a4:ef:a5:4c:f3:50:30:91:fc:62:
                    87:3d:0f:f5:09:eb:90:c5:83:ea:4b:5c:79:c7:e2:
                    60:f8:49:88:04:3f:55:72:af:69:d2:6a:3f:8b:fc:
                    30:d9:b3:c0:a4:08:ee:ec:3d:b4:40:d9:e1:24:9a:
                    77:69:84:1f:f5:c5:d9:a6:70:ed:11:14:91:fb:3e:
                    9e:fc:7c:c7:91:13:7b:b1:8a:5b:14:d3:c3:9f:58:
                    43:2f:f5:2e:ed:9d:97:cc:61:32:fc:3d:ad:6e:e3:
                    f8:63:01:51:16:d4:97:76:75:6c:ca:fd:f4:db:b8:
                    f0:07:61:f0:70:15:55:0a:31:6d:a8:7d:b0:7a:c2:
                    1d:9e:f9:25:93:46:83:9a:d4:c3:74:24:42:ee:92:
                    f5:ba:f2:fd:63:f1:d2:6c:01:eb:5a:f0:ec:aa:81:
                    ba:54:22:b1:1b:8e:17:0e:49:1f:94:50:6a:74:01:
                    45:76:a4:81:b8:50:33:3f:cb:e9:25:c8:37:d8:43:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:37:D4:FA:52:0B:D5:9B:59:E7:5E:7C:B7:A2:1A:2F:6C:FF:65:FF
            X509v3 Authority Key Identifier:
                keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:d1:ac:c8:56:8c:8d:c2:0f:ce:16:0a:90:91:7a:8d:28:f4:
         b4:b2:d3:a5:8b:09:3c:31:8b:5d:ca:5a:39:f1:15:58:35:62:
         b8:18:fc:f7:16:74:50:e2:12:71:5f:9c:ac:49:9d:78:ed:aa:
         ac:0b:6c:dd:54:56:85:92:e6:4a:d7:6a:7b:26:8d:3b:b1:b6:
         75:a7:93:82:2f:0d:38:65:00:a9:fd:19:8d:f8:3b:b6:c6:03:
         f4:ad:c0:19:a2:97:cf:a0:93:c7:3f:75:a0:76:1f:00:c2:65:
         6c:14:bb:11:a3:73:76:18:56:54:d4:a7:c9:25:e7:57:51:88:
         fa:94:45:41:f8:0f:a3:d9:1f:21:5b:6f:27:29:02:cb:68:64:
         50:51:9f:86:df:47:36:90:03:bb:c0:65:08:69:ec:eb:41:69:
         09:76:65:20:01:ca:00:ea:6d:88:7c:4b:7b:fd:82:85:ec:37:
         de:bf:14:e2:4e:9f:92:f3:c7:c4:2e:38:0f:65:36:17:ec:49:
         9b:9c:70:68:e7:3b:77:4f:c9:c5:6a:5f:8a:54:9b:fa:12:20:
         4b:48:fc:5d:7e:e6:8a:92:95:b0:41:2c:b3:54:8e:45:92:b8:
         c8:f3:f2:ed:2f:86:7c:45:a9:2d:89:30:56:9e:ce:7e:68:cb:
         60:ae:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:21 2026 by rpki-client