Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa
File:                     34322e36322e3137392e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier:          te19ceZ+0Is6+1+3K4x4WYPLY+2HU9qAD9W8DfxT5gI=
Subject key identifier:   6A:F0:5A:25:96:49:6F:39:3E:2F:87:A2:E2:AB:6B:23:D0:E1:CD:E4
Certificate issuer:       /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883
Certificate serial:       365AFD0CB8FD0F01E0341AF1B33ED254FB63E884
Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa
Signing time:             Sun 03 May 2026 02:12:17 +0000
ROA not before:           Sun 03 May 2026 02:07:17 +0000
ROA not after:            Sun 02 May 2027 02:12:17 +0000
asID:                     55690
IP address blocks:        42.62.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl
                          rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5a:fd:0c:b8:fd:0f:01:e0:34:1a:f1:b3:3e:d2:54:fb:63:e8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883
        Validity
            Not Before: May  3 02:07:17 2026 GMT
            Not After : May  2 02:12:17 2027 GMT
        Subject: CN=6AF05A2596496F393E2F87A2E2AB6B23D0E1CDE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:44:a0:fd:67:81:ae:93:dc:6f:0b:bc:72:
                    65:bd:0f:cb:9b:65:cf:13:46:68:e1:25:75:f8:cb:
                    14:07:48:88:b9:62:e4:be:2a:83:11:68:80:f3:8d:
                    d7:6d:ba:f6:2e:da:cf:8e:6f:78:53:28:57:dc:2a:
                    45:14:83:e5:37:d7:a8:24:4d:25:25:94:8d:81:70:
                    a0:b0:c2:de:c2:4d:69:60:15:0a:1a:58:76:99:80:
                    1c:bc:ee:2e:75:9a:d7:18:be:99:20:13:8d:62:07:
                    99:47:4d:02:d1:00:b9:d0:73:48:24:ff:76:51:56:
                    e7:88:25:14:b7:c2:2f:be:50:24:87:a1:95:cf:0a:
                    d4:bc:fd:af:60:fd:ec:40:fb:ee:81:5c:25:e4:11:
                    a7:1b:db:93:3f:92:f6:d2:85:c2:2c:24:f6:66:7e:
                    ef:c6:e9:e4:06:e4:4c:a8:ea:2f:89:f0:e6:a0:42:
                    e3:24:a9:11:1e:6d:29:69:28:a3:43:cd:9d:c1:d7:
                    6a:f1:45:80:86:53:4d:57:27:6c:12:9f:10:66:b2:
                    a3:e5:7a:bf:75:65:bb:9c:c3:a5:0b:36:c1:ec:db:
                    e4:7b:8a:8c:c7:8e:9d:b0:ee:3b:6e:c4:37:cc:01:
                    44:9e:a6:5f:11:d7:a1:4a:02:03:6f:06:ac:2f:de:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F0:5A:25:96:49:6F:39:3E:2F:87:A2:E2:AB:6B:23:D0:E1:CD:E4
            X509v3 Authority Key Identifier:
                keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:17:75:74:14:8c:b5:99:ff:7c:d7:8d:13:14:72:d1:b0:
         86:d8:ad:88:3d:5a:a4:d1:12:97:69:1a:6a:24:0f:ea:6b:6a:
         ea:4c:84:d0:d9:f7:92:25:89:57:c3:73:f0:9e:b2:1d:6e:e3:
         5c:12:13:56:26:d4:7b:03:b1:fb:c2:f0:74:19:51:12:b3:d6:
         74:c1:05:4d:c8:60:b5:e0:97:45:b1:36:64:88:1a:c6:f8:a3:
         da:39:38:4c:2b:7c:29:f7:d4:6b:28:52:bc:f0:03:73:01:a1:
         d7:80:44:71:f8:93:4e:e1:1b:e9:96:3f:12:1a:ff:a2:2f:c8:
         40:0b:0e:17:80:15:9c:95:a0:d7:01:2d:0f:c1:57:56:d5:a3:
         13:33:36:c9:82:a6:b1:de:79:5d:5f:9c:92:70:e1:a2:23:ce:
         5a:6d:9d:0b:08:b5:3b:3c:2a:60:ad:0f:c3:88:5c:98:5b:94:
         1f:7a:90:db:8f:cf:c4:b3:b4:aa:63:cf:b1:3e:5b:10:85:a4:
         cd:d0:d6:e3:2d:16:89:d6:9b:5b:eb:1f:6c:73:59:7d:01:81:
         5d:7f:1a:57:3e:76:48:70:96:e8:f4:6e:3f:22:4e:0f:da:5f:
         f0:fd:a7:73:ea:d8:2d:6e:95:84:4e:38:ea:7e:30:a6:b7:0f:
         b6:c3:57:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:49 2026 by rpki-client