Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32332d3233203d3e203538333639.roa
File:                     34352e3131322e3132342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          lnlCWJSYHnyUlwqidWScy7jViQJ/yDV9vU6Cg+ssd28=
Subject key identifier:   B8:35:77:D4:2B:CD:C5:17:7C:26:5B:8A:6E:23:97:48:02:19:CF:08
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       585F3C6D6C84490E5A27E352A0047755D50E5ABE
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32332d3233203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:22 +0000
ROA not before:           Sun 03 May 2026 02:10:22 +0000
ROA not after:            Sun 02 May 2027 02:15:22 +0000
asID:                     58369
IP address blocks:        45.112.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5f:3c:6d:6c:84:49:0e:5a:27:e3:52:a0:04:77:55:d5:0e:5a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:22 2026 GMT
            Not After : May  2 02:15:22 2027 GMT
        Subject: CN=B83577D42BCDC5177C265B8A6E2397480219CF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:fa:3d:f3:ec:f1:01:69:6c:e1:a2:a1:ed:
                    15:f0:4c:58:aa:b9:70:26:01:42:ca:f4:69:06:d2:
                    4d:90:e6:ab:31:35:28:30:53:75:fe:06:48:8a:0e:
                    30:28:da:1a:69:a0:04:05:11:b1:78:70:aa:44:7a:
                    97:78:e7:0b:b1:17:b8:a9:89:53:9a:17:05:3e:02:
                    fc:30:3b:cb:32:9a:3a:5f:2b:b3:13:e0:a3:77:a7:
                    d7:ab:6c:08:98:03:d3:25:13:1a:61:30:af:4f:2f:
                    aa:4a:45:e1:23:c8:01:7a:2c:80:bf:cd:70:85:26:
                    aa:a4:78:35:d7:13:87:3f:21:bb:5f:fb:f2:28:2a:
                    f8:ae:3a:83:43:b3:74:07:ed:07:67:38:b9:86:00:
                    ba:4e:7f:1e:46:9f:ad:d5:ce:43:ff:e0:75:e5:16:
                    ab:4e:9b:eb:72:4c:08:90:e6:0f:a0:78:6f:19:7c:
                    41:9a:cb:af:a7:7b:ef:17:b5:51:da:4b:c2:0a:99:
                    21:4c:12:ce:0d:59:7e:a2:72:ad:e8:d6:92:5d:b2:
                    8c:d5:b8:b0:ff:2d:cd:5b:6a:3d:be:79:4d:bd:72:
                    8f:ad:fc:5c:71:76:20:39:05:42:ad:cd:bb:fa:ef:
                    97:46:fb:17:e8:06:9e:43:dc:32:dd:77:18:48:3e:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:35:77:D4:2B:CD:C5:17:7C:26:5B:8A:6E:23:97:48:02:19:CF:08
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:ff:1c:ea:c7:10:cd:f4:28:d0:ef:60:76:4a:e6:44:de:e0:
         fb:65:46:f3:a1:16:75:5f:a0:6e:51:8f:9c:21:d8:40:ae:fc:
         70:20:0b:31:aa:d8:12:82:ed:99:84:d9:09:cf:b4:58:74:e8:
         9f:46:79:fb:02:25:0f:91:14:15:53:a4:6f:94:d8:e2:a8:bf:
         6d:44:87:2e:7a:9d:a7:ad:e1:ed:3a:64:b4:47:bf:7f:fb:77:
         42:0b:20:6e:5d:1a:a9:a0:f7:dd:ae:74:be:7e:ec:01:ce:54:
         ac:99:61:9c:f1:6e:db:46:62:ec:41:c1:fb:f9:25:e2:4e:b1:
         3e:e5:fd:af:f1:87:f6:7d:e7:9e:e4:d5:52:1f:c8:f6:fe:aa:
         91:c7:a0:59:2a:3d:1d:86:1c:ec:35:e8:87:52:58:c7:96:b7:
         ac:0e:35:69:54:aa:ac:3d:cf:46:b3:2d:b6:bf:dc:5d:6b:96:
         0f:5f:11:6e:8d:b2:c7:10:30:21:47:db:b8:83:2c:67:82:75:
         a6:05:d7:6c:f7:e6:16:61:b0:7c:00:3c:89:7b:05:47:e8:14:
         46:93:7e:46:85:48:d2:26:28:d1:2b:28:db:49:bf:84:11:a6:
         d3:03:38:8f:23:f4:23:f7:75:a8:58:c0:09:b8:3a:34:c8:db:
         02:ba:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:04 2026 by rpki-client