Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa
File:                     34352e3131322e3132342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          sgxqKN1vgMbIQ0btO15OBK7iyL1fPzhwTOs1enib3Y8=
Subject key identifier:   16:96:35:4E:17:54:27:28:E5:02:BD:9F:62:C6:9B:D5:EB:7B:30:D6
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       6766A0873B1A2B1672578E2F7F703F58E35B7BA1
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:25 +0000
ROA not before:           Sun 03 May 2026 02:10:25 +0000
ROA not after:            Sun 02 May 2027 02:15:25 +0000
asID:                     58369
IP address blocks:        45.112.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:66:a0:87:3b:1a:2b:16:72:57:8e:2f:7f:70:3f:58:e3:5b:7b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:25 2026 GMT
            Not After : May  2 02:15:25 2027 GMT
        Subject: CN=1696354E17542728E502BD9F62C69BD5EB7B30D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:9d:38:20:74:62:81:b1:fe:b3:14:bf:6b:
                    e3:b6:60:a2:b5:26:3a:c2:7d:18:09:0a:26:0f:04:
                    1e:22:18:91:95:6f:a0:33:ae:5c:82:dd:e1:e6:b7:
                    db:18:16:63:fb:67:28:a8:32:49:00:3a:a0:63:56:
                    f7:13:9c:fd:3f:68:5c:3e:8a:b2:f8:cc:03:da:da:
                    25:0a:20:0a:2b:d9:4b:f5:09:51:6b:a2:cf:be:d2:
                    e3:bb:66:7f:9c:cb:fe:55:ee:8f:4b:4b:b7:f3:11:
                    fb:ac:66:76:f9:67:29:d1:cf:1c:9f:d1:8b:6a:80:
                    d5:7d:6e:47:ae:60:51:b9:46:5e:92:9a:21:c3:f8:
                    aa:f9:95:0a:91:46:5d:90:81:7c:f7:2e:27:4f:34:
                    f9:c5:6c:43:f0:e1:17:3a:ae:d5:0a:f1:ec:e7:79:
                    81:3e:f5:c2:b5:61:c0:17:db:be:f1:fe:b6:cb:0c:
                    eb:96:9f:1c:91:6d:a0:62:e6:9c:eb:f7:0c:7b:5a:
                    92:09:52:d5:9a:f2:90:a8:cb:5b:00:05:87:36:03:
                    8a:3c:3d:df:49:18:59:20:b7:5d:f2:44:2a:5d:16:
                    d5:ba:4f:96:2f:b7:77:50:b4:52:a3:f4:3c:df:ab:
                    01:1b:56:b7:2b:67:31:54:b3:52:07:b1:19:5f:99:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:35:4E:17:54:27:28:E5:02:BD:9F:62:C6:9B:D5:EB:7B:30:D6
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:1f:26:59:e1:54:dc:ca:76:d1:ea:89:1a:13:4b:b0:83:
         7d:1d:ab:14:41:dd:97:0d:51:e0:e9:cd:4e:ed:2d:31:f8:4a:
         24:8b:57:f5:c0:a6:6c:d1:28:49:80:dc:aa:e5:96:b9:c8:29:
         7d:1a:42:c8:50:36:c7:0a:cc:6e:dd:36:0c:7a:ac:66:ce:4b:
         5d:19:e8:22:12:7a:2c:f6:f1:ee:42:e1:e3:c6:93:2a:14:ac:
         e1:e9:8b:dd:03:44:d7:ea:90:58:54:dc:45:1e:9a:76:25:47:
         90:86:5f:b1:66:23:0f:cd:10:8d:01:0b:24:9e:bc:b3:97:75:
         24:29:43:f3:12:46:7d:98:1d:64:92:26:10:9b:1f:59:d5:8a:
         af:40:d4:0b:4c:67:28:29:ee:f2:c1:ef:62:27:30:45:1a:39:
         92:39:50:27:e7:c2:20:d6:95:52:f3:ed:dc:97:a3:ae:cd:59:
         fd:45:fc:67:13:87:69:ef:43:f6:c6:18:6a:61:bd:e3:3e:e8:
         8d:b2:00:48:7d:c9:18:6f:73:34:30:da:93:70:25:2b:61:8f:
         fc:d2:87:59:28:52:23:43:b3:52:c0:3b:28:7e:2e:89:24:fc:
         42:14:7e:6f:a5:0d:fa:7e:6f:3e:71:5f:a3:ea:b3:20:90:d1:
         b0:b9:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:53 2026 by rpki-client