Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132352e302f32342d3234203d3e203538333639.roa
File:                     34352e3131322e3132352e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          aaMB8Raq3kumsnM9H7Yh3RxM3rPZ0WQ84Xk4q14j1Kk=
Subject key identifier:   DB:BF:58:64:80:CC:FA:2F:0E:E7:37:88:69:41:AC:F4:1D:53:D2:15
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       165785501100257E2BDC1E098968453AB8291E35
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132352e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:29 +0000
ROA not before:           Sun 03 May 2026 02:10:29 +0000
ROA not after:            Sun 02 May 2027 02:15:29 +0000
asID:                     58369
IP address blocks:        45.112.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:57:85:50:11:00:25:7e:2b:dc:1e:09:89:68:45:3a:b8:29:1e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:29 2026 GMT
            Not After : May  2 02:15:29 2027 GMT
        Subject: CN=DBBF586480CCFA2F0EE737886941ACF41D53D215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:48:60:a0:37:87:d2:2c:13:68:4e:3d:cf:
                    02:d3:fd:a5:64:7b:d4:42:30:8f:5c:29:5d:dd:11:
                    8b:a8:d4:c7:69:a8:f4:ec:6e:79:8e:a4:a2:0c:04:
                    6c:57:f1:11:75:c8:73:08:f6:46:b3:25:80:9a:76:
                    d4:ee:22:de:16:6c:16:ac:38:8a:9e:f7:c2:fd:08:
                    35:5f:fd:0a:63:ca:50:d9:47:85:ef:d0:7a:d8:bf:
                    b0:53:4c:8d:2a:22:27:13:65:96:13:6c:0a:47:a6:
                    cf:79:24:95:b3:73:e4:b7:3a:73:ed:7e:3d:94:59:
                    65:d0:fd:ad:82:45:26:74:a4:eb:4a:77:f6:eb:c0:
                    94:bc:fd:77:ab:56:5c:01:d5:77:47:da:80:40:cb:
                    31:a0:1c:1b:3a:45:e7:a6:a1:16:15:c3:2a:39:2f:
                    df:3f:ed:27:43:f5:75:91:4c:e5:17:5d:ce:71:b5:
                    67:37:bb:54:b8:5b:11:f1:92:25:42:56:83:32:6d:
                    de:48:42:dd:96:9c:df:5d:25:d6:74:72:40:ef:87:
                    f5:d5:ff:5a:8d:3c:a0:d3:ff:d4:0d:23:ca:a5:79:
                    e3:be:f5:49:2e:32:bb:12:16:ea:f1:15:11:55:c1:
                    70:c6:77:f4:e6:a2:ca:79:10:f7:65:d3:fb:54:52:
                    1e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BF:58:64:80:CC:FA:2F:0E:E7:37:88:69:41:AC:F4:1D:53:D2:15
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132352e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:83:d1:f7:3c:49:6f:65:ac:c4:ef:77:12:0e:3b:aa:cc:82:
         60:76:4e:9b:79:5d:5b:5a:d6:2f:0e:e9:e7:2f:72:9c:02:b3:
         e3:47:0e:5b:cf:28:d9:eb:ab:b3:a7:88:45:bc:30:ee:23:62:
         d4:75:a9:14:62:6a:8e:94:6a:a2:5f:1e:8d:8a:db:58:62:ac:
         6c:eb:c1:3d:d3:ce:5b:4c:42:fb:e4:2d:6d:e8:d6:dd:b2:6c:
         8b:0a:83:de:6d:2c:75:81:3b:99:25:62:04:e2:10:2c:72:4a:
         6b:5b:f7:17:9a:62:6b:58:49:8e:7c:79:56:82:2b:5f:1b:60:
         12:b2:b3:be:7d:40:18:52:30:ca:f6:52:fa:13:39:9a:46:49:
         97:b5:63:f0:d8:cb:c5:bc:de:d1:0e:01:50:5c:d1:3e:9f:89:
         af:71:93:e7:26:dc:3b:23:d6:15:f2:8e:15:80:6b:f5:1b:da:
         13:5b:cf:f5:66:4f:75:da:80:e8:e4:3e:c4:b8:e9:64:34:3a:
         ae:83:71:ad:c2:4d:4c:43:9c:e0:7e:2d:a9:a0:50:18:0e:0f:
         0f:6d:7c:a3:eb:52:cb:4b:2b:86:b9:86:3c:0e:f2:98:28:b0:
         89:28:d1:9c:aa:66:17:b9:a0:2f:86:2f:a4:92:e9:46:da:21:
         94:8c:d4:9f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFleFUBEAJX4r3B4JiWhFOrgpHjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0
MkY5RDUzNzAeFw0yNjA1MDMwMjEwMjlaFw0yNzA1MDIwMjE1MjlaMDMxMTAvBgNV
BAMTKERCQkY1ODY0ODBDQ0ZBMkYwRUU3Mzc4ODY5NDFBQ0Y0MUQ1M0QyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xkhgoDeH0iwTaE49zwLT/aVk
e9RCMI9cKV3dEYuo1MdpqPTsbnmOpKIMBGxX8RF1yHMI9kazJYCadtTuIt4WbBas
OIqe98L9CDVf/QpjylDZR4Xv0HrYv7BTTI0qIicTZZYTbApHps95JJWzc+S3OnPt
fj2UWWXQ/a2CRSZ0pOtKd/brwJS8/XerVlwB1XdH2oBAyzGgHBs6ReemoRYVwyo5
L98/7SdD9XWRTOUXXc5xtWc3u1S4WxHxkiVCVoMybd5IQt2WnN9dJdZ0ckDvh/XV
/1qNPKDT/9QNI8qleeO+9UkuMrsSFurxFRFVwXDGd/Tmosp5EPdl0/tUUh4/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU279YZIDM+i8O5zeIaUGs9B1T0hUwHwYDVR0j
BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5
NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE
NTM3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzM0MzUyZTMxMzEzMjJlMzEzMjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1wfTANBgkqhkiG
9w0BAQsFAAOCAQEAioPR9zxJb2WsxO93Eg47qsyCYHZOm3ldW1rWLw7p5y9ynAKz
40cOW88o2eurs6eIRbww7iNi1HWpFGJqjpRqol8ejYrbWGKsbOvBPdPOW0xC++Qt
bejW3bJsiwqD3m0sdYE7mSViBOIQLHJKa1v3F5pia1hJjnx5VoIrXxtgErKzvn1A
GFIwyvZS+hM5mkZJl7Vj8NjLxbze0Q4BUFzRPp+Jr3GT5ybcOyPWFfKOFYBr9Rva
E1vP9WZPddqA6OQ+xLjpZDQ6roNxrcJNTEOc4H4tqaBQGA4PD218o+tSy0srhrmG
PA7ymCiwiSjRnKpmF7mgL4YvpJLpRtohlIzUnw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:47:39 2026 by rpki-client