Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa
File:                     34352e3131322e3132362e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          7S4QWZX079FqUtXFuK7JHC83CwO1/IsmeGOMXldSI3Y=
Subject key identifier:   B9:72:E1:D1:6C:AC:32:09:8A:D5:E1:C1:BC:58:5D:FF:A7:34:BE:3D
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       57017A819626A38BF494FA0AC91CE02152745FDC
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:18 +0000
ROA not before:           Sun 03 May 2026 02:10:18 +0000
ROA not after:            Sun 02 May 2027 02:15:18 +0000
asID:                     58369
IP address blocks:        45.112.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:01:7a:81:96:26:a3:8b:f4:94:fa:0a:c9:1c:e0:21:52:74:5f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:18 2026 GMT
            Not After : May  2 02:15:18 2027 GMT
        Subject: CN=B972E1D16CAC32098AD5E1C1BC585DFFA734BE3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:6a:f7:9b:ad:29:fc:2f:62:8c:1a:e1:b7:
                    0f:0a:75:99:a4:44:21:4a:f4:2e:64:bd:a1:64:e1:
                    71:68:a6:e9:8c:43:84:18:d7:11:ce:d8:05:d8:6d:
                    31:21:97:7c:72:fe:78:8b:07:50:35:77:18:03:61:
                    31:4e:4f:05:1b:5e:6a:d3:2d:6e:55:dc:07:74:5e:
                    f9:46:f2:9f:b6:ea:c1:ae:54:0a:40:fc:33:f9:63:
                    dd:c4:f0:9b:4b:2d:ac:15:04:43:df:c1:51:64:ce:
                    80:f6:1e:d4:8a:d8:bc:fc:1a:de:f7:be:82:c3:85:
                    fe:5d:90:35:0d:24:92:2d:51:e3:f2:78:25:80:79:
                    43:49:dd:ce:12:b6:a6:e7:5a:87:51:02:e9:27:23:
                    c4:b6:74:af:de:95:f8:e8:78:d1:d0:5a:71:43:c5:
                    50:10:3c:d3:29:f3:6e:66:b0:0d:ef:14:f3:07:d9:
                    b0:8e:c8:1d:5c:79:e2:b2:94:c8:e5:5c:a6:4c:ab:
                    70:56:05:de:0a:97:ee:56:66:8e:39:cb:0a:e8:fe:
                    6a:16:90:b4:5d:7c:8f:a3:db:99:ff:d0:9a:41:51:
                    2a:a3:09:db:38:9f:f3:7a:a4:d5:3a:b2:7f:7d:49:
                    09:5a:41:7d:94:15:5b:06:71:23:6b:d0:ac:36:13:
                    60:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:72:E1:D1:6C:AC:32:09:8A:D5:E1:C1:BC:58:5D:FF:A7:34:BE:3D
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:29:d5:a7:b1:86:d1:3d:79:9c:ff:db:b9:8a:d0:ac:df:4f:
         8d:71:f2:c9:4e:41:55:9b:5e:ff:7e:75:1b:ef:6f:65:dc:d0:
         b6:fc:e4:58:1b:5d:bf:ba:57:f8:38:67:f7:cf:d3:89:5e:e7:
         c2:30:2b:a2:f2:f8:90:a1:3b:aa:7d:48:ac:84:41:2d:b2:d1:
         2d:6b:8b:8c:b7:ac:02:a5:26:35:5f:91:da:35:b3:f8:57:0e:
         c7:6d:e1:f0:04:72:01:52:62:0a:13:dc:05:ee:49:cc:8e:32:
         eb:7a:5f:b1:1f:14:d0:52:fd:42:25:c8:9b:11:1b:c4:cf:1e:
         ad:bc:6b:c8:1d:5c:49:02:99:5c:70:43:72:1a:85:28:ee:7b:
         19:3f:31:51:bf:3d:0a:d4:7b:68:ee:ca:66:77:96:91:50:88:
         0b:d0:b0:a1:c6:a4:e1:89:5d:3f:e9:f3:51:8c:88:54:81:9c:
         e8:3b:10:73:74:c0:a0:4a:34:5c:c6:ec:36:16:82:59:fc:71:
         04:cf:09:f1:80:1b:dd:8f:21:1f:4a:ad:be:88:be:1b:61:33:
         21:57:f8:bc:30:8c:7e:f9:39:e7:33:74:13:5f:9b:f4:89:ac:
         0b:8a:24:58:df:0f:b7:2c:e8:4c:91:7e:98:22:d8:b3:d4:09:
         a2:b1:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:24 2026 by rpki-client