Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/33362e35302e34342e302f32332d3234203d3e20313532303130.roa
File:                     33362e35302e34342e302f32332d3234203d3e20313532303130.roa (raw, json)
Hash identifier:          ZIUeZ3Q2rGAqlIoaBYVb2yog4it8kgKPSCfoDGT94AM=
Subject key identifier:   DB:02:B9:79:06:A5:5B:84:AD:EB:E6:F9:25:CB:1E:92:84:69:89:B9
Certificate issuer:       /CN=1C1075E7C3ED68EE01B662BC87B8BC975F7D060F
Certificate serial:       13CCCBF762ABDFB764DBC61ADC981B5C5FDE9BA2
Authority key identifier: 1C:10:75:E7:C3:ED:68:EE:01:B6:62:BC:87:B8:BC:97:5F:7D:06:0F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C1075E7C3ED68EE01B662BC87B8BC975F7D060F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/33362e35302e34342e302f32332d3234203d3e20313532303130.roa
Signing time:             Sun 03 May 2026 02:20:16 +0000
ROA not before:           Sun 03 May 2026 02:15:16 +0000
ROA not after:            Sun 02 May 2027 02:20:16 +0000
asID:                     152010
IP address blocks:        36.50.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/1C1075E7C3ED68EE01B662BC87B8BC975F7D060F.crl
                          rsync://rpki-rsync.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/1C1075E7C3ED68EE01B662BC87B8BC975F7D060F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C1075E7C3ED68EE01B662BC87B8BC975F7D060F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cc:cb:f7:62:ab:df:b7:64:db:c6:1a:dc:98:1b:5c:5f:de:9b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C1075E7C3ED68EE01B662BC87B8BC975F7D060F
        Validity
            Not Before: May  3 02:15:16 2026 GMT
            Not After : May  2 02:20:16 2027 GMT
        Subject: CN=DB02B97906A55B84ADEBE6F925CB1E92846989B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:43:03:fc:4e:3f:d5:45:8b:9e:c7:c1:3b:
                    e8:ef:d9:52:cb:61:cf:26:b7:23:a8:fb:c8:b9:d6:
                    c3:ab:19:b3:fb:8c:84:b3:c2:46:ca:7e:76:64:96:
                    72:7e:19:bc:5b:31:d0:1b:7f:23:42:f2:fb:5e:06:
                    68:84:1a:67:01:ae:34:4c:6d:c4:fc:7f:e5:e8:80:
                    bb:60:d6:5c:85:e5:50:85:40:94:c1:fe:3c:0c:5d:
                    09:41:80:8e:23:f5:d0:8f:a4:f9:f0:e6:54:78:36:
                    da:12:e4:13:dd:6b:02:98:4d:fa:99:cd:bb:5d:36:
                    24:1a:05:8a:f0:14:ef:8d:06:5c:a5:6f:eb:12:9c:
                    62:ed:be:f9:e6:7a:cf:3b:7a:7e:cc:dd:b8:ec:c2:
                    9d:44:fe:e3:7a:96:0a:6a:a5:d9:d4:aa:cf:e4:53:
                    ab:62:00:00:3c:df:73:93:8e:9d:a5:77:bf:1c:e0:
                    65:24:1f:0a:60:ad:e8:1a:b9:35:cf:7c:5d:1c:0b:
                    a5:1c:55:72:08:05:13:38:0c:41:68:85:a1:22:b3:
                    a3:68:39:95:ed:ce:87:6f:b2:f4:e7:c1:30:4e:a9:
                    d9:b6:97:5e:79:47:73:2a:ee:79:a8:25:7f:58:ec:
                    a6:f8:3e:97:ab:59:28:5a:44:ba:14:ea:56:aa:da:
                    69:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:02:B9:79:06:A5:5B:84:AD:EB:E6:F9:25:CB:1E:92:84:69:89:B9
            X509v3 Authority Key Identifier:
                keyid:1C:10:75:E7:C3:ED:68:EE:01:B6:62:BC:87:B8:BC:97:5F:7D:06:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/1C1075E7C3ED68EE01B662BC87B8BC975F7D060F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C1075E7C3ED68EE01B662BC87B8BC975F7D060F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/33362e35302e34342e302f32332d3234203d3e20313532303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:98:fe:fc:be:05:b5:af:54:f7:aa:f0:6e:46:87:fc:1b:17:
         cf:22:98:5d:67:99:4d:61:e6:60:13:00:51:62:f9:6f:7c:d5:
         04:a7:51:fa:60:1d:8a:9e:92:7a:e2:da:26:d0:44:d5:93:6a:
         d3:8d:7b:90:e4:99:1b:d4:80:be:a9:ce:56:81:c9:93:bf:72:
         96:68:40:21:1f:76:06:34:63:b1:1a:99:43:70:d8:ba:44:c3:
         86:b3:94:91:7a:29:00:5b:23:c2:b0:8f:02:60:8b:18:eb:3b:
         7a:2c:c5:c7:9c:fc:a5:65:35:51:6a:cf:fe:9f:e4:e8:5a:4c:
         c8:d8:a0:48:c1:64:12:d7:8e:f8:f9:33:32:e5:97:82:3a:36:
         42:73:26:a8:74:3a:f8:14:03:c9:29:0a:d6:ac:c2:5a:ef:01:
         97:42:e1:37:c3:fe:bf:4b:d1:1d:83:d0:6f:e4:34:82:14:26:
         69:d8:8d:ab:50:c7:8d:86:52:6e:da:46:0a:e9:e0:85:5f:74:
         bd:8b:d2:7e:47:ed:6f:98:cc:64:92:b6:df:1c:13:97:21:cb:
         90:35:af:79:48:fb:35:1b:d2:9f:88:49:58:01:d7:13:56:f3:
         62:23:4a:8f:c6:bd:21:c0:16:77:5f:ed:a0:f8:d1:49:af:8e:
         5a:7a:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:53 2026 by rpki-client