Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa
File:                     34392e302e302e302f32322d3234203d3e203535373031.roa (raw, json)
Hash identifier:          sLZQYwwJZGFMTL7izEAM/LPP1kYOTnZL+ruwm/tAWUw=
Subject key identifier:   14:38:8C:AE:E1:E6:F8:D2:B1:35:16:0B:CA:6A:18:53:D6:A2:33:F2
Certificate issuer:       /CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1
Certificate serial:       0C5F6ED93F65A6BC92B13789243B424C4635B7F7
Authority key identifier: 9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa
Signing time:             Sun 03 May 2026 02:21:09 +0000
ROA not before:           Sun 03 May 2026 02:16:09 +0000
ROA not after:            Sun 02 May 2027 02:21:09 +0000
asID:                     55701
IP address blocks:        49.0.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5f:6e:d9:3f:65:a6:bc:92:b1:37:89:24:3b:42:4c:46:35:b7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1
        Validity
            Not Before: May  3 02:16:09 2026 GMT
            Not After : May  2 02:21:09 2027 GMT
        Subject: CN=14388CAEE1E6F8D2B135160BCA6A1853D6A233F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:56:16:bc:db:72:b9:b2:3c:dc:23:b4:88:
                    94:9d:ee:c9:d8:10:71:e0:4e:eb:6a:f7:7b:03:2b:
                    90:57:63:30:0c:c3:70:f1:ae:48:08:9a:36:77:a3:
                    fe:98:38:c0:99:06:2a:ca:df:b7:97:b5:05:ae:ca:
                    5a:1d:af:6d:d3:85:81:22:30:b8:0c:92:f0:fd:e6:
                    4b:03:eb:aa:13:2b:f4:b3:b6:93:8e:bf:7c:5c:da:
                    a5:00:6a:87:96:35:e0:60:8e:3b:ca:77:5c:8a:47:
                    ae:d2:f1:db:f8:dd:04:5d:c3:ff:27:dc:1c:ea:d0:
                    14:cd:57:12:bd:5c:73:2d:ca:b4:6d:d6:e3:4f:fa:
                    79:3e:5d:b9:7c:12:14:fb:be:97:38:af:58:61:60:
                    ec:80:31:cc:1f:98:e5:a5:40:69:96:7a:3f:43:d0:
                    f9:4d:4d:e1:67:d4:3d:26:50:e1:cf:e8:e0:08:d0:
                    79:46:fa:b3:5a:ba:24:59:73:e1:e1:79:01:22:2b:
                    cd:1f:a0:f3:33:b3:85:ee:45:c8:41:1b:3c:57:9f:
                    8c:ef:c6:24:d0:d5:f3:f7:a9:16:bb:a6:da:42:72:
                    16:9f:29:a8:bf:b0:6c:91:cb:11:74:8c:92:39:8a:
                    3a:5e:f0:9d:3e:df:f3:13:49:b8:39:2f:ab:ad:f2:
                    ca:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:38:8C:AE:E1:E6:F8:D2:B1:35:16:0B:CA:6A:18:53:D6:A2:33:F2
            X509v3 Authority Key Identifier:
                keyid:9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:47:c0:52:f0:91:c9:97:1f:56:c5:a4:5a:ae:eb:36:51:81:
         81:72:23:a9:0c:33:7b:14:1f:89:32:c5:68:34:a2:17:07:85:
         df:10:80:c7:b9:69:53:06:43:e6:0f:ef:10:80:f8:9d:ae:bc:
         86:c9:91:70:1c:18:bc:ff:72:05:d4:76:42:25:62:f4:b4:97:
         de:ae:cf:f2:28:8c:9f:a7:a9:e6:5b:dc:6c:f1:7d:05:48:d7:
         95:8c:a9:02:bc:af:e6:74:c8:01:86:8a:50:e8:7e:05:92:e4:
         4d:14:f1:c0:a0:4a:d6:0b:73:9a:81:32:fc:4f:5c:d9:5b:d3:
         ef:ec:cc:4a:f3:de:49:4c:fc:14:5a:85:b9:17:e1:7f:4d:f3:
         93:09:c1:6f:8b:bb:ef:18:53:9b:25:a7:48:2f:ca:d0:d9:ef:
         5d:a3:d9:c6:c3:c3:7f:9f:9d:c3:bd:58:e5:dd:6e:e7:c2:8f:
         26:9d:0c:0d:12:3b:07:09:82:c8:83:c5:28:e7:23:d3:87:2e:
         7c:57:3a:d1:80:28:73:bf:19:02:d2:19:68:92:7d:d8:0b:9f:
         61:97:35:b8:e4:58:e1:03:7b:89:16:f8:fd:98:d7:06:67:a7:
         68:20:54:a4:5a:83:4e:4e:dc:4e:08:8b:d9:9c:5d:d8:7f:51:
         0b:59:ea:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:39 2026 by rpki-client