Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232312e302f32342d3234203d3e203535363634.roa
File:                     34352e3234392e3232312e302f32342d3234203d3e203535363634.roa (raw, json)
Hash identifier:          HbBPzeDt1cXeR3BTYO04zhY5evGhPJE6vDjU7VM1+TM=
Subject key identifier:   3F:DD:6B:66:21:0B:13:78:9F:9E:2C:53:13:19:A3:2E:19:31:31:35
Certificate issuer:       /CN=055B63D1B5F66B71EA3283775B07777CB0E06BCB
Certificate serial:       7E0BC1C34817DE144735FA9BCECBA2EC1FED8CD2
Authority key identifier: 05:5B:63:D1:B5:F6:6B:71:EA:32:83:77:5B:07:77:7C:B0:E0:6B:CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232312e302f32342d3234203d3e203535363634.roa
Signing time:             Sun 03 May 2026 02:21:21 +0000
ROA not before:           Sun 03 May 2026 02:16:21 +0000
ROA not after:            Sun 02 May 2027 02:21:21 +0000
asID:                     55664
IP address blocks:        45.249.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl
                          rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0b:c1:c3:48:17:de:14:47:35:fa:9b:ce:cb:a2:ec:1f:ed:8c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055B63D1B5F66B71EA3283775B07777CB0E06BCB
        Validity
            Not Before: May  3 02:16:21 2026 GMT
            Not After : May  2 02:21:21 2027 GMT
        Subject: CN=3FDD6B66210B13789F9E2C531319A32E19313135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:bb:26:52:72:57:54:29:f1:d9:02:7d:86:
                    f4:28:44:35:47:0d:1d:10:57:27:ad:ac:7d:de:11:
                    2f:7a:c4:ee:0e:9c:9c:00:74:85:b9:be:37:48:28:
                    8d:72:d7:2b:ce:39:42:f1:10:0a:2b:bb:24:f8:6f:
                    d7:05:61:8f:4b:69:2b:76:e0:bc:14:14:57:4c:d4:
                    5f:d1:58:b2:93:39:d8:dd:51:a3:6a:41:31:ba:bd:
                    15:f7:68:de:85:69:33:38:a4:0c:ce:0b:e3:c9:57:
                    e7:0a:84:2f:59:ba:51:ef:fd:8c:f8:ac:e1:2b:41:
                    47:ab:44:fe:c3:dc:5a:4d:c9:8e:a4:49:53:ae:98:
                    31:ae:8d:15:e6:51:e7:ec:6f:76:a4:15:94:26:98:
                    6b:87:13:50:45:87:f0:e3:78:6a:c6:ef:8f:be:46:
                    86:27:46:0a:a7:20:e8:e6:95:f3:c9:77:c0:9a:46:
                    45:8c:46:b0:2c:10:a8:80:b5:e4:41:4b:7b:b2:c2:
                    c5:0e:75:e2:2f:9d:f8:4f:42:81:36:dc:cb:3d:ff:
                    95:33:06:26:f4:56:25:91:c5:24:e4:90:3e:ae:b6:
                    88:01:9d:b0:92:03:4d:54:35:7d:a1:c8:cd:67:99:
                    2f:02:fe:da:a3:6f:b1:b1:ad:f2:07:3a:c9:93:eb:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DD:6B:66:21:0B:13:78:9F:9E:2C:53:13:19:A3:2E:19:31:31:35
            X509v3 Authority Key Identifier:
                keyid:05:5B:63:D1:B5:F6:6B:71:EA:32:83:77:5B:07:77:7C:B0:E0:6B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232312e302f32342d3234203d3e203535363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:95:17:a6:8c:d6:5b:63:38:64:ca:a5:38:f4:7b:27:69:35:
         fd:e6:8b:c1:6b:12:69:03:60:6d:bc:ca:1c:36:e7:2c:3c:fb:
         2b:7e:b6:89:4d:31:f3:74:9b:2f:a1:8f:9a:6a:47:ac:be:f9:
         b1:b0:bd:d8:46:a7:09:8c:9b:c2:7e:0a:b2:11:9e:49:2d:db:
         94:ca:aa:26:6d:23:54:15:66:f5:3b:68:89:65:ae:c2:67:f5:
         e7:5e:e1:29:9e:fe:6a:d4:af:44:6e:5c:5a:7b:69:57:70:7d:
         ed:c2:78:34:45:6f:e3:3d:7a:72:6c:44:3d:45:82:26:40:50:
         c7:13:55:7c:27:88:6d:ff:8a:f2:b1:fe:d7:f0:20:69:bf:0f:
         f4:65:b7:ee:3f:8b:59:e6:65:3f:18:e4:b0:f8:7d:97:74:61:
         25:e2:02:f0:bd:e5:b5:67:0d:c9:37:f4:7f:bd:b4:69:f9:07:
         9c:90:55:88:f0:f2:c3:7a:56:06:6b:a3:12:c8:08:e1:26:a6:
         c8:84:d1:ab:86:2d:ad:64:64:62:2b:c3:d4:b2:2f:c8:fb:4a:
         72:99:16:5e:6f:3d:e0:25:92:12:df:78:99:eb:95:a2:f4:13:
         01:08:cb:96:55:a3:71:7d:5a:ef:e2:c5:cc:0c:d0:0f:47:bf:
         e8:3f:8b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:07 2026 by rpki-client