Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232332e302f32342d3234203d3e203535363634.roa
File:                     34352e3234392e3232332e302f32342d3234203d3e203535363634.roa (raw, json)
Hash identifier:          UTP7n2LHofA1cQoeYla9G+hP0kV5GAsKQRjCB14UyyM=
Subject key identifier:   C8:5C:7A:B3:B2:69:89:66:DB:A8:0A:EA:9B:74:17:D9:81:B4:9B:9C
Certificate issuer:       /CN=055B63D1B5F66B71EA3283775B07777CB0E06BCB
Certificate serial:       7D3897B172CF77396AA4053A95FABD1DECF7AA75
Authority key identifier: 05:5B:63:D1:B5:F6:6B:71:EA:32:83:77:5B:07:77:7C:B0:E0:6B:CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232332e302f32342d3234203d3e203535363634.roa
Signing time:             Sun 03 May 2026 02:21:21 +0000
ROA not before:           Sun 03 May 2026 02:16:21 +0000
ROA not after:            Sun 02 May 2027 02:21:21 +0000
asID:                     55664
IP address blocks:        45.249.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl
                          rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:38:97:b1:72:cf:77:39:6a:a4:05:3a:95:fa:bd:1d:ec:f7:aa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055B63D1B5F66B71EA3283775B07777CB0E06BCB
        Validity
            Not Before: May  3 02:16:21 2026 GMT
            Not After : May  2 02:21:21 2027 GMT
        Subject: CN=C85C7AB3B2698966DBA80AEA9B7417D981B49B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:11:08:4e:fb:1f:82:01:8a:24:11:c5:2c:
                    eb:29:9e:5a:86:c6:a7:7c:23:42:ae:c0:81:f8:a9:
                    b2:74:49:16:3d:7a:55:a9:0a:4c:2d:35:b7:a7:6e:
                    4d:62:e8:eb:a5:74:ac:15:b5:5c:3d:ee:34:cd:a5:
                    8c:0e:ba:b0:be:43:3b:ca:e9:83:f8:5c:2c:28:76:
                    f7:c5:c0:8b:45:b4:e4:72:4b:46:2a:47:3b:0e:1c:
                    2f:55:14:01:8f:50:e9:f0:63:4b:07:ec:16:6d:01:
                    9b:fb:99:63:f0:c7:f5:07:ca:66:63:13:a3:bd:8a:
                    75:d9:8a:c7:ce:c5:5c:94:ce:a8:3f:d8:08:de:de:
                    03:20:0a:7d:33:ef:2a:89:c6:be:73:0e:04:c1:af:
                    ea:69:cc:a8:13:14:99:75:eb:d3:19:62:1d:0c:fd:
                    58:b0:4b:f6:be:ea:bb:2e:75:5a:71:f7:81:84:1d:
                    59:5f:bb:30:a4:53:be:b4:ca:4c:77:15:80:25:9e:
                    49:d5:23:28:39:05:21:1c:67:49:1b:0d:89:96:4f:
                    1e:fa:77:cd:d3:2f:59:83:73:c0:b5:a9:d0:74:5f:
                    ff:8d:23:07:a0:33:b8:aa:70:18:33:7a:40:a3:e3:
                    b8:58:21:16:d4:24:15:4f:9c:fb:23:14:be:fd:66:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5C:7A:B3:B2:69:89:66:DB:A8:0A:EA:9B:74:17:D9:81:B4:9B:9C
            X509v3 Authority Key Identifier:
                keyid:05:5B:63:D1:B5:F6:6B:71:EA:32:83:77:5B:07:77:7C:B0:E0:6B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232332e302f32342d3234203d3e203535363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:cc:3b:80:57:60:43:69:68:fd:10:61:f1:29:cc:8c:4b:
         3c:bb:d6:b3:46:40:cf:7f:e1:e3:0e:93:90:a1:f7:eb:03:6f:
         4d:07:5a:38:65:58:84:55:af:49:8f:3b:5e:e9:42:50:4b:41:
         0c:d4:d4:c8:2f:81:2f:58:dc:86:45:01:63:8a:cc:d0:33:fc:
         1b:ee:9c:1a:1d:91:90:54:77:81:c0:84:ce:8d:af:2f:99:af:
         a7:36:6f:9b:a8:a3:1d:de:a5:56:e5:64:c0:92:a8:72:91:96:
         d3:ea:87:6f:cf:0d:3b:c6:30:3c:a5:c8:d0:16:4e:8d:b8:4f:
         fa:1b:24:6e:29:51:01:4e:99:bb:ac:d8:f7:64:d6:ab:11:7d:
         05:eb:71:03:75:d9:94:ee:44:ed:dc:6f:c9:5a:17:96:5d:0d:
         58:80:ea:f4:2e:52:53:e6:89:98:ed:69:13:ac:48:9c:22:49:
         e2:48:7e:d9:2b:00:4e:7c:09:54:9c:93:f4:07:69:a2:f2:c4:
         0d:a3:0d:d9:29:ac:e4:51:13:79:0b:15:60:ff:00:d9:e9:25:
         12:c3:a7:94:d6:50:06:f0:21:88:82:0c:0a:61:d4:c2:24:c7:
         91:02:6e:7e:a9:c0:3e:46:d4:7b:cf:f8:83:a5:05:ad:60:d1:
         14:28:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:05 2026 by rpki-client