Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32312d3231203d3e203436303139.roa
File:                     3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (raw, json)
Hash identifier:          Cy4evdxsXDlUgI456OCJSgkPxKW0rsUBqO0gVv2Oj9E=
Subject key identifier:   63:01:B9:E4:24:86:10:2E:8C:EB:BC:C0:59:F9:17:8E:CB:D3:24:56
Certificate issuer:       /CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
Certificate serial:       175D17F1B6EEE62308C769CF1DFC4383C0E44AF4
Authority key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32312d3231203d3e203436303139.roa
Signing time:             Sun 03 May 2026 02:22:08 +0000
ROA not before:           Sun 03 May 2026 02:17:08 +0000
ROA not after:            Sun 02 May 2027 02:22:08 +0000
asID:                     46019
IP address blocks:        175.45.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl
                          rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5d:17:f1:b6:ee:e6:23:08:c7:69:cf:1d:fc:43:83:c0:e4:4a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
        Validity
            Not Before: May  3 02:17:08 2026 GMT
            Not After : May  2 02:22:08 2027 GMT
        Subject: CN=6301B9E42486102E8CEBBCC059F9178ECBD32456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bc:a0:52:33:eb:92:bf:ad:26:ab:22:2a:b4:
                    5b:78:26:71:ba:19:18:9c:18:78:2a:23:f3:6f:25:
                    07:3a:d8:d2:88:fc:19:1f:e1:89:78:f7:6b:5d:cf:
                    53:49:18:aa:c4:70:a9:87:42:54:75:1f:65:1b:15:
                    3d:88:73:fd:31:31:4f:fb:0c:b6:e6:59:d4:0a:a8:
                    10:83:6a:69:ef:a6:7f:86:75:0d:fd:db:8f:94:01:
                    cd:c4:a4:8e:5b:1c:3d:ac:a1:de:47:9c:0d:a8:20:
                    bb:31:ac:0d:22:58:cc:63:58:d1:73:f5:52:7a:19:
                    d4:56:d2:f2:3a:b1:c8:9e:b7:d7:fa:90:52:b2:4d:
                    8b:ef:27:f2:9a:57:9b:f6:dc:48:1d:0a:ae:97:a1:
                    8f:1c:e1:29:bd:a3:53:b0:f9:d9:d8:ae:c1:74:fc:
                    b3:c2:af:99:f9:dc:d6:c1:e8:d2:b3:45:7d:59:bf:
                    73:1f:a3:0f:d3:ff:6f:dc:b0:3d:69:c1:d9:dc:99:
                    2a:c8:66:81:d4:74:8c:63:d6:48:79:8b:06:df:9f:
                    58:38:82:12:ab:b7:e5:af:de:22:e3:96:48:9f:23:
                    b2:85:41:fa:91:78:7d:67:16:36:56:55:8a:6c:f4:
                    f6:f9:0c:07:5a:a1:3c:97:66:5d:9f:ed:02:32:fe:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:01:B9:E4:24:86:10:2E:8C:EB:BC:C0:59:F9:17:8E:CB:D3:24:56
            X509v3 Authority Key Identifier:
                keyid:7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32312d3231203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:f2:ee:6c:9e:ce:67:0b:b8:99:b6:ca:45:4a:98:75:bd:f8:
         b4:4f:49:e2:f2:c9:a5:fc:79:2f:8d:4d:42:ad:cf:13:45:87:
         9c:eb:f1:72:0a:b2:04:71:0c:58:2e:9d:e7:f4:62:62:6c:77:
         3d:07:21:48:00:b1:4e:21:e1:13:14:3a:0b:b1:16:3e:76:93:
         75:ea:c6:c2:2e:50:47:23:9d:3a:d6:7d:f4:89:ac:a8:c0:4b:
         26:15:0d:84:cf:f1:6c:3d:05:39:08:8c:e4:6b:04:4a:8a:20:
         e5:e8:82:88:3f:0a:a8:22:c7:ba:6c:81:1b:1c:03:53:bb:bd:
         4d:e9:20:97:a9:2f:7f:bf:bc:83:55:fc:fa:b0:57:f2:a4:16:
         cc:bf:5f:1c:20:dc:9f:40:07:42:ff:1e:7f:38:2d:25:8c:72:
         cb:99:24:42:4e:3d:97:0a:20:3f:33:41:01:f3:4f:41:d3:2a:
         1f:0c:b2:89:f0:58:b3:63:a0:fb:6c:cd:ca:82:bf:25:02:19:
         ad:2c:87:64:f3:9a:c9:7e:3f:fb:78:7d:05:44:c3:0d:81:63:
         1f:cc:00:f2:51:32:65:00:93:6a:79:df:b3:69:e1:78:de:0f:
         51:14:b6:c2:44:e5:92:5b:80:29:01:e5:c9:f7:92:8d:4b:35:
         a8:32:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:58 2026 by rpki-client