Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138372e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          xJh5WIaBaJDKe0gD95hGnS6h/QKLhblXUfBYm2CvOr8=
Subject key identifier:   FA:CE:CF:98:64:FD:1E:91:98:DA:A3:61:E3:AB:85:8C:69:39:C7:AD
Certificate issuer:       /CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
Certificate serial:       4405C87B21A2370459B0055FD95FD5A48676CC77
Authority key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138372e302f32342d3234203d3e203436303139.roa
Signing time:             Sun 03 May 2026 02:22:07 +0000
ROA not before:           Sun 03 May 2026 02:17:07 +0000
ROA not after:            Sun 02 May 2027 02:22:07 +0000
asID:                     46019
IP address blocks:        175.45.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl
                          rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:05:c8:7b:21:a2:37:04:59:b0:05:5f:d9:5f:d5:a4:86:76:cc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
        Validity
            Not Before: May  3 02:17:07 2026 GMT
            Not After : May  2 02:22:07 2027 GMT
        Subject: CN=FACECF9864FD1E9198DAA361E3AB858C6939C7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:00:45:88:3f:92:0d:00:2d:1a:8f:7f:51:
                    ac:74:54:d1:c9:f9:a0:46:fb:61:01:10:ae:19:3a:
                    5c:64:42:9f:62:b1:a9:3f:88:eb:9e:30:1d:d7:f9:
                    ac:56:d8:e8:59:e4:84:f3:6d:eb:d1:50:2d:5d:c9:
                    8d:9d:8d:fe:15:fd:7b:b4:64:ea:bb:ce:12:8e:30:
                    c4:ad:12:8a:b7:52:73:7a:b9:54:aa:7d:2f:62:c5:
                    67:67:ba:45:1e:39:0f:9d:29:04:80:e6:93:bd:5f:
                    cd:61:8e:e6:64:e6:24:5e:5e:26:e0:fa:d5:e1:bf:
                    a9:34:20:61:10:a1:b9:4c:5e:71:cb:4b:f7:81:fe:
                    a2:ce:62:0f:db:51:b8:92:74:c1:54:46:70:75:97:
                    f1:3e:48:a1:cf:b8:33:01:ca:8f:82:74:82:ff:51:
                    e9:c7:a2:f6:cb:d8:45:89:03:45:78:cf:8d:9e:53:
                    84:c6:f2:8e:d3:b1:db:d5:3d:30:9d:ea:75:cd:ac:
                    7f:ce:34:34:d7:54:c5:a5:87:11:42:0f:49:92:89:
                    94:7d:c7:15:70:2f:3c:e2:2c:c1:33:f1:fd:0d:d1:
                    ac:65:a1:34:4e:6e:e1:0d:eb:f4:bf:82:81:6e:e0:
                    8c:7f:5e:82:28:8c:18:e4:2a:5f:e1:a8:96:e8:3c:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CE:CF:98:64:FD:1E:91:98:DA:A3:61:E3:AB:85:8C:69:39:C7:AD
            X509v3 Authority Key Identifier:
                keyid:7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138372e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f7:68:1b:7a:f2:73:18:2f:86:54:08:4f:29:83:bf:ea:3e:
         ee:65:09:8a:a4:f3:50:3b:92:84:bd:90:a1:0e:aa:8b:84:4d:
         d1:29:b3:51:20:64:b4:0e:aa:ee:d6:34:b5:86:52:02:b9:e1:
         85:e0:0d:75:07:07:af:a6:50:91:b3:bc:01:9a:50:8f:e9:88:
         fc:68:ba:a3:fc:f8:cf:69:ea:3a:dd:d5:9e:29:66:f5:a7:cf:
         de:bf:1b:b6:0f:26:29:d2:88:d6:e2:d4:0a:4a:16:cc:91:5b:
         bb:2f:b8:9b:c2:53:02:bb:31:b7:6b:b8:b9:55:40:8e:83:9c:
         68:7e:9c:25:b6:c2:ac:e4:82:ef:6c:c6:6f:16:5e:70:71:fc:
         60:e6:c1:36:52:37:65:85:e0:99:7c:96:d9:20:d1:46:49:67:
         68:99:8c:c3:e6:99:15:2b:aa:bc:9a:7e:be:f5:b9:14:45:58:
         9e:83:7c:37:4e:d0:67:06:a8:c3:7a:a2:69:80:0c:24:f7:c6:
         8f:99:b7:f6:8c:90:c1:a8:f1:d3:b8:f6:d4:b1:84:d4:73:b9:
         77:34:b1:8e:41:08:2f:9f:89:08:c6:de:9b:70:3a:2d:f9:aa:
         68:7e:ae:e8:50:2f:32:6e:ec:63:05:ea:a2:54:65:85:10:cc:
         77:cf:e4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:40 2026 by rpki-client