Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138392e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          pq7hgN0BYFvcOO4RibbiV4dskaN65Tn7+tm7b4Zi5ss=
Subject key identifier:   EE:24:C3:A7:A8:57:D0:52:AE:71:ED:ED:D5:62:F8:CC:FB:3C:8D:BF
Certificate issuer:       /CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
Certificate serial:       78A0969D3A07DB91C7FEB7652D80190411182E39
Authority key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138392e302f32342d3234203d3e203436303139.roa
Signing time:             Sun 03 May 2026 02:22:07 +0000
ROA not before:           Sun 03 May 2026 02:17:07 +0000
ROA not after:            Sun 02 May 2027 02:22:07 +0000
asID:                     46019
IP address blocks:        175.45.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl
                          rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a0:96:9d:3a:07:db:91:c7:fe:b7:65:2d:80:19:04:11:18:2e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
        Validity
            Not Before: May  3 02:17:07 2026 GMT
            Not After : May  2 02:22:07 2027 GMT
        Subject: CN=EE24C3A7A857D052AE71EDEDD562F8CCFB3C8DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:f3:81:5e:ff:13:7e:8b:2c:87:ad:07:cc:
                    a6:6e:2b:38:ad:2f:9c:73:48:68:11:ab:d9:95:a7:
                    7a:f2:e4:15:7b:19:d4:e7:b0:ba:f5:b1:87:49:fa:
                    96:38:74:cc:5e:30:7a:d6:b0:db:83:e4:ea:31:2d:
                    d7:91:48:5c:7a:62:26:34:c4:6c:4f:f7:bd:70:a2:
                    d8:af:cb:e7:e1:27:7d:b7:9c:f3:ee:bb:64:41:e2:
                    1e:06:a5:cd:ac:40:a2:6f:1a:79:19:ef:86:e6:d9:
                    ec:63:e6:7e:d0:4a:ad:56:34:4c:4d:63:2b:f0:cb:
                    48:75:73:31:37:80:08:0c:6a:7d:a5:e2:62:4b:8e:
                    97:0d:64:12:65:91:9e:ef:eb:26:a5:93:fa:d9:21:
                    72:aa:2e:63:89:13:ab:c5:72:68:73:4b:64:c2:6c:
                    53:ab:5c:6b:45:5e:02:bd:f3:cb:ea:68:12:f0:9f:
                    dd:bf:74:4b:ac:45:3b:ff:f5:4b:78:6e:3e:37:a5:
                    3d:e7:d1:7b:02:ad:4e:fc:e5:03:3f:bc:01:69:48:
                    9c:2b:9b:9f:11:db:b1:17:14:ff:7f:c8:7b:78:bf:
                    7c:39:45:d4:a2:56:c2:31:fe:86:dd:fb:94:4d:f8:
                    1b:68:28:6b:a5:18:3e:5a:00:85:45:54:3a:90:f3:
                    0d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:24:C3:A7:A8:57:D0:52:AE:71:ED:ED:D5:62:F8:CC:FB:3C:8D:BF
            X509v3 Authority Key Identifier:
                keyid:7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138392e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:bc:02:f8:55:0a:0a:27:ea:72:f5:f9:32:e4:39:23:ed:c9:
         8e:82:2a:6e:3f:2a:d9:6d:02:95:d6:42:b7:0e:ef:e8:d5:87:
         b5:d9:2d:96:8a:b7:22:15:df:6d:d7:32:ce:2c:ad:2f:49:44:
         c6:00:1f:b2:84:12:91:e4:97:d4:53:b5:61:43:b9:94:3b:a2:
         e8:a4:fe:3e:91:5a:1a:bd:9a:6d:fc:49:0e:68:12:a8:e2:10:
         6c:eb:56:2f:06:73:cc:fe:11:b9:a9:84:a6:2a:d2:c9:ee:08:
         24:17:a8:85:63:c6:73:93:23:bc:f9:10:7a:9f:51:81:f4:e1:
         cc:05:c3:a6:f3:e1:0f:25:4c:ff:6d:c6:4f:9a:c7:a9:cf:f1:
         67:e8:e7:69:49:ae:e0:1f:3a:30:f6:4b:07:ae:24:0c:f2:40:
         24:b5:13:00:a8:fa:38:f7:c8:04:c1:4c:fe:e0:f5:68:2b:8a:
         09:d6:9c:ca:48:f4:bc:42:70:cc:b9:c0:dd:52:7f:52:bf:c3:
         94:00:77:46:59:5b:71:43:07:01:de:31:77:c2:f4:45:7b:a4:
         db:25:1c:06:55:0b:44:75:83:91:83:3f:a8:55:00:88:b9:0d:
         09:4a:65:53:25:70:2d:a7:50:d1:bc:58:24:0b:fc:f4:d4:e4:
         75:2c:f3:24
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUeKCWnToH25HH/rdlLYAZBBEYLjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E4RDQyMzM5MjI4NzJBODk0RTMwRTU0RDY4NzRCRUI0
MTZBRDFERjAeFw0yNjA1MDMwMjE3MDdaFw0yNzA1MDIwMjIyMDdaMDMxMTAvBgNV
BAMTKEVFMjRDM0E3QTg1N0QwNTJBRTcxRURFREQ1NjJGOENDRkIzQzhEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdfOBXv8Tfossh60HzKZuKzit
L5xzSGgRq9mVp3ry5BV7GdTnsLr1sYdJ+pY4dMxeMHrWsNuD5OoxLdeRSFx6YiY0
xGxP971wotivy+fhJ323nPPuu2RB4h4Gpc2sQKJvGnkZ74bm2exj5n7QSq1WNExN
Yyvwy0h1czE3gAgMan2l4mJLjpcNZBJlkZ7v6yalk/rZIXKqLmOJE6vFcmhzS2TC
bFOrXGtFXgK988vqaBLwn92/dEusRTv/9Ut4bj43pT3n0XsCrU785QM/vAFpSJwr
m58R27EXFP9/yHt4v3w5RdSiVsIx/obd+5RN+BtoKGulGD5aAIVFVDqQ8w3PAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU7iTDp6hX0FKuce3t1WL4zPs8jb8wHwYDVR0j
BBgwFoAUeo1CM5IocqiU4w5U1odL60Fq0d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmJmNzFjOTEtMTYyNC00ZmMwLThjNjMtMmVmYWZkNDZmYmMxLzAvN0E4RDQyMzM5
MjI4NzJBODk0RTMwRTU0RDY4NzRCRUI0MTZBRDFERi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QThENDIzMzkyMjg3MkE4OTRFMzBFNTRENjg3NEJFQjQxNkFE
MURGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJiZjcxYzkxLTE2MjQtNGZjMC04
YzYzLTJlZmFmZDQ2ZmJjMS8wLzMxMzczNTJlMzQzNTJlMzEzODM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK8tvTANBgkqhkiG
9w0BAQsFAAOCAQEAlLwC+FUKCifqcvX5MuQ5I+3JjoIqbj8q2W0CldZCtw7v6NWH
tdktloq3IhXfbdcyziytL0lExgAfsoQSkeSX1FO1YUO5lDui6KT+PpFaGr2abfxJ
DmgSqOIQbOtWLwZzzP4RuamEpirSye4IJBeohWPGc5MjvPkQep9RgfThzAXDpvPh
DyVM/23GT5rHqc/xZ+jnaUmu4B86MPZLB64kDPJAJLUTAKj6OPfIBMFM/uD1aCuK
Cdacykj0vEJwzLnA3VJ/Ur/DlAB3RllbcUMHAd4xd8L0RXuk2yUcBlULRHWDkYM/
qFUAiLkNCUplUyVwLadQ0bxYJAv89NTkdSzzJA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:29 2026 by rpki-client