Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/33362e35302e3232352e302f32342d3234203d3e20313532303830.roa
File:                     33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (raw, json)
Hash identifier:          RMvUFQrKL018cFixmOMzozWh6kTAtIwXuWq18nozxuA=
Subject key identifier:   A7:9A:F8:21:0E:CF:59:02:6D:D3:1E:39:9F:97:BB:85:CE:36:CB:12
Certificate issuer:       /CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50
Certificate serial:       530D5701532079385F2AA5719097935481966423
Authority key identifier: C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/33362e35302e3232352e302f32342d3234203d3e20313532303830.roa
Signing time:             Sun 03 May 2026 02:26:52 +0000
ROA not before:           Sun 03 May 2026 02:21:52 +0000
ROA not after:            Sun 02 May 2027 02:26:52 +0000
asID:                     152080
IP address blocks:        36.50.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl
                          rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0d:57:01:53:20:79:38:5f:2a:a5:71:90:97:93:54:81:96:64:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50
        Validity
            Not Before: May  3 02:21:52 2026 GMT
            Not After : May  2 02:26:52 2027 GMT
        Subject: CN=A79AF8210ECF59026DD31E399F97BB85CE36CB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7b:ef:74:58:4d:f5:03:c0:8e:7c:47:a5:dc:
                    a0:86:51:85:f1:53:1c:c9:6f:5c:c5:94:3e:4b:99:
                    0a:ac:ff:87:20:a4:78:3c:ec:9f:31:14:36:22:e6:
                    c8:62:3d:96:d1:f7:f5:61:4e:2c:8f:24:e5:40:0d:
                    6a:ba:9c:83:93:98:31:36:d8:6a:e7:c0:67:6c:20:
                    11:ad:c3:2c:6b:e4:23:8b:0d:76:b1:49:dc:d8:c8:
                    a8:33:e9:8b:1c:b6:d7:e9:62:4c:fa:00:8c:81:14:
                    8e:3b:8a:cc:b6:5f:9e:d1:06:de:94:26:d2:62:b8:
                    0c:70:0d:69:3e:b3:46:00:41:72:33:df:f5:a8:7f:
                    7a:b8:bb:ff:6b:9f:0b:69:c7:13:88:33:87:6d:19:
                    8c:55:db:06:b8:b5:7f:8f:23:3f:42:03:6b:ed:bc:
                    36:c0:77:8a:cb:5d:51:35:6e:bc:7b:2f:5a:93:2b:
                    23:ea:4a:52:c0:49:98:e5:07:7a:0e:e3:b2:71:87:
                    6c:17:8f:00:00:b2:ab:75:f0:7d:45:59:da:94:de:
                    76:44:ff:7c:15:ec:84:a9:7e:e8:f6:a1:a7:5c:e0:
                    9d:c7:fe:83:2f:60:cb:4c:17:b6:63:c5:9f:0c:5b:
                    5c:8e:41:e9:c6:0b:d2:58:79:91:7c:b6:7c:e7:2e:
                    a9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9A:F8:21:0E:CF:59:02:6D:D3:1E:39:9F:97:BB:85:CE:36:CB:12
            X509v3 Authority Key Identifier:
                keyid:C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/33362e35302e3232352e302f32342d3234203d3e20313532303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ac:a2:e8:20:24:ea:f9:ac:41:d2:42:7f:85:d1:5c:09:7f:
         d6:6c:7a:87:b1:1e:92:eb:56:ba:5a:c8:4e:e6:06:a2:dd:f4:
         d7:56:55:cc:13:7e:08:0e:91:09:13:cf:ff:3e:26:7b:85:40:
         1c:c1:c9:db:52:04:a7:0d:05:41:0b:76:c4:6d:4d:0f:fa:1f:
         cf:6c:98:ba:c1:2e:ce:5d:d6:cc:79:e3:3b:71:c9:bf:dc:a5:
         1d:ee:1a:07:4b:cf:71:a3:d8:8c:4b:90:86:0c:15:92:49:85:
         4b:d6:c9:09:60:73:74:26:72:13:a2:a2:3e:dc:a6:b3:2a:1f:
         22:19:83:30:57:11:f8:56:24:b8:3a:cc:b7:9e:28:a9:e6:7d:
         58:9f:49:29:80:38:f6:4c:be:6d:06:ae:1d:55:7e:b1:3d:f3:
         32:77:7b:70:ab:13:21:95:7b:9d:1e:ed:f7:a5:b2:d1:7f:26:
         dd:23:35:3b:63:a4:e8:ad:86:0a:66:ed:1d:61:f2:4f:0f:a1:
         c8:71:82:b1:6d:32:7b:ca:47:b5:78:f8:8f:f2:ac:98:65:45:
         bc:72:8d:d8:bb:8f:46:90:e0:62:0f:42:91:68:f6:a3:19:e2:
         c8:e1:a1:4b:ec:66:20:3c:b3:f8:a6:83:69:1e:64:07:c0:59:
         8f:7e:07:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:26 2026 by rpki-client