Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233362e302f32342d3234203d3e203633383539.roa
File:                     36362e39362e3233362e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier:          FXQqDUge8vBmdg4yqeaayI6LTqqGaA+wnyhjGoSgH+A=
Subject key identifier:   C1:95:A3:5B:3F:90:86:6A:8F:DF:36:D7:CE:C5:A8:75:9D:ED:8F:B8
Certificate issuer:       /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial:       3AB867A90AF00019F0E007E22D7C18ABBA976AD2
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233362e302f32342d3234203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:18 +0000
ROA not before:           Sun 03 May 2026 02:22:18 +0000
ROA not after:            Sun 02 May 2027 02:27:18 +0000
asID:                     63859
IP address blocks:        66.96.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b8:67:a9:0a:f0:00:19:f0:e0:07:e2:2d:7c:18:ab:ba:97:6a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
        Validity
            Not Before: May  3 02:22:18 2026 GMT
            Not After : May  2 02:27:18 2027 GMT
        Subject: CN=C195A35B3F90866A8FDF36D7CEC5A8759DED8FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:7e:d8:57:82:75:ce:76:83:89:4e:d2:38:
                    ce:f7:7b:df:af:7f:78:85:00:4b:2d:65:b2:75:3a:
                    76:71:38:0f:d4:7a:b2:1a:52:b8:68:d8:d9:36:45:
                    b3:8f:2d:e5:70:f9:72:93:b0:90:d1:c0:a4:8d:04:
                    62:e7:b8:0c:ea:79:c0:85:4a:7e:cc:49:74:21:e9:
                    ae:99:7a:29:9c:7e:8a:a6:ac:0a:c3:a0:ac:5e:b4:
                    37:63:8b:6b:01:5e:8f:4c:04:80:06:fb:b2:3f:df:
                    30:0f:b8:10:b1:1e:7b:6b:dc:16:03:4a:1b:5b:bb:
                    7d:c5:1b:b7:e4:de:1b:f1:7f:1d:03:65:37:47:2d:
                    88:a1:c2:bf:6e:02:9d:63:ed:43:02:fb:0f:7e:a7:
                    6c:f6:f7:d9:21:fa:56:75:26:23:a7:b2:fb:7b:68:
                    4d:b0:f4:b1:1f:59:fb:97:3c:a9:84:42:fe:6c:dd:
                    89:7e:8a:a1:4e:d3:30:fc:ed:75:63:06:bf:5b:87:
                    43:92:35:45:b7:8a:cb:01:b9:1e:e2:c9:c9:18:be:
                    f6:af:43:df:1c:e8:9e:e4:87:14:dd:fe:3d:cf:ad:
                    d6:a1:ad:1e:a5:30:ea:12:3d:71:40:98:78:c0:c3:
                    9c:42:cd:85:1f:a0:85:d4:49:58:9c:4c:8d:b3:28:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:95:A3:5B:3F:90:86:6A:8F:DF:36:D7:CE:C5:A8:75:9D:ED:8F:B8
            X509v3 Authority Key Identifier:
                keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233362e302f32342d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:44:e6:93:66:7c:27:78:8d:c2:aa:a4:92:bd:be:3e:0f:0d:
         56:20:20:03:32:33:c4:dc:c5:db:8e:d0:50:73:90:a9:62:f4:
         60:06:a0:e1:d2:10:41:3e:bf:1b:32:f4:c2:43:ec:57:5b:5c:
         68:1c:13:49:b6:7f:02:fd:3e:50:1b:71:86:f9:80:17:3c:b2:
         d9:11:3c:62:4c:26:67:72:ac:e0:68:ea:e4:40:db:1b:61:1b:
         a2:04:b5:1e:e8:22:a3:84:74:a5:5e:03:2e:b2:36:ea:04:2b:
         70:ca:7f:2e:90:c4:fa:bc:75:b6:98:8f:bc:1d:44:76:51:68:
         82:7c:b9:ad:9e:cc:34:f6:8e:22:96:a3:8a:d1:a5:9b:cb:02:
         46:f7:d4:9f:1d:0a:23:cc:4e:1a:35:c0:b3:8a:0b:04:45:82:
         60:16:b0:f3:a0:6c:f8:a1:66:0d:fd:34:da:3d:1e:6c:dd:bb:
         1d:5f:30:29:b2:a3:f5:de:e7:15:9f:2b:64:96:ca:7f:ec:cd:
         a3:b9:b9:db:1e:f3:00:b4:10:2b:76:3a:e5:5b:39:0a:cb:4b:
         49:98:b8:98:92:0b:23:3d:99:49:10:7d:e4:77:d3:a6:1c:15:
         e1:4b:30:cc:50:36:a2:f6:31:d8:58:f9:d8:61:f9:73:db:40:
         99:a9:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:11 2026 by rpki-client