Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233382e302f32342d3234203d3e203633383539.roa
File:                     36362e39362e3233382e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier:          I/Y0zDnD8eSddmL9ZGozTFxyJGihXZBqSvkyafD6HLU=
Subject key identifier:   05:50:CE:5B:FD:69:F1:3D:44:A3:DC:ED:12:71:3D:7F:39:C5:E9:22
Certificate issuer:       /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial:       597CAC18BC55CA3DE0C3A877DBE814A2D11E1CA8
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233382e302f32342d3234203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:18 +0000
ROA not before:           Sun 03 May 2026 02:22:18 +0000
ROA not after:            Sun 02 May 2027 02:27:18 +0000
asID:                     63859
IP address blocks:        66.96.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7c:ac:18:bc:55:ca:3d:e0:c3:a8:77:db:e8:14:a2:d1:1e:1c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
        Validity
            Not Before: May  3 02:22:18 2026 GMT
            Not After : May  2 02:27:18 2027 GMT
        Subject: CN=0550CE5BFD69F13D44A3DCED12713D7F39C5E922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:28:f0:c4:17:43:98:b5:e3:e5:5a:ed:46:
                    ac:6c:a5:ce:7a:b6:88:9b:5c:ac:f3:ce:d4:ba:1f:
                    85:4f:fc:74:8c:ba:d1:8f:0e:c5:f8:bb:0b:a0:72:
                    f5:b0:6b:e6:8d:84:7b:7c:d0:b8:b9:88:14:18:06:
                    90:8c:6f:62:36:1f:d9:57:f0:24:52:51:a7:e7:6f:
                    42:c0:2a:90:2a:03:e6:14:65:bc:66:c1:80:ea:59:
                    67:50:3e:1e:59:47:e7:64:f9:d1:11:23:47:4a:e2:
                    a6:9c:5e:3b:83:2b:1a:51:41:b6:a2:17:15:94:a4:
                    37:70:87:c9:b2:4f:52:f1:28:53:1b:21:b4:df:b3:
                    32:62:1e:d5:38:8f:d8:8e:9d:2c:35:d1:2d:b0:81:
                    c7:41:43:f9:4b:af:51:08:30:89:da:45:0f:3b:6e:
                    a5:c1:d9:76:74:ac:21:2d:31:ce:7f:09:a0:ed:1f:
                    39:2e:74:8e:da:07:d2:b2:61:ac:f2:58:11:c2:c8:
                    cb:65:77:80:4b:08:35:93:6f:2a:c5:7c:4c:bc:79:
                    9f:a6:37:b3:c6:ec:d2:a0:66:28:e8:ac:0d:51:09:
                    f4:f4:e4:f9:17:8b:10:90:99:3b:88:c7:81:22:bc:
                    f9:66:b7:4b:3f:b8:d4:79:ce:40:86:c2:ca:7e:21:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:50:CE:5B:FD:69:F1:3D:44:A3:DC:ED:12:71:3D:7F:39:C5:E9:22
            X509v3 Authority Key Identifier:
                keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233382e302f32342d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:aa:af:d5:24:50:49:36:52:b0:48:e3:a4:5c:67:99:af:f9:
         12:ea:61:6d:16:76:68:77:f9:3d:dc:52:bf:f1:63:85:ec:5d:
         34:e3:67:1d:53:2e:f8:e1:4b:5e:bf:6a:6f:bb:ce:0d:64:e7:
         37:75:ca:f1:0f:37:37:47:74:f5:3e:12:c1:2b:da:bc:13:52:
         9e:b7:76:59:9b:7b:5d:5e:72:98:1c:bd:df:0b:d3:01:20:bb:
         86:74:fb:7e:9c:d4:b5:de:e1:9d:03:f4:d3:46:8f:41:38:5a:
         69:a0:ff:51:18:08:55:0d:51:f2:6c:6d:cc:c5:ce:41:7f:f3:
         fe:6e:38:90:d1:dd:0c:bf:b8:e4:15:0a:e2:0b:0e:49:a3:e6:
         72:78:fb:bb:e1:3e:e2:fe:af:8a:02:be:94:dc:3a:91:79:e2:
         51:96:9d:87:12:36:88:db:d0:ca:a1:49:02:48:92:a9:69:a2:
         44:5f:70:62:3e:e1:f3:63:e2:e7:83:fa:f8:72:a6:50:cf:d4:
         74:06:ce:1f:fa:df:ad:94:e1:3a:ad:bc:82:4d:80:90:2c:14:
         5c:22:d9:c2:a8:18:ef:88:1e:17:a9:89:58:78:a6:22:4c:db:
         9b:59:8d:38:fb:b0:9f:ef:f0:71:1d:c0:fc:4e:1d:14:0f:e6:
         0d:4f:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:17 2026 by rpki-client