Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233392e302f32342d3234203d3e203633383539.roa
File:                     36362e39362e3233392e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier:          TWtH0snkmyvPbM3KXTxVuZ8snRCPYMLTUgWDmAZ2ibE=
Subject key identifier:   F7:3F:A3:72:BD:01:03:7F:54:12:60:1F:B5:D9:9C:6C:3F:AC:59:2B
Certificate issuer:       /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial:       76170A375CB1AA684A0C38F385D7EB698FCB95C9
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233392e302f32342d3234203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:25 +0000
ROA not before:           Sun 03 May 2026 02:22:25 +0000
ROA not after:            Sun 02 May 2027 02:27:25 +0000
asID:                     63859
IP address blocks:        66.96.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:17:0a:37:5c:b1:aa:68:4a:0c:38:f3:85:d7:eb:69:8f:cb:95:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
        Validity
            Not Before: May  3 02:22:25 2026 GMT
            Not After : May  2 02:27:25 2027 GMT
        Subject: CN=F73FA372BD01037F5412601FB5D99C6C3FAC592B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:db:51:fd:f1:60:5d:03:32:55:e8:8a:d8:
                    8d:dc:1e:77:4a:fe:61:b1:7b:eb:6e:cf:b2:4c:43:
                    9f:0c:bc:08:28:15:f1:38:e5:24:fa:39:49:e2:41:
                    9f:ed:02:51:2a:bb:aa:e4:7b:89:c0:1c:b8:b0:d2:
                    0b:03:63:8b:fb:38:77:e4:c9:bf:d8:6c:e3:12:b5:
                    3b:57:b1:89:98:a5:1a:95:33:e6:c2:a0:8c:fe:93:
                    66:eb:8c:39:b7:a3:bd:45:cb:9f:b4:d0:c1:dd:92:
                    ea:ed:4f:c3:d8:b1:52:d7:a9:09:5f:e9:6c:41:b3:
                    73:59:f3:b4:6f:57:11:48:31:0f:f8:9f:1f:fb:2b:
                    75:26:61:64:58:6d:43:15:4f:b7:cf:9e:ae:ec:6f:
                    d1:1b:1a:4f:8f:61:a0:ea:fd:dc:1b:45:78:8e:fa:
                    39:85:e4:16:13:97:71:9e:7d:c6:81:54:c6:32:d9:
                    c3:7a:9d:7f:5a:f2:84:01:ec:4b:04:2a:3e:9c:21:
                    02:95:f8:10:c6:de:a0:98:7e:8b:db:84:71:a4:a5:
                    18:72:ad:89:b7:27:93:19:b8:8a:44:12:d2:b0:b8:
                    1c:29:64:41:e6:10:15:2c:86:ac:40:19:7e:f7:5d:
                    8a:2b:56:cd:3a:aa:5c:73:c4:20:c7:1d:6a:8f:bf:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3F:A3:72:BD:01:03:7F:54:12:60:1F:B5:D9:9C:6C:3F:AC:59:2B
            X509v3 Authority Key Identifier:
                keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233392e302f32342d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:4e:30:bc:b9:24:1a:ce:d5:d7:43:6f:4c:44:b2:de:ee:b9:
         69:c1:65:92:7a:8a:3e:e3:45:a0:5c:f2:01:e4:1d:3e:e0:f7:
         b0:08:4c:03:66:85:c9:f3:7b:f5:ec:2f:c0:47:87:90:10:bb:
         29:6c:a1:f3:0c:53:b8:cc:3e:f5:c3:64:eb:5c:e5:89:c3:19:
         08:45:9d:ea:11:5b:41:3f:35:9d:5e:f4:25:03:a1:7a:e6:e2:
         c8:3d:23:44:69:61:b8:8c:04:a3:91:cb:22:77:76:6e:59:2e:
         81:0e:9f:d3:25:39:ec:d0:85:fd:f0:2c:97:3a:8a:2a:00:42:
         61:8c:70:17:a6:30:96:24:d9:4b:02:f5:bb:bf:df:04:e3:e5:
         a2:64:ee:92:b1:19:83:e6:a2:40:59:13:be:a2:5a:4f:db:18:
         da:9c:c4:75:59:c7:d8:e5:db:4b:0c:01:c4:5b:fa:ea:d3:51:
         9c:e6:16:12:c3:f1:68:72:43:ec:07:16:ad:21:5d:58:fe:ab:
         ad:20:b6:e6:f7:ef:7f:1f:6b:15:3f:44:6a:8f:d8:58:3b:a0:
         0f:bb:c7:e1:b8:bb:b0:eb:fd:88:06:3d:a0:54:42:8c:a0:fc:
         b0:25:93:1c:75:75:3b:1c:50:8b:74:38:59:6d:1c:c0:67:7d:
         5f:89:3e:2e
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUdhcKN1yxqmhKDDjzhdfraY/LlckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE
NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjVaFw0yNzA1MDIwMjI3MjVaMDMxMTAvBgNV
BAMTKEY3M0ZBMzcyQkQwMTAzN0Y1NDEyNjAxRkI1RDk5QzZDM0ZBQzU5MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8l9tR/fFgXQMyVeiK2I3cHndK
/mGxe+tuz7JMQ58MvAgoFfE45ST6OUniQZ/tAlEqu6rke4nAHLiw0gsDY4v7OHfk
yb/YbOMStTtXsYmYpRqVM+bCoIz+k2brjDm3o71Fy5+00MHdkurtT8PYsVLXqQlf
6WxBs3NZ87RvVxFIMQ/4nx/7K3UmYWRYbUMVT7fPnq7sb9EbGk+PYaDq/dwbRXiO
+jmF5BYTl3GefcaBVMYy2cN6nX9a8oQB7EsEKj6cIQKV+BDG3qCYfovbhHGkpRhy
rYm3J5MZuIpEEtKwuBwpZEHmEBUshqxAGX73XYorVs06qlxzxCDHHWqPvx5hAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU9z+jcr0BA39UEmAftdmcbD+sWSswHwYDVR0j
BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG
QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2
Qjk3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8wLzM2MzYyZTM5MzYyZTMyMzMzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYO8wDQYJKoZIhvcN
AQELBQADggEBACROMLy5JBrO1ddDb0xEst7uuWnBZZJ6ij7jRaBc8gHkHT7g97AI
TANmhcnze/XsL8BHh5AQuylsofMMU7jMPvXDZOtc5YnDGQhFneoRW0E/NZ1e9CUD
oXrm4sg9I0RpYbiMBKORyyJ3dm5ZLoEOn9MlOezQhf3wLJc6iioAQmGMcBemMJYk
2UsC9bu/3wTj5aJk7pKxGYPmokBZE76iWk/bGNqcxHVZx9jl20sMAcRb+urTUZzm
FhLD8WhyQ+wHFq0hXVj+q60gtub3738faxU/RGqP2Fg7oA+7x+G4u7Dr/YgGPaBU
Qoyg/LAlkxx1dTscUIt0OFltHMBnfV+JPi4=
-----END CERTIFICATE-----
Generated at Wed May 13 00:21:46 2026 by rpki-client