Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3136392e302f32342d3234203d3e203436303534.roa
File:                     35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier:          CJsi4P7cF17zeVXlJxUuGuNmwdU6F6/z2QybZclUgaI=
Subject key identifier:   32:31:F9:06:08:A4:4A:6E:3D:42:CA:04:B1:6A:A2:51:03:5A:0D:50
Certificate issuer:       /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Certificate serial:       4AFE9918FD354E20C0C5FCE13BC39A8142DF6E4E
Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3136392e302f32342d3234203d3e203436303534.roa
Signing time:             Sun 03 May 2026 02:28:03 +0000
ROA not before:           Sun 03 May 2026 02:23:03 +0000
ROA not after:            Sun 02 May 2027 02:28:03 +0000
asID:                     46054
IP address blocks:        58.145.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
                          rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fe:99:18:fd:35:4e:20:c0:c5:fc:e1:3b:c3:9a:81:42:df:6e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
        Validity
            Not Before: May  3 02:23:03 2026 GMT
            Not After : May  2 02:28:03 2027 GMT
        Subject: CN=3231F90608A44A6E3D42CA04B16AA251035A0D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:b6:f7:65:59:91:58:f2:fd:df:76:9a:4d:
                    12:a2:bc:77:f3:51:c5:99:8d:00:bb:86:d3:70:b6:
                    33:c8:45:34:75:04:ef:bb:54:5a:c2:dd:cb:2c:08:
                    40:a7:ba:87:a3:93:d3:1d:06:1c:cf:8e:eb:73:6d:
                    b3:fb:39:5b:0c:55:80:83:af:64:dd:3c:28:7c:ad:
                    e5:5e:2e:df:d6:34:dd:1f:96:8e:30:d6:07:3f:57:
                    6f:90:4d:cc:78:f4:7f:44:5e:67:da:46:af:2b:6f:
                    89:8a:19:63:0e:6d:50:11:be:c1:e7:db:dc:b6:c4:
                    fe:b3:b3:53:69:aa:76:83:ca:5b:39:84:32:a3:a6:
                    ca:45:3d:1a:a4:4a:0b:ee:a0:fe:87:46:47:02:0c:
                    9a:d3:62:08:75:d8:20:84:fd:d7:2f:56:9a:8b:26:
                    a1:87:b7:97:61:73:5b:31:a8:46:85:24:5e:c5:6d:
                    eb:68:4b:c9:dd:a6:3f:08:00:2f:28:41:ca:12:96:
                    ce:da:18:d2:9c:57:d0:85:9f:c6:02:71:fc:8f:a2:
                    b0:2f:6e:8b:a3:2f:04:fb:2f:be:5e:1f:6f:9e:78:
                    9e:d9:10:af:e0:c9:9a:57:51:33:a5:cf:06:53:1d:
                    f3:34:59:9d:43:74:15:fd:b5:52:89:f6:fd:21:8a:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:31:F9:06:08:A4:4A:6E:3D:42:CA:04:B1:6A:A2:51:03:5A:0D:50
            X509v3 Authority Key Identifier:
                keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3136392e302f32342d3234203d3e203436303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:05:92:dd:be:c0:98:2a:c6:08:52:5c:34:25:40:19:ca:f2:
         65:6d:2e:8b:15:45:37:11:92:02:97:a3:aa:8d:33:4b:6d:ac:
         63:31:9e:37:43:b9:a5:40:31:e1:b5:68:ab:8a:76:0f:24:45:
         24:64:b9:53:03:6a:42:a4:f7:5f:22:e2:06:d0:24:11:12:35:
         3f:8a:f5:fe:4f:09:66:c4:54:59:3c:5b:61:c4:d2:c6:af:70:
         5b:3f:c4:2d:7c:2b:b3:b1:9d:49:33:23:c0:53:59:6b:37:d0:
         54:67:a2:58:7f:ef:15:e2:74:3c:fc:c4:18:e4:52:c9:32:b7:
         5d:31:40:fd:fa:23:38:1f:55:c4:4b:ee:cb:52:08:bd:e5:e6:
         46:7a:57:05:a6:e9:28:3a:7d:76:7a:40:2d:bf:cc:57:a4:72:
         4c:ec:f4:da:b0:0c:38:cc:5f:c6:39:36:50:af:13:f4:7a:c9:
         26:06:1c:83:8a:6d:51:ba:9e:58:74:a8:e7:d6:0a:2a:f7:53:
         7b:e8:54:54:82:31:8c:ac:1b:64:7a:ec:13:ce:ea:c6:84:3f:
         ed:2e:9e:54:78:f8:c3:56:8c:4d:0f:20:d6:76:1d:02:ad:6b:
         77:b7:f9:8a:92:6e:0a:55:2e:bc:f6:d1:a6:b7:da:9b:1b:fa:
         62:9f:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:05 2026 by rpki-client