Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137302e302f32342d3234203d3e203436303534.roa
File:                     35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier:          OU8A/JqlWEHiLMQOXTcJaLj05li9iqcqdLDEsrie8gk=
Subject key identifier:   9E:74:A1:19:EE:80:9F:A5:9A:71:FE:B1:2F:A3:DF:9D:50:E3:CF:6D
Certificate issuer:       /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Certificate serial:       6249DDFAE61F19B036E50640424BB5328E154BAB
Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137302e302f32342d3234203d3e203436303534.roa
Signing time:             Sun 03 May 2026 02:28:05 +0000
ROA not before:           Sun 03 May 2026 02:23:05 +0000
ROA not after:            Sun 02 May 2027 02:28:05 +0000
asID:                     46054
IP address blocks:        58.145.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
                          rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:49:dd:fa:e6:1f:19:b0:36:e5:06:40:42:4b:b5:32:8e:15:4b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
        Validity
            Not Before: May  3 02:23:05 2026 GMT
            Not After : May  2 02:28:05 2027 GMT
        Subject: CN=9E74A119EE809FA59A71FEB12FA3DF9D50E3CF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:02:bd:a6:80:b6:0e:d7:83:00:77:2b:14:36:
                    c7:db:05:74:69:7f:25:a9:1c:14:f2:46:a5:5b:d4:
                    84:69:3e:49:23:70:75:43:7d:08:94:21:08:ae:5f:
                    43:f9:83:6e:a1:4f:c4:71:7a:d3:7e:8c:92:05:52:
                    c7:9a:0b:d7:fd:e1:27:82:71:0d:cc:15:be:d5:5a:
                    24:9b:27:ef:c0:13:b1:fb:54:29:04:0d:e2:0a:fc:
                    10:58:7d:ee:fc:e7:40:ea:95:52:cd:d9:97:e4:17:
                    f6:f8:6b:55:6f:34:2b:fa:5a:4a:d4:36:29:21:3c:
                    c2:f5:ea:a6:b4:3d:82:b4:a2:4d:3a:9d:1e:d4:fd:
                    7a:69:0a:79:a4:8b:c2:05:ae:6f:68:6f:4f:46:ff:
                    bc:74:68:f9:0f:2a:82:1f:7a:2d:c8:3b:b8:55:10:
                    d7:fc:ae:9a:84:ef:87:b3:c8:8b:53:25:8c:21:5b:
                    df:9f:31:73:a0:b3:dc:10:1d:a8:7b:7f:f7:97:ff:
                    84:52:2d:a2:2a:51:dd:db:f5:56:10:79:45:e2:6e:
                    8f:ae:93:de:07:27:65:98:44:ff:73:d6:c5:da:17:
                    2f:89:1d:75:9c:81:7c:6a:3f:e8:e7:b0:8c:17:da:
                    49:d4:fb:28:b0:1c:9b:fd:98:21:21:ed:bc:4d:d5:
                    52:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:A1:19:EE:80:9F:A5:9A:71:FE:B1:2F:A3:DF:9D:50:E3:CF:6D
            X509v3 Authority Key Identifier:
                keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137302e302f32342d3234203d3e203436303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c7:c2:a3:42:a4:eb:c1:97:d7:6b:ba:fc:28:86:57:d0:57:
         23:8a:d9:de:f9:ae:98:47:33:54:56:27:90:12:91:21:fb:57:
         53:94:56:e7:79:ae:c8:11:e6:17:b7:d4:24:c9:7d:37:7c:9c:
         67:70:1e:ef:9b:08:c4:98:0a:12:b9:ce:32:98:da:6c:df:51:
         33:c5:27:cf:6b:cd:d7:ea:24:62:23:85:bc:f6:e3:73:ff:84:
         21:70:24:48:cd:78:37:63:94:93:d7:6f:45:7d:ac:ef:44:64:
         49:a6:b6:df:e1:11:2d:5d:c8:08:f5:39:fc:a8:45:ea:b2:b9:
         47:fd:de:4e:8d:c6:4e:5a:1b:6d:d5:a1:8b:aa:79:15:5c:c7:
         39:27:d0:56:bb:9f:67:ce:44:0a:3c:e0:8f:b4:c0:c3:7b:65:
         1a:f0:04:f9:f0:c8:bd:65:dd:a8:fc:fc:01:f0:5e:9e:4e:d9:
         ec:0e:f2:b4:9e:fa:90:82:3a:ff:7c:74:f4:4d:03:51:fc:bf:
         58:19:56:52:22:9b:52:ef:de:84:2b:28:e9:f7:1c:01:f0:b8:
         d1:a4:66:77:da:d7:66:67:3c:36:a4:30:77:24:cc:be:32:ef:
         ab:c4:ed:05:1b:73:6c:f1:30:c9:3d:ee:02:96:f6:af:04:e8:
         cd:19:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:41 2026 by rpki-client