Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137312e302f32342d3234203d3e203436303534.roa
File:                     35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier:          d1NKSb9zCDz65Zahjy0PaWXg282C7xqtAafmjhthBLo=
Subject key identifier:   04:54:64:4C:37:37:FC:66:62:28:56:3A:6B:B4:12:2C:22:6A:25:88
Certificate issuer:       /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Certificate serial:       676715BAF951A21CF25D7C87E7615E7B97862220
Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137312e302f32342d3234203d3e203436303534.roa
Signing time:             Sun 03 May 2026 02:28:05 +0000
ROA not before:           Sun 03 May 2026 02:23:05 +0000
ROA not after:            Sun 02 May 2027 02:28:05 +0000
asID:                     46054
IP address blocks:        58.145.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
                          rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:67:15:ba:f9:51:a2:1c:f2:5d:7c:87:e7:61:5e:7b:97:86:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
        Validity
            Not Before: May  3 02:23:05 2026 GMT
            Not After : May  2 02:28:05 2027 GMT
        Subject: CN=0454644C3737FC666228563A6BB4122C226A2588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:c2:10:58:5d:55:5d:46:ac:6e:37:a5:0d:
                    41:b3:b9:ac:c3:a8:24:23:c2:86:e8:33:0b:91:1d:
                    42:e9:e6:55:63:03:88:35:50:6c:9e:e6:cb:10:8f:
                    c0:a6:29:79:41:6a:76:f5:60:4e:10:14:d8:0c:a0:
                    70:d8:46:61:ff:2d:0c:d8:c9:c6:45:6c:64:03:1f:
                    c6:49:58:e5:06:da:a0:36:59:fd:9a:96:61:d1:a2:
                    a2:1a:8b:b6:06:a2:e9:65:90:ad:d9:39:d5:b3:29:
                    20:74:bf:dd:58:85:c9:6a:b6:58:7e:d2:0f:8e:9f:
                    5f:a9:f5:f4:21:b1:74:5d:96:56:7f:5a:75:a9:43:
                    2d:a6:55:d5:7f:0b:20:16:08:42:5c:21:dc:d6:cb:
                    10:1e:e0:c1:88:82:63:e9:86:b7:27:63:37:e5:20:
                    4f:2b:24:9c:b3:5c:dc:fa:77:9b:2f:61:77:13:6b:
                    c4:77:29:16:45:6a:e1:59:6f:18:75:de:aa:8b:ce:
                    ce:4a:77:26:ff:67:95:2d:c7:f9:ef:85:aa:e3:1f:
                    04:43:ed:04:71:e3:0f:c9:fa:1e:0c:ae:31:01:1a:
                    d7:ab:55:10:ef:2e:bc:74:76:62:61:94:81:1e:8e:
                    0b:2d:62:5e:d9:0a:96:c9:d2:90:dc:88:7c:6b:83:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:54:64:4C:37:37:FC:66:62:28:56:3A:6B:B4:12:2C:22:6A:25:88
            X509v3 Authority Key Identifier:
                keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137312e302f32342d3234203d3e203436303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:03:5e:cd:dc:95:79:b0:92:ca:d3:38:44:e8:4e:88:dc:de:
         88:92:8a:25:66:30:88:34:14:7d:9b:87:3f:85:8e:ac:25:0a:
         01:1a:b0:85:6b:d2:e8:10:8c:db:28:a0:d2:23:5b:6e:10:05:
         9e:1a:bc:e0:7d:4f:7e:68:86:31:73:51:c0:b8:20:72:0b:87:
         f7:f4:8e:c3:00:49:d6:b9:cc:9e:b6:e4:8a:4a:b8:99:4d:31:
         5f:1d:9f:c9:c2:9d:a5:29:5a:f0:0f:b6:87:2a:48:25:3f:7b:
         7a:73:87:93:7f:e1:b6:33:7b:7f:cc:52:bf:16:67:26:6f:68:
         a1:13:7d:bb:61:a6:18:29:98:05:ac:b0:c8:f8:b5:40:c1:52:
         a8:da:e9:e3:87:cb:0c:e0:98:ef:03:6c:db:f0:07:68:0f:10:
         75:60:c3:65:ff:5a:2a:6e:11:06:9e:ce:4e:a5:7c:6a:c3:e3:
         1f:77:7f:29:ff:1b:19:ab:a3:8f:0e:e1:f3:30:f0:11:72:38:
         03:fc:02:b2:20:42:f8:6f:dd:12:6b:72:ca:82:c4:8e:30:e5:
         5b:32:f6:99:45:1a:ee:4e:88:f7:77:7f:d9:2c:ac:b6:a9:64:
         a7:6a:8e:45:9d:93:6f:e1:2b:51:08:b9:d8:36:80:39:90:54:
         b7:4b:66:d8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZ2cVuvlRohzyXXyH52Fee5eGIiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NzM1MEUzRTNBMTUxRjRDQzcxMjc4MjI4MDJBRDQ3
Qjg2QTVDRjAeFw0yNjA1MDMwMjIzMDVaFw0yNzA1MDIwMjI4MDVaMDMxMTAvBgNV
BAMTKDA0NTQ2NDRDMzczN0ZDNjY2MjI4NTYzQTZCQjQxMjJDMjI2QTI1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5j8IQWF1VXUasbjelDUGzuazD
qCQjwoboMwuRHULp5lVjA4g1UGye5ssQj8CmKXlBanb1YE4QFNgMoHDYRmH/LQzY
ycZFbGQDH8ZJWOUG2qA2Wf2almHRoqIai7YGoullkK3ZOdWzKSB0v91Yhclqtlh+
0g+On1+p9fQhsXRdllZ/WnWpQy2mVdV/CyAWCEJcIdzWyxAe4MGIgmPphrcnYzfl
IE8rJJyzXNz6d5svYXcTa8R3KRZFauFZbxh13qqLzs5Kdyb/Z5Utx/nvharjHwRD
7QRx4w/J+h4MrjEBGterVRDvLrx0dmJhlIEejgstYl7ZCpbJ0pDciHxrg/nVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBFRkTDc3/GZiKFY6a7QSLCJqJYgwHwYDVR0j
BBgwFoAUc3c1Dj46FR9MxxJ4IoAq1HuGpc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2NmMzA5MzYtYzc1MC00MzNiLTljMmEtOGZmNWYzOGU2M2Q0LzAvNzM3NzM1MEUz
RTNBMTUxRjRDQzcxMjc4MjI4MDJBRDQ3Qjg2QTVDRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83Mzc3MzUwRTNFM0ExNTFGNENDNzEyNzgyMjgwMkFENDdCODZB
NUNGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjZjMwOTM2LWM3NTAtNDMzYi05
YzJhLThmZjVmMzhlNjNkNC8wLzM1MzgyZTMxMzQzNTJlMzEzNzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqRqzANBgkqhkiG
9w0BAQsFAAOCAQEAUwNezdyVebCSytM4ROhOiNzeiJKKJWYwiDQUfZuHP4WOrCUK
ARqwhWvS6BCM2yig0iNbbhAFnhq84H1PfmiGMXNRwLggcguH9/SOwwBJ1rnMnrbk
ikq4mU0xXx2fycKdpSla8A+2hypIJT97enOHk3/htjN7f8xSvxZnJm9ooRN9u2Gm
GCmYBaywyPi1QMFSqNrp44fLDOCY7wNs2/AHaA8QdWDDZf9aKm4RBp7OTqV8asPj
H3d/Kf8bGaujjw7h8zDwEXI4A/wCsiBC+G/dEmtyyoLEjjDlWzL2mUUa7k6I93d/
2Systqlkp2qORZ2Tb+ErUQi52DaAOZBUt0tm2A==
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:18 2026 by rpki-client