Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137322e302f32342d3234203d3e203436303534.roa
File:                     35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier:          e4jbQz3u5a8FYwAIij+O/hjopDRAVXihtcltRGdiV+E=
Subject key identifier:   0D:86:DA:1B:B8:CF:80:A7:94:22:BD:06:E9:FB:5D:DC:9E:14:88:C1
Certificate issuer:       /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Certificate serial:       06C8EAD6A35137D6EFE187400DD7B0C6209484A8
Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137322e302f32342d3234203d3e203436303534.roa
Signing time:             Sun 03 May 2026 02:28:04 +0000
ROA not before:           Sun 03 May 2026 02:23:04 +0000
ROA not after:            Sun 02 May 2027 02:28:04 +0000
asID:                     46054
IP address blocks:        58.145.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
                          rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c8:ea:d6:a3:51:37:d6:ef:e1:87:40:0d:d7:b0:c6:20:94:84:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
        Validity
            Not Before: May  3 02:23:04 2026 GMT
            Not After : May  2 02:28:04 2027 GMT
        Subject: CN=0D86DA1BB8CF80A79422BD06E9FB5DDC9E1488C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:5c:bc:17:ff:e1:01:1e:82:25:9c:68:7f:
                    b2:76:fb:0c:67:16:d2:b9:cf:ce:98:da:79:f4:a0:
                    7f:12:8b:21:d0:41:8c:78:40:b5:3a:ee:09:66:bc:
                    1d:3b:cd:fa:53:54:33:e6:15:74:8b:a7:21:b5:68:
                    ae:53:d7:7a:8b:74:29:c1:8d:bf:2a:2b:8c:93:73:
                    41:0c:8d:20:cf:9c:11:4b:bc:93:34:1c:fb:bc:2e:
                    49:e5:2d:1f:8b:70:05:b2:dd:bb:7c:50:92:51:ab:
                    af:35:9f:de:fa:34:10:58:ae:7d:86:25:f1:53:9f:
                    34:1d:fd:e1:2d:6a:bb:33:8c:1f:91:3d:fc:9a:4d:
                    e9:2d:ce:2b:ad:15:d0:66:32:91:d1:ec:2b:64:b7:
                    59:32:da:10:2f:42:1d:e9:6c:ad:81:e9:db:08:fe:
                    dc:a3:86:b8:0e:d7:86:7f:58:4c:3c:a7:3a:0e:d4:
                    57:69:c2:b5:9d:10:bc:f9:0b:35:07:f9:b4:63:56:
                    5b:da:de:ed:74:40:4e:98:85:b5:01:d9:f2:cc:72:
                    19:18:c5:0f:30:88:dc:b7:38:93:75:77:2b:05:8e:
                    a4:6b:72:fa:74:93:5a:34:93:ec:e3:c2:15:6f:98:
                    59:0d:86:96:70:42:ac:f6:11:de:22:87:3d:da:39:
                    19:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:86:DA:1B:B8:CF:80:A7:94:22:BD:06:E9:FB:5D:DC:9E:14:88:C1
            X509v3 Authority Key Identifier:
                keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137322e302f32342d3234203d3e203436303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:82:25:7c:4e:e1:60:b3:0a:79:18:1f:94:2e:3a:08:91:8a:
         3d:11:cc:5f:8f:58:da:5b:23:f5:d2:3d:90:39:b8:d7:61:ab:
         61:20:28:d5:2e:6f:3b:5c:d7:4d:e0:a9:7f:9e:7c:55:d6:13:
         f7:54:c4:6c:89:17:ec:ae:1b:60:d2:67:9a:d6:b3:ea:5c:ff:
         eb:ad:16:84:98:2b:32:05:c9:9a:c1:a5:3c:59:94:57:e2:72:
         4e:a4:78:4a:65:a1:a8:0b:d2:09:8e:50:8c:01:b5:5f:0e:10:
         86:f3:18:54:d9:eb:10:0b:b1:a4:d4:53:58:32:6a:4b:16:44:
         7e:40:25:f4:3b:83:95:a2:cf:4b:c0:b4:3e:8e:8a:2e:92:a3:
         ec:26:3e:4c:23:ee:61:96:77:85:98:2f:bd:f2:71:2f:50:32:
         53:7f:ab:23:41:d0:d6:62:6a:7d:71:eb:da:f9:80:e0:09:a2:
         d5:70:de:ce:5f:3b:36:76:60:fd:ac:63:25:af:79:c3:ae:42:
         13:b0:92:f2:f7:e2:3a:1a:87:29:ff:b3:9e:d5:5c:dd:b1:1e:
         8f:33:29:ef:85:b8:ec:0b:54:82:30:d5:c5:55:a2:e4:ac:2b:
         24:a3:53:aa:01:3c:db:c4:08:88:a2:31:26:b0:92:47:5a:63:
         ff:e8:48:43
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBsjq1qNRN9bv4YdADdewxiCUhKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NzM1MEUzRTNBMTUxRjRDQzcxMjc4MjI4MDJBRDQ3
Qjg2QTVDRjAeFw0yNjA1MDMwMjIzMDRaFw0yNzA1MDIwMjI4MDRaMDMxMTAvBgNV
BAMTKDBEODZEQTFCQjhDRjgwQTc5NDIyQkQwNkU5RkI1RERDOUUxNDg4QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0fly8F//hAR6CJZxof7J2+wxn
FtK5z86Y2nn0oH8SiyHQQYx4QLU67glmvB07zfpTVDPmFXSLpyG1aK5T13qLdCnB
jb8qK4yTc0EMjSDPnBFLvJM0HPu8LknlLR+LcAWy3bt8UJJRq681n976NBBYrn2G
JfFTnzQd/eEtarszjB+RPfyaTektziutFdBmMpHR7Ctkt1ky2hAvQh3pbK2B6dsI
/tyjhrgO14Z/WEw8pzoO1FdpwrWdELz5CzUH+bRjVlva3u10QE6YhbUB2fLMchkY
xQ8wiNy3OJN1dysFjqRrcvp0k1o0k+zjwhVvmFkNhpZwQqz2Ed4ihz3aORnDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUDYbaG7jPgKeUIr0G6ftd3J4UiMEwHwYDVR0j
BBgwFoAUc3c1Dj46FR9MxxJ4IoAq1HuGpc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2NmMzA5MzYtYzc1MC00MzNiLTljMmEtOGZmNWYzOGU2M2Q0LzAvNzM3NzM1MEUz
RTNBMTUxRjRDQzcxMjc4MjI4MDJBRDQ3Qjg2QTVDRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83Mzc3MzUwRTNFM0ExNTFGNENDNzEyNzgyMjgwMkFENDdCODZB
NUNGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjZjMwOTM2LWM3NTAtNDMzYi05
YzJhLThmZjVmMzhlNjNkNC8wLzM1MzgyZTMxMzQzNTJlMzEzNzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqRrDANBgkqhkiG
9w0BAQsFAAOCAQEAmoIlfE7hYLMKeRgflC46CJGKPRHMX49Y2lsj9dI9kDm412Gr
YSAo1S5vO1zXTeCpf558VdYT91TEbIkX7K4bYNJnmtaz6lz/660WhJgrMgXJmsGl
PFmUV+JyTqR4SmWhqAvSCY5QjAG1Xw4QhvMYVNnrEAuxpNRTWDJqSxZEfkAl9DuD
laLPS8C0Po6KLpKj7CY+TCPuYZZ3hZgvvfJxL1AyU3+rI0HQ1mJqfXHr2vmA4Ami
1XDezl87NnZg/axjJa95w65CE7CS8vfiOhqHKf+zntVc3bEejzMp74W47AtUgjDV
xVWi5KwrJKNTqgE828QIiKIxJrCSR1pj/+hIQw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:59 2026 by rpki-client