Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa
File:                     34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          L8m06v4lypbJFkBBcAeCl2HHpHbjPmRx4afU7zHtGbs=
Subject key identifier:   9F:57:8D:84:AB:BD:7C:2C:0D:E1:0E:3E:88:39:51:C7:F3:65:05:22
Certificate issuer:       /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial:       77CAEDA4FF7892D2C1AE49153934B9D1D5666F88
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa
Signing time:             Sun 03 May 2026 02:29:47 +0000
ROA not before:           Sun 03 May 2026 02:24:47 +0000
ROA not after:            Sun 02 May 2027 02:29:47 +0000
asID:                     133823
IP address blocks:        45.116.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
                          rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ca:ed:a4:ff:78:92:d2:c1:ae:49:15:39:34:b9:d1:d5:66:6f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
        Validity
            Not Before: May  3 02:24:47 2026 GMT
            Not After : May  2 02:29:47 2027 GMT
        Subject: CN=9F578D84ABBD7C2C0DE10E3E883951C7F3650522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:3c:d3:45:a3:b6:20:f3:e5:e2:f3:8c:78:
                    ed:4e:8d:5e:2e:8e:03:f1:cb:d0:6e:ae:9d:60:ee:
                    8c:3c:d0:5d:22:55:a5:7c:14:23:a9:b1:05:16:1e:
                    0f:65:30:52:40:78:ec:82:e5:1f:18:a6:03:c7:c3:
                    34:11:32:76:52:f7:ff:91:88:c5:7d:aa:c9:b7:ba:
                    c5:76:c8:5c:69:d1:9f:a7:0c:eb:0d:b7:3b:a2:c2:
                    05:27:08:93:ca:52:fd:3c:3d:ef:38:06:89:e4:13:
                    d4:d7:7a:ae:b9:2b:2e:c7:bb:41:b8:a0:e4:ff:1a:
                    9c:91:25:a7:08:48:b6:16:61:cb:a0:2e:13:c6:df:
                    78:6d:33:ba:3f:03:86:1f:bc:70:46:b3:25:4d:5e:
                    53:a6:e1:f9:30:e7:d4:ce:01:37:fe:45:38:04:56:
                    2f:84:d9:b6:9d:6e:53:db:46:c5:e1:69:ca:6f:0d:
                    ce:06:cd:c5:4a:00:e7:72:97:7d:cf:2e:5f:a4:74:
                    0a:78:a8:16:19:1d:03:6d:5a:5d:01:09:38:95:4d:
                    6e:ae:fa:57:b0:e4:81:a7:53:a6:ad:bc:61:5f:04:
                    a1:55:57:aa:1b:1e:93:95:58:1b:60:19:d3:43:1c:
                    53:eb:3b:32:de:f5:c3:b6:5b:2a:f3:30:1a:4c:bb:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:57:8D:84:AB:BD:7C:2C:0D:E1:0E:3E:88:39:51:C7:F3:65:05:22
            X509v3 Authority Key Identifier:
                keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:2a:c6:76:bc:82:fc:c3:f4:5c:fe:76:36:64:6b:73:3f:ea:
         4a:93:5e:86:31:e8:4b:60:33:5c:2a:36:61:c1:06:5a:e2:eb:
         b6:92:f2:0e:1c:55:52:0c:51:3b:12:8b:a6:c9:04:da:98:3c:
         ff:64:87:23:25:1f:0c:5c:b7:dd:0b:43:1e:7b:bf:66:fd:14:
         e6:a8:43:d2:f3:02:b5:f4:f4:ce:62:6b:50:7d:47:ba:59:f5:
         db:02:70:68:d8:b6:5e:1c:53:1c:0f:00:b5:c3:5e:4b:b4:e8:
         97:cd:ad:e8:1a:e6:8b:f3:d9:e5:62:3c:a7:2c:08:89:06:28:
         2c:40:38:71:d1:33:b5:c9:e0:f4:81:af:6f:9b:18:b2:fe:43:
         db:a0:7a:8f:ab:d3:5e:ef:b9:8b:fd:69:db:8f:7f:8f:48:77:
         70:1d:ca:7d:a9:72:4a:ef:05:80:3f:c5:ef:07:2f:7e:c4:ab:
         aa:44:50:26:8e:58:e3:fd:8a:a5:bf:a9:4a:ea:9d:b8:f6:8f:
         df:5e:1b:29:8a:fb:a3:97:cd:61:f0:28:e3:ff:0c:8d:2f:97:
         57:34:52:52:85:71:5c:86:4a:8c:ac:9e:93:1b:cb:61:a6:7e:
         2c:00:6e:e0:51:95:c4:5e:c1:50:b6:4d:c3:1a:ff:e8:6d:27:
         80:bb:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:57:36 2026 by rpki-client