Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa
File:                     34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=
Subject key identifier:   0B:FE:35:66:FA:A5:20:0D:E2:B5:FE:17:1B:7E:EB:6F:E6:F5:FB:54
Certificate issuer:       /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial:       72BFF03E053927C1252B021E1DE3B93EF8809BB4
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa
Signing time:             Sun 03 May 2026 02:29:49 +0000
ROA not before:           Sun 03 May 2026 02:24:49 +0000
ROA not after:            Sun 02 May 2027 02:29:49 +0000
asID:                     133823
IP address blocks:        45.116.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
                          rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bf:f0:3e:05:39:27:c1:25:2b:02:1e:1d:e3:b9:3e:f8:80:9b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
        Validity
            Not Before: May  3 02:24:49 2026 GMT
            Not After : May  2 02:29:49 2027 GMT
        Subject: CN=0BFE3566FAA5200DE2B5FE171B7EEB6FE6F5FB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:7f:3b:42:13:b9:f8:e1:b1:22:10:db:d0:
                    36:33:cd:c7:8e:2e:19:c4:49:7a:e1:dc:7d:06:84:
                    b9:7e:64:f2:2a:06:07:a7:1d:d2:4c:13:65:4d:b6:
                    d2:b0:e0:74:f3:f0:13:51:28:e3:49:95:a7:e9:52:
                    bb:d0:63:28:c9:37:af:47:30:86:4b:22:7e:52:35:
                    91:d3:12:bf:ad:9f:d2:39:5d:3c:bd:e6:da:a1:0c:
                    b8:a0:54:8a:0f:aa:2e:07:5e:41:99:0b:67:1e:32:
                    85:ff:d6:f5:69:f6:af:99:23:f6:99:91:eb:6f:f3:
                    60:42:43:d1:52:c2:c8:b0:04:1b:07:24:68:be:0d:
                    d3:45:bf:c5:2f:f6:6f:1c:01:12:8b:a0:c3:4e:dd:
                    b9:cc:d6:32:a1:7f:17:2e:80:f9:7d:76:93:f9:8b:
                    f2:df:82:16:bb:a9:5d:b6:24:8d:16:34:63:f1:d1:
                    dd:b6:a4:bb:85:7c:00:4c:16:14:c7:5a:0e:cd:62:
                    78:25:b0:1c:db:08:40:9a:2e:8b:d2:47:40:83:cf:
                    ed:ea:23:8d:76:fa:b9:f8:8c:21:3a:99:4e:91:9e:
                    7e:8f:3a:f9:5c:ce:55:87:20:0b:37:8c:0e:ed:53:
                    c2:49:e3:f8:62:66:dd:14:ce:8f:89:62:70:e8:58:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FE:35:66:FA:A5:20:0D:E2:B5:FE:17:1B:7E:EB:6F:E6:F5:FB:54
            X509v3 Authority Key Identifier:
                keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:a7:3f:d1:9b:ee:b3:4c:a2:70:c2:1c:4c:05:38:75:14:
         4d:e1:04:86:ea:71:c0:b3:92:9d:19:8d:7f:4b:86:27:67:35:
         2f:1c:26:fa:87:f1:57:8e:8c:6e:d0:bc:c7:66:94:0a:e7:65:
         32:13:8e:7d:5c:6c:87:11:92:0d:bc:e5:2c:31:15:b9:ad:1c:
         53:13:67:3a:74:07:91:ad:67:bc:b0:05:eb:2c:1b:e8:19:ff:
         39:34:4c:eb:58:c8:8f:7f:11:ee:e6:12:b9:3e:bb:b0:e8:a3:
         b5:4c:bf:5f:66:f3:f5:1c:26:86:32:9a:b9:be:2f:c9:b8:d4:
         74:8c:26:82:72:dc:77:b8:c6:f0:86:98:ce:28:82:3b:05:6f:
         27:e2:54:0f:74:23:a8:70:80:29:e4:1d:b3:75:17:1f:82:99:
         c4:41:ab:1c:28:0c:09:d0:80:bf:91:6d:4c:43:ec:dd:5d:7b:
         db:cc:86:93:31:8b:ce:66:72:96:a3:d8:71:3c:bc:80:2f:69:
         c4:03:ab:25:6e:b4:25:bf:48:a0:6e:7f:df:86:51:a1:69:ae:
         c4:b8:05:b2:48:6b:e6:4d:4f:cb:91:19:7e:5c:9c:ac:44:9b:
         c1:d3:d7:1a:b9:82:55:c9:03:a9:f3:d8:e9:33:62:f4:c5:16:
         06:34:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:20 2026 by rpki-client