Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/34352e3132362e34302e302f32332d3234203d3e203634333030.roa
File:                     34352e3132362e34302e302f32332d3234203d3e203634333030.roa (raw, json)
Hash identifier:          QV1AmdEqJoduwfMKnjSO4CyHE2Sz08SjmQ94K3Z6ddA=
Subject key identifier:   63:D0:0C:CC:84:F9:4B:86:6F:E9:E2:B1:79:86:A4:23:FF:B4:FD:63
Certificate issuer:       /CN=83746D5838134AE55050C41F5D5CEB0C3F839FAA
Certificate serial:       625F9C6F70A9497AE2590F663CC7444CBC3274A5
Authority key identifier: 83:74:6D:58:38:13:4A:E5:50:50:C4:1F:5D:5C:EB:0C:3F:83:9F:AA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83746D5838134AE55050C41F5D5CEB0C3F839FAA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/34352e3132362e34302e302f32332d3234203d3e203634333030.roa
Signing time:             Sun 03 May 2026 02:29:51 +0000
ROA not before:           Sun 03 May 2026 02:24:51 +0000
ROA not after:            Sun 02 May 2027 02:29:51 +0000
asID:                     64300
IP address blocks:        45.126.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/83746D5838134AE55050C41F5D5CEB0C3F839FAA.crl
                          rsync://rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/83746D5838134AE55050C41F5D5CEB0C3F839FAA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83746D5838134AE55050C41F5D5CEB0C3F839FAA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5f:9c:6f:70:a9:49:7a:e2:59:0f:66:3c:c7:44:4c:bc:32:74:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83746D5838134AE55050C41F5D5CEB0C3F839FAA
        Validity
            Not Before: May  3 02:24:51 2026 GMT
            Not After : May  2 02:29:51 2027 GMT
        Subject: CN=63D00CCC84F94B866FE9E2B17986A423FFB4FD63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:fe:33:e9:8c:89:05:26:08:f5:22:15:8a:
                    6e:9b:5a:74:cd:12:69:46:36:de:aa:1f:43:36:8b:
                    45:9a:9c:1f:14:a4:b2:92:8d:ef:1c:e7:e6:00:c1:
                    f8:b3:3d:94:f6:1f:80:21:11:75:53:69:90:8e:30:
                    e4:54:aa:ed:ff:e5:9f:c0:03:9e:ed:8c:b9:2b:a7:
                    d6:25:d0:eb:73:69:8d:c6:9c:18:42:42:26:55:c5:
                    e4:a2:60:35:fb:ca:b0:7e:cb:24:99:f4:9f:0c:18:
                    2f:ea:55:2e:f9:6b:1b:dd:af:73:81:95:cc:ee:cf:
                    1e:5a:a8:c6:c4:a1:27:12:8f:11:dc:d7:67:56:05:
                    49:a4:48:cf:f7:19:8f:0c:b0:d6:c1:ab:ae:e9:c8:
                    a2:3c:3b:60:6c:b8:83:91:6c:04:50:3c:24:ff:3d:
                    91:1b:00:17:e3:f1:ff:6f:58:65:7a:27:52:35:f3:
                    df:3a:39:fc:9b:f0:0f:90:31:b2:1e:80:4b:12:83:
                    e7:60:02:c5:85:e6:e7:db:e7:86:93:9a:86:95:fa:
                    fe:48:1a:06:4e:d9:9f:b2:d3:59:a9:48:ef:90:6e:
                    bf:59:66:71:39:b7:b8:2a:c1:68:90:a1:4c:e0:99:
                    91:af:50:a9:14:cc:a7:38:5b:e1:e5:59:8e:e1:ac:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D0:0C:CC:84:F9:4B:86:6F:E9:E2:B1:79:86:A4:23:FF:B4:FD:63
            X509v3 Authority Key Identifier:
                keyid:83:74:6D:58:38:13:4A:E5:50:50:C4:1F:5D:5C:EB:0C:3F:83:9F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/83746D5838134AE55050C41F5D5CEB0C3F839FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83746D5838134AE55050C41F5D5CEB0C3F839FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/34352e3132362e34302e302f32332d3234203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:f5:83:49:4b:18:6a:69:c3:3e:27:a9:a0:44:34:e3:8f:
         db:ae:07:91:7b:4e:dd:cd:84:02:c1:b8:68:5f:2e:1a:ba:55:
         2b:66:32:fa:db:5d:84:57:cc:ec:97:79:ee:a0:78:5a:10:28:
         0b:85:35:dc:fd:e0:35:e5:9f:0e:d6:c4:ce:17:37:c5:6b:52:
         f5:46:2c:f6:02:1a:76:f1:51:a6:46:4c:16:49:3e:71:32:e8:
         fd:74:dd:8d:f9:de:5a:99:f7:ba:53:b1:04:82:24:13:8a:55:
         4d:b4:9a:6a:d0:14:d4:37:b0:56:ee:51:20:ee:5f:de:1a:cc:
         b7:0e:ac:26:30:1f:a7:bd:87:7a:cf:0a:29:92:c1:32:04:75:
         a7:73:55:1d:ce:4b:c7:98:44:f7:03:69:e8:5c:88:ee:ed:14:
         69:45:5c:b7:aa:45:48:c5:21:e8:c3:42:b1:bb:69:99:06:93:
         a4:af:ef:05:9b:cc:cd:d5:2b:8b:f9:97:cc:70:08:77:3c:5d:
         c8:d6:26:b2:52:ee:79:a8:f5:bb:50:46:49:1d:37:79:9f:9b:
         ca:f0:ed:cb:44:37:de:a5:7f:93:0b:7b:d7:ef:31:57:5b:d2:
         3b:2a:ae:a8:5e:e7:bd:32:7e:1f:9b:46:02:05:0d:58:a1:91:
         7a:8e:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:16 2026 by rpki-client