Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
File:                     33362e35302e39372e302f32342d3234203d3e20313532333939.roa (raw, json)
Hash identifier:          /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=
Subject key identifier:   DC:F3:18:C9:66:D4:9F:67:D8:31:94:20:55:8C:EB:C4:52:DA:25:A1
Certificate issuer:       /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A
Certificate serial:       68044816C255DA76CB53C28082D71F95795798CE
Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
Signing time:             Sun 03 May 2026 02:30:58 +0000
ROA not before:           Sun 03 May 2026 02:25:58 +0000
ROA not after:            Sun 02 May 2027 02:30:58 +0000
asID:                     152399
IP address blocks:        36.50.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl
                          rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:04:48:16:c2:55:da:76:cb:53:c2:80:82:d7:1f:95:79:57:98:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A
        Validity
            Not Before: May  3 02:25:58 2026 GMT
            Not After : May  2 02:30:58 2027 GMT
        Subject: CN=DCF318C966D49F67D8319420558CEBC452DA25A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:03:13:6a:e2:4d:4f:31:f4:b3:5d:aa:a7:
                    4d:50:4b:60:9b:fc:e9:35:38:0a:b7:11:f4:54:be:
                    42:ae:92:e2:65:a3:3f:cf:b1:83:31:03:0f:5b:72:
                    3f:fb:34:18:66:ed:f2:51:79:d1:f8:d8:e0:a3:ca:
                    d2:0f:75:13:6f:90:2f:dc:b0:95:15:bc:51:0b:b2:
                    b0:0c:db:43:d6:e0:90:bf:92:65:1a:d7:3c:c9:e2:
                    38:b6:44:1f:b9:83:ab:e5:ef:30:a8:0e:1d:42:a1:
                    e7:fb:e2:5a:da:99:e4:fb:e8:1d:75:a6:9c:ac:16:
                    51:68:88:56:7b:96:6a:af:ce:16:a0:16:69:ac:fa:
                    6f:f3:eb:d3:8c:8d:88:05:03:51:98:8d:6d:ee:d6:
                    fa:32:c8:b6:d4:f9:82:85:79:36:c4:dd:0b:f8:e8:
                    53:51:52:2f:9c:df:00:84:e6:a7:9a:47:40:34:95:
                    20:b3:5e:1d:5b:a8:53:df:16:16:cf:ff:fd:6f:58:
                    4c:59:e6:81:02:eb:78:cf:3c:a4:31:dd:b1:4e:1c:
                    1a:c3:2e:39:fa:ac:89:38:65:5d:8a:ec:fe:40:2d:
                    89:ec:85:3a:79:26:9a:ca:dd:11:a3:33:69:22:01:
                    50:9d:b0:c4:e4:ac:3f:a5:dd:76:8e:aa:ab:06:6e:
                    28:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F3:18:C9:66:D4:9F:67:D8:31:94:20:55:8C:EB:C4:52:DA:25:A1
            X509v3 Authority Key Identifier:
                keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:7d:8d:ec:83:46:cd:65:08:60:c0:7b:51:0c:31:b1:5e:92:
         29:72:d5:94:d1:d8:9c:f9:9c:6b:76:f9:a9:91:97:2e:1a:37:
         8b:63:25:9b:f7:1f:04:f6:ee:7b:49:e9:67:c6:04:ca:cc:c3:
         77:4b:3b:66:93:b7:05:7e:a1:04:2f:d6:24:11:1f:11:3c:d8:
         02:4b:99:96:13:d3:65:64:2b:7a:ed:f7:14:f6:4b:a9:55:5d:
         56:96:c7:4e:3b:ee:fa:34:d6:ba:77:51:0d:ee:3a:ed:eb:8d:
         3c:59:0d:40:36:fa:fb:0b:4b:59:29:32:8c:9a:82:17:25:64:
         f9:45:a1:59:df:dc:25:42:34:dd:1b:e7:51:2c:15:f4:51:f5:
         6a:fa:d8:f9:c5:44:62:bb:80:87:7c:ed:95:0a:b4:33:f0:6e:
         3c:fd:df:86:25:ac:c8:c7:62:b3:0b:e3:fb:e5:d4:71:a1:17:
         54:69:3e:31:bb:ac:36:7a:8b:c8:c5:b7:7b:f5:da:f2:27:d2:
         3c:5d:71:5c:90:9f:56:7e:5c:36:7a:ba:58:5f:9a:1e:24:d3:
         a5:67:9c:18:21:b5:32:86:40:d8:00:7d:9d:38:db:79:3d:76:
         fc:40:6f:21:ac:a9:f3:e7:2c:ec:3d:4b:d4:8a:61:71:d6:47:
         d3:a8:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:17 2026 by rpki-client