Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20333936393832.roa
File:                     33362e35302e39372e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          evJWabIpMG/mmDnJzLopVv/qFJyE22nbSyLLiuPqBGA=
Subject key identifier:   EB:EE:01:64:67:E9:72:FB:C2:B2:41:32:31:76:E5:94:D8:78:01:F2
Certificate issuer:       /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A
Certificate serial:       2FFCB1C2F400A0AB7882AF171EE3E88246DEE2E2
Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20333936393832.roa
Signing time:             Sun 03 May 2026 02:30:58 +0000
ROA not before:           Sun 03 May 2026 02:25:58 +0000
ROA not after:            Sun 02 May 2027 02:30:58 +0000
asID:                     396982
IP address blocks:        36.50.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl
                          rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fc:b1:c2:f4:00:a0:ab:78:82:af:17:1e:e3:e8:82:46:de:e2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A
        Validity
            Not Before: May  3 02:25:58 2026 GMT
            Not After : May  2 02:30:58 2027 GMT
        Subject: CN=EBEE016467E972FBC2B241323176E594D87801F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:9b:ac:02:93:7c:c0:37:5e:e5:27:93:75:
                    4f:d3:98:90:b9:b0:9e:6f:1e:a1:52:cf:02:bb:ed:
                    62:92:7f:3c:18:47:f0:12:37:c5:65:b6:be:bc:de:
                    85:96:35:68:6b:22:ea:09:84:6f:5a:3c:f6:b6:37:
                    3e:29:2c:b9:36:01:cb:dd:c9:45:e9:4a:db:99:11:
                    38:38:0e:96:d9:c2:dd:62:9d:f3:cf:c7:c5:38:3e:
                    fa:55:43:00:c0:54:1a:ee:83:d0:2d:6e:12:75:cd:
                    ea:b8:ff:9c:6b:bb:df:a7:71:80:6d:8c:5b:34:3b:
                    af:74:a3:5e:51:23:5e:d2:55:8f:b6:09:6f:8e:f4:
                    9f:e2:8b:0e:6b:a7:a3:ab:71:4b:f8:a6:21:00:d3:
                    9e:2f:09:76:89:61:a9:86:54:4f:35:12:89:e0:20:
                    90:09:64:f2:db:7b:bc:0b:61:57:87:48:d0:ce:e8:
                    c9:fa:ef:04:d6:5a:ca:57:6b:e0:79:92:4c:28:c5:
                    c6:b2:ee:33:6e:7c:38:4b:d5:45:d5:fb:f2:46:e2:
                    3f:d7:f2:03:4b:45:b6:bb:bf:d6:09:58:28:b3:9f:
                    80:7b:1a:04:1d:64:bc:f8:6b:d1:bb:d3:38:56:6e:
                    70:bb:8e:5e:d3:b3:1a:44:a9:59:d7:83:75:d0:62:
                    f2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EE:01:64:67:E9:72:FB:C2:B2:41:32:31:76:E5:94:D8:78:01:F2
            X509v3 Authority Key Identifier:
                keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:74:d2:85:d9:84:90:c1:42:dd:80:9c:64:ad:94:bc:5a:3d:
         c6:a2:67:d7:fd:9d:e1:41:5a:50:b9:22:e0:85:48:18:a6:d7:
         ae:67:72:47:77:73:2e:4d:ff:dc:8a:e9:da:b9:4c:71:df:10:
         0d:e1:59:2a:67:b4:45:97:c9:9c:c2:69:ca:f1:c9:be:c8:5c:
         d3:ad:e4:c1:6a:ae:13:af:61:80:bf:cc:33:2f:a6:2f:2a:e1:
         cc:f4:3d:47:38:40:04:72:45:87:9e:8d:a9:08:f3:a4:9d:fa:
         fb:db:dc:4e:9a:90:41:ef:cd:5d:18:01:3f:dc:44:5e:9e:91:
         ac:8c:12:13:29:1e:77:69:3b:2e:53:ef:d4:60:8b:b1:af:56:
         78:fe:fe:d8:7c:9a:03:8a:ac:f5:8f:37:36:06:15:f4:0c:92:
         99:39:4c:ab:34:82:c6:48:65:d7:b4:26:1d:df:ba:87:cb:be:
         9b:e6:c8:2d:e0:0b:56:64:bb:bb:5a:31:9a:31:60:b2:9c:d9:
         b8:d5:e8:fd:97:1f:aa:ff:04:fa:de:74:53:ae:63:99:b2:4d:
         3b:64:71:0c:37:75:55:72:6e:d7:a9:1a:06:df:29:58:b5:15:
         d5:6c:71:46:98:7b:e9:88:b3:4e:a8:af:e7:af:ad:6e:d4:c7:
         39:e5:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:11 2026 by rpki-client