Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa
File:                     34352e36342e39392e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          dyN12mfoRjXFlNHqIFEChK7+mIsDEFYombQgQudcekM=
Subject key identifier:   F6:2B:2A:CC:96:30:61:8C:D3:F8:6F:5C:20:0E:32:F8:6D:5D:DC:DF
Certificate issuer:       /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
Certificate serial:       3C16AC17C77D3B90F4476FEF6CC944223E69DAE7
Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa
Signing time:             Sun 03 May 2026 02:31:31 +0000
ROA not before:           Sun 03 May 2026 02:26:31 +0000
ROA not after:            Sun 02 May 2027 02:31:31 +0000
asID:                     58477
IP address blocks:        45.64.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl
                          rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:16:ac:17:c7:7d:3b:90:f4:47:6f:ef:6c:c9:44:22:3e:69:da:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
        Validity
            Not Before: May  3 02:26:31 2026 GMT
            Not After : May  2 02:31:31 2027 GMT
        Subject: CN=F62B2ACC9630618CD3F86F5C200E32F86D5DDCDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:4d:ae:10:13:c3:53:91:49:4b:23:e3:2c:
                    27:68:2b:97:e8:52:01:da:ea:c3:c2:5d:56:22:34:
                    31:2d:6c:06:c9:0c:98:0b:99:a2:5d:da:a5:9f:87:
                    43:a8:32:a3:3f:48:d0:92:80:90:b1:41:8f:17:99:
                    bc:3a:64:64:44:6f:ae:97:9b:58:ca:c2:2e:00:ee:
                    f3:ee:37:88:55:63:0f:36:ba:2b:43:3f:ec:ff:c7:
                    77:fe:f4:09:52:a4:06:57:21:32:1f:82:12:46:0a:
                    08:13:e2:86:74:14:39:ff:42:86:df:da:3f:57:cd:
                    60:10:e2:e1:02:6e:18:68:e2:e8:14:79:d2:4b:6e:
                    d8:5b:9b:a3:f0:fd:03:8b:00:a9:29:d7:0d:3b:a5:
                    b5:f4:c7:db:16:98:9f:49:d9:b0:ee:2f:73:34:0e:
                    b5:82:e3:0c:b6:26:06:9b:6c:21:82:51:4e:68:49:
                    ff:4c:a5:4f:4a:7e:70:83:f3:15:70:c4:d2:a4:71:
                    30:61:c2:5e:36:d7:c9:b6:b3:35:26:9f:df:15:b1:
                    9c:47:c4:0d:e2:56:a4:76:66:30:01:f1:ff:84:d1:
                    30:a6:26:cc:ca:35:6b:56:4a:36:ec:81:f7:4b:6c:
                    96:07:02:a2:82:94:d6:21:8c:a5:7c:09:5d:3f:a0:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2B:2A:CC:96:30:61:8C:D3:F8:6F:5C:20:0E:32:F8:6D:5D:DC:DF
            X509v3 Authority Key Identifier:
                keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:1c:17:7c:d0:c8:81:ed:6a:ee:13:09:94:ec:aa:f6:90:41:
         87:3d:ab:36:bd:86:ef:84:fd:11:f6:3d:5e:ae:e8:c6:6e:b9:
         33:9f:29:eb:6d:4d:b1:b1:75:df:df:29:bb:29:e9:5b:ce:ef:
         f6:f8:ee:61:8c:ec:a7:05:7a:b3:3e:40:45:9b:b7:bd:61:c4:
         3b:bd:d8:53:98:67:45:d3:0e:e3:a0:ef:ec:73:ce:69:de:b5:
         18:3c:26:40:58:7a:dc:e9:e4:b0:36:79:42:09:67:d0:07:57:
         f1:ef:e4:06:64:63:78:7f:07:a1:96:c0:7d:76:2a:7c:d2:58:
         87:b3:55:aa:29:b0:a6:10:1d:28:07:92:8b:9c:61:83:9e:8d:
         bc:2b:5e:2c:90:2f:a0:ed:c5:39:dc:23:1b:18:81:d3:b6:2b:
         4a:b4:fb:a8:ae:85:78:33:15:41:4d:b5:a1:5e:ed:13:94:2b:
         c0:0e:79:5c:d3:57:b4:26:7c:3c:61:09:5b:d9:64:a1:a5:35:
         07:ab:ba:4e:79:a3:27:9d:65:08:01:a0:f1:6b:c5:03:68:18:
         71:18:1e:cd:03:7e:8f:a3:07:25:33:b4:32:36:53:cf:80:b5:
         06:12:7c:51:9f:ea:e2:a6:b1:4b:82:d4:b2:97:64:07:12:d2:
         a3:e5:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:48 2026 by rpki-client