Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132302e302f32342d3234203d3e203338353133.roa
File:                     33362e33372e3132302e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          OnqFY4cXr8RFS2caorgMP3DdTGQyrYKCJDLBQwCeM0Y=
Subject key identifier:   C0:F7:6B:3A:E1:FF:31:CE:42:7F:B8:79:B5:E1:4F:F2:28:80:E1:E8
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       71855CE41FEFB5A8B66AE2E481A5084E36DF4E03
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132302e302f32342d3234203d3e203338353133.roa
Signing time:             Sun 03 May 2026 02:34:00 +0000
ROA not before:           Sun 03 May 2026 02:29:00 +0000
ROA not after:            Sun 02 May 2027 02:34:00 +0000
asID:                     38513
IP address blocks:        36.37.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:85:5c:e4:1f:ef:b5:a8:b6:6a:e2:e4:81:a5:08:4e:36:df:4e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:00 2026 GMT
            Not After : May  2 02:34:00 2027 GMT
        Subject: CN=C0F76B3AE1FF31CE427FB879B5E14FF22880E1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:4c:dd:92:e2:8e:f0:08:fe:01:6b:8d:cc:
                    6b:84:92:24:e5:62:b7:ed:7a:41:97:eb:4f:34:b4:
                    d4:19:a8:84:e1:73:0c:8c:2f:dd:69:f7:dd:7d:c1:
                    2b:e6:ee:63:23:ad:27:e7:87:cd:a7:05:c6:14:aa:
                    0b:59:aa:d7:f1:5a:43:92:69:a4:30:98:68:92:9d:
                    48:9e:ee:1c:1f:fc:72:ca:9f:4f:52:73:5b:60:f2:
                    96:a4:e3:16:c3:97:5f:d0:dc:51:9e:6f:d4:69:bd:
                    d4:13:34:f2:71:1f:56:0f:2a:ec:cb:4e:b9:33:7b:
                    59:bf:1f:5d:11:55:03:e3:1b:98:d6:41:97:7c:43:
                    85:7f:9f:08:df:25:9d:f8:6a:0e:5f:55:3b:8d:d0:
                    b4:2a:00:3a:b9:7a:0a:73:0e:ac:74:52:7e:a3:2b:
                    32:c1:cc:a5:2e:14:12:92:b0:4a:03:b7:eb:8b:43:
                    a7:aa:67:24:96:81:22:d4:44:97:98:64:2a:48:97:
                    db:32:48:59:9f:28:05:97:b5:5a:49:6d:43:a8:fd:
                    7f:a9:b3:8f:c6:80:92:56:a3:10:6d:34:b5:a6:6c:
                    d5:37:36:75:ad:31:10:9b:e2:28:31:6c:14:da:2f:
                    3b:a7:b6:77:34:17:af:a7:7e:30:19:c2:d4:d1:67:
                    e3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:6B:3A:E1:FF:31:CE:42:7F:B8:79:B5:E1:4F:F2:28:80:E1:E8
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132302e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:a5:95:dd:b6:fd:12:b5:2b:70:db:74:fa:0e:e9:53:3a:79:
         75:7c:a0:22:1a:ad:58:0f:a2:2c:96:d3:40:40:f1:6b:16:6a:
         ac:02:40:51:f1:96:3e:09:9a:6f:ec:7a:84:35:e6:5d:e9:2a:
         a7:00:07:02:a3:f8:ec:de:0a:9b:fa:ea:f3:51:c2:f1:18:9c:
         21:99:27:c3:85:5a:2e:cb:b7:65:34:80:5e:37:47:23:e3:cc:
         e6:bc:1e:2e:55:1d:41:d2:35:09:97:c3:64:52:bb:31:de:cb:
         4a:a9:1d:af:19:25:09:37:e0:92:ee:83:04:80:73:97:c0:22:
         73:39:b9:0d:b6:ab:6f:8b:cc:b0:74:81:bc:e6:04:f0:98:41:
         e5:bc:ad:4a:68:88:a5:d3:a2:54:95:3f:87:2e:1d:56:39:42:
         2c:6d:65:04:cb:78:06:54:ba:a9:5b:8f:7f:98:b3:a2:76:aa:
         1e:99:7a:56:1a:04:d0:a1:c6:d5:dc:ee:f8:20:15:2b:81:69:
         79:42:e8:11:38:3d:73:a7:40:64:01:85:90:10:9b:c3:2a:ed:
         bb:8a:29:73:fc:76:5f:ae:30:dd:38:2f:3a:a7:69:69:e3:a4:
         51:0d:f4:fe:9c:aa:6a:06:93:66:b1:7d:ea:43:9e:be:20:f1:
         22:38:89:e3
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUcYVc5B/vtai2auLkgaUITjbfTgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU1MjhCMTg4MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1
OTZCM0UwMTAeFw0yNjA1MDMwMjI5MDBaFw0yNzA1MDIwMjM0MDBaMDMxMTAvBgNV
BAMTKEMwRjc2QjNBRTFGRjMxQ0U0MjdGQjg3OUI1RTE0RkYyMjg4MEUxRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/0zdkuKO8Aj+AWuNzGuEkiTl
YrftekGX6080tNQZqIThcwyML91p9919wSvm7mMjrSfnh82nBcYUqgtZqtfxWkOS
aaQwmGiSnUie7hwf/HLKn09Sc1tg8pak4xbDl1/Q3FGeb9RpvdQTNPJxH1YPKuzL
Trkze1m/H10RVQPjG5jWQZd8Q4V/nwjfJZ34ag5fVTuN0LQqADq5egpzDqx0Un6j
KzLBzKUuFBKSsEoDt+uLQ6eqZySWgSLURJeYZCpIl9sySFmfKAWXtVpJbUOo/X+p
s4/GgJJWoxBtNLWmbNU3NnWtMRCb4igxbBTaLzuntnc0F6+nfjAZwtTRZ+PnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUwPdrOuH/Mc5Cf7h5teFP8iiA4egwHwYDVR0j
BBgwFoAUxVKLGIDRo8QJ95mX5Cb5d1lrPgEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTVjZTM2ZGUtZjkyMS00Mjc0LTg0OTctMjk4N2Q5MDk1NDNlLzAvQzU1MjhCMTg4
MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1OTZCM0UwMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNTUyOEIxODgwRDFBM0M0MDlGNzk5OTdFNDI2Rjk3NzU5NkIz
RTAxLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMzMzYyZTMzMzcyZTMxMzIzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkJXgwDQYJKoZIhvcN
AQELBQADggEBAK6lld22/RK1K3DbdPoO6VM6eXV8oCIarVgPoiyW00BA8WsWaqwC
QFHxlj4Jmm/seoQ15l3pKqcABwKj+OzeCpv66vNRwvEYnCGZJ8OFWi7Lt2U0gF43
RyPjzOa8Hi5VHUHSNQmXw2RSuzHey0qpHa8ZJQk34JLugwSAc5fAInM5uQ22q2+L
zLB0gbzmBPCYQeW8rUpoiKXTolSVP4cuHVY5QixtZQTLeAZUuqlbj3+Ys6J2qh6Z
elYaBNChxtXc7vggFSuBaXlC6BE4PXOnQGQBhZAQm8Mq7buKKXP8dl+uMN04Lzqn
aWnjpFEN9P6cqmoGk2axfepDnr4g8SI4ieM=
-----END CERTIFICATE-----
Generated at Wed May 13 11:50:26 2026 by rpki-client