Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132312e302f32342d3234203d3e203338353133.roa
File:                     33362e33372e3132312e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          mkrmQkgwL86xbeW+q2o6iJGrar2kKUyH1ZsbTKExBr0=
Subject key identifier:   5D:E7:06:06:99:EB:83:67:D2:94:18:0E:A6:4F:42:AD:95:FC:84:A8
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       02FBE3DFE92B516D3978A06C46380621E6E03638
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132312e302f32342d3234203d3e203338353133.roa
Signing time:             Sun 03 May 2026 02:33:58 +0000
ROA not before:           Sun 03 May 2026 02:28:58 +0000
ROA not after:            Sun 02 May 2027 02:33:58 +0000
asID:                     38513
IP address blocks:        36.37.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fb:e3:df:e9:2b:51:6d:39:78:a0:6c:46:38:06:21:e6:e0:36:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:28:58 2026 GMT
            Not After : May  2 02:33:58 2027 GMT
        Subject: CN=5DE7060699EB8367D294180EA64F42AD95FC84A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:69:3c:27:c0:e8:f5:e5:8e:23:7b:51:1d:
                    48:9c:59:f1:13:a5:dc:54:55:2c:75:10:04:06:8f:
                    bd:5b:ed:18:d2:e3:09:0f:73:ab:3f:00:9b:89:90:
                    1d:fc:a3:21:03:fc:c7:f4:6b:4c:ab:0d:f4:d5:d2:
                    65:bf:bf:1e:c0:1c:85:8b:cc:ed:8e:b7:73:c0:6e:
                    2f:65:0d:7a:e1:ca:2f:41:a9:ef:14:61:3c:64:e9:
                    1e:1c:91:bd:bb:43:e6:8b:a9:31:9e:a8:ea:f6:22:
                    71:36:b8:fd:6c:98:04:2f:27:fe:1a:51:e9:21:3e:
                    f2:b8:f3:a8:b7:b5:85:dd:43:2c:b4:48:3f:20:cf:
                    4d:3f:7e:61:3a:73:9d:65:b1:66:ca:0b:9c:3a:86:
                    bc:15:e6:83:2c:70:07:bc:0b:3f:95:b2:5d:05:e8:
                    d6:b8:cc:06:42:bc:28:a1:a7:bf:b2:f1:91:48:90:
                    37:be:c3:80:44:fa:9b:43:9d:44:7c:49:59:0d:6e:
                    3d:7b:4c:3c:8b:48:2e:8b:4e:00:9a:07:44:77:a7:
                    aa:82:ea:9b:84:75:eb:66:3a:a1:ad:0b:d6:2d:bb:
                    95:a8:b8:c1:0a:20:77:40:3a:fb:f3:45:55:7d:a7:
                    2c:47:53:81:26:75:48:b9:43:f1:66:e8:1f:5c:b7:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E7:06:06:99:EB:83:67:D2:94:18:0E:A6:4F:42:AD:95:FC:84:A8
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132312e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:1e:ed:83:4e:ed:f5:44:5c:72:80:7c:ff:28:d1:90:33:b0:
         57:c4:3c:98:19:55:06:0d:7e:8c:45:63:4f:b5:7e:8b:59:79:
         31:48:72:bd:f2:66:4d:c7:47:05:aa:9c:60:10:27:05:f6:7f:
         f9:d5:35:3f:88:e6:57:bf:e1:7d:ab:5e:eb:d3:ed:7a:58:30:
         3a:2b:51:71:07:39:6b:e5:db:0b:e7:96:a2:4d:4d:44:99:c7:
         ce:49:64:46:ed:4d:4c:66:60:71:3e:ba:02:60:94:4a:6e:cf:
         03:4a:b3:e7:5d:56:fb:d1:46:f1:30:78:69:c9:c1:4a:88:e6:
         75:f7:a9:a7:5d:e7:74:a7:52:87:6b:9a:b5:bd:03:02:73:0a:
         f2:c8:eb:d1:82:82:ce:60:f8:16:78:af:5b:69:06:ea:ad:53:
         98:25:06:a6:a0:97:f1:41:73:b1:00:3e:11:4b:f7:e5:02:8b:
         cd:cb:c3:71:b7:8e:da:ab:cb:67:f4:2d:c6:27:40:63:e9:a2:
         0e:4d:9b:ac:58:a9:af:cf:4f:40:8c:21:c1:33:bd:27:32:5f:
         07:5a:52:98:13:c2:f5:b7:8e:12:cf:36:f4:c3:bf:a7:94:31:
         e1:cc:44:10:c1:8a:5c:04:d1:dc:af:94:6d:5e:86:a8:f8:8d:
         2f:d9:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:00 2026 by rpki-client