Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f32342d3234203d3e2034383030.roa
File:                     33362e33372e36342e302f32342d3234203d3e2034383030.roa (raw, json)
Hash identifier:          PA39TYh6P41nbjHtJH0d1GIAsFc6B+1kH+m4xb6uCPI=
Subject key identifier:   BF:8F:37:01:1F:5F:30:8F:7A:CA:20:88:93:00:AD:01:45:DD:4A:ED
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       47A1A17155C7074CEF1EF2930E8CDFCE4F909872
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f32342d3234203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:34:08 +0000
ROA not before:           Sun 03 May 2026 02:29:08 +0000
ROA not after:            Sun 02 May 2027 02:34:08 +0000
asID:                     4800
IP address blocks:        36.37.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a1:a1:71:55:c7:07:4c:ef:1e:f2:93:0e:8c:df:ce:4f:90:98:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:08 2026 GMT
            Not After : May  2 02:34:08 2027 GMT
        Subject: CN=BF8F37011F5F308F7ACA20889300AD0145DD4AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:cf:c5:da:d0:26:a6:2e:a7:52:54:a8:cb:
                    03:fa:df:3a:9c:62:4f:03:48:f9:a9:7b:ea:60:2f:
                    e1:42:b4:ac:ab:02:16:2d:1b:bb:aa:ec:a2:70:b4:
                    38:b0:b6:6d:1d:e1:ef:ff:31:de:5f:b1:c3:a3:6c:
                    00:13:74:dd:18:3e:9a:01:91:4a:d6:a1:00:10:60:
                    e2:76:2d:f3:eb:bc:f6:84:dd:60:d2:a8:c3:3b:d5:
                    c9:0b:53:c9:b9:85:f6:4e:39:13:d8:a4:8c:d3:9a:
                    f4:1f:7e:47:a1:a1:96:de:a2:f1:27:a1:90:a6:ff:
                    e2:96:36:98:04:af:81:9a:de:52:76:dd:e0:8e:5e:
                    01:a8:25:5a:d8:a0:e4:1b:da:73:d5:f5:05:38:95:
                    a1:da:17:a1:7b:4f:d9:a4:39:ff:6e:0f:2d:3f:53:
                    22:9a:db:80:3c:72:5c:67:47:52:c3:f7:b2:81:40:
                    3b:39:a9:8d:44:ef:96:3d:fb:a2:e8:e8:91:0a:62:
                    6a:81:88:b3:5d:51:18:1a:c8:0b:da:3f:48:d0:90:
                    34:e6:46:42:73:f5:d6:7e:35:bd:75:52:0f:a8:03:
                    39:d5:a9:b7:7f:2e:d4:21:ea:c0:cf:a4:50:4e:bb:
                    ca:bc:6f:d1:d1:b7:ea:1a:30:f2:a8:b8:f6:40:96:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8F:37:01:1F:5F:30:8F:7A:CA:20:88:93:00:AD:01:45:DD:4A:ED
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f32342d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:ea:c2:5c:6a:77:45:1f:0f:21:d3:aa:bc:fa:59:a4:1c:
         91:61:c9:80:12:0a:0c:88:e4:e6:a9:4c:f1:c0:aa:db:ed:6e:
         fc:b9:75:a5:72:1c:d0:f6:f3:be:4c:a0:10:b1:82:de:ce:3f:
         79:5e:0a:c5:dd:e9:71:48:36:6b:86:07:e8:16:d6:54:b9:42:
         d3:44:71:26:f9:81:ff:0d:4f:5c:dc:e4:e6:af:eb:bf:5b:41:
         a0:61:0f:89:56:ce:9a:be:d4:fc:5f:06:89:37:c2:7c:24:c9:
         3c:d7:2b:b8:90:12:82:d1:f1:37:f7:7a:36:e5:23:fe:c2:d2:
         29:46:f2:3e:39:5c:36:59:e2:55:2a:78:a5:c4:9a:ea:73:70:
         32:5f:69:de:26:1f:46:6e:98:f8:08:a4:43:8d:42:a0:0f:82:
         19:1a:15:79:60:d9:72:4a:bb:da:69:18:1a:c7:98:88:a8:f6:
         c2:01:9a:d0:94:79:f2:c9:5a:9b:c8:fb:1e:de:d2:d4:76:dc:
         f3:d2:cb:18:c7:70:1f:22:03:2d:2e:4d:7b:2d:70:c1:81:19:
         8a:21:db:a0:55:5e:03:49:ca:75:f8:88:52:15:96:2c:f4:19:
         8e:61:be:08:a6:b4:c2:5d:aa:4a:f5:19:c3:fd:c4:44:b5:b0:
         c3:7b:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:10 2026 by rpki-client