Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36362e302f32342d3234203d3e20313331373138.roa
File:                     33362e33372e36362e302f32342d3234203d3e20313331373138.roa (raw, json)
Hash identifier:          KyNkP5cl4LQ8ysprqyY5wf+6No4xpjxc8VYDSxIg1wc=
Subject key identifier:   65:78:31:C0:71:56:89:29:DB:44:2E:44:B5:0A:62:2B:60:3A:82:77
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       418BA9AF4A3B31E7DF886284DB16BA98C63AB965
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36362e302f32342d3234203d3e20313331373138.roa
Signing time:             Sun 03 May 2026 02:34:06 +0000
ROA not before:           Sun 03 May 2026 02:29:06 +0000
ROA not after:            Sun 02 May 2027 02:34:06 +0000
asID:                     131718
IP address blocks:        36.37.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8b:a9:af:4a:3b:31:e7:df:88:62:84:db:16:ba:98:c6:3a:b9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:06 2026 GMT
            Not After : May  2 02:34:06 2027 GMT
        Subject: CN=657831C071568929DB442E44B50A622B603A8277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:f3:12:44:94:42:32:46:b9:23:d6:5b:eb:
                    3a:cc:06:9b:8c:78:73:ce:c9:18:22:3c:00:ce:3a:
                    b8:61:39:6e:2c:59:82:a5:75:da:e9:27:36:de:91:
                    00:80:00:fa:05:f7:48:89:f0:9c:8c:65:e2:25:f7:
                    74:e5:b3:e3:19:9a:44:03:3c:b2:99:28:33:f8:ee:
                    7f:cc:d5:30:d7:19:d4:25:43:b8:86:ab:c2:52:54:
                    18:31:ce:3f:26:31:f2:0b:42:ac:c6:57:3f:47:0f:
                    f7:82:66:28:f4:5c:4d:f5:27:ae:6c:3c:ef:19:31:
                    66:41:9b:5e:36:42:10:78:f6:19:03:22:32:7e:17:
                    57:8e:1a:c3:e1:fc:fc:7e:fb:0b:49:90:46:99:ed:
                    99:dd:81:8c:9d:c5:87:72:f9:38:3a:51:e7:13:04:
                    cf:a6:1e:df:6e:b1:39:d9:7c:93:13:4f:43:4f:2b:
                    ae:e0:71:66:8a:53:fe:25:f1:ba:a7:03:c6:de:49:
                    07:46:d5:74:c0:43:75:cb:34:09:b1:9f:20:69:71:
                    1d:3c:da:f2:d2:fd:c6:de:59:ec:fd:6f:09:04:b7:
                    80:3b:22:78:a6:a0:7c:5a:dc:63:53:63:12:dc:22:
                    61:55:af:cc:6c:46:bf:78:80:4d:51:c6:d4:1f:e2:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:78:31:C0:71:56:89:29:DB:44:2E:44:B5:0A:62:2B:60:3A:82:77
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36362e302f32342d3234203d3e20313331373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:9a:5f:8d:69:fe:a3:c0:c5:df:34:6a:e3:cd:58:5e:80:2c:
         aa:be:0d:8b:3d:51:99:3b:55:43:85:43:d4:97:72:92:e1:d0:
         5e:2f:07:2c:82:7a:22:87:60:98:f6:1b:bf:87:a9:28:01:5c:
         91:b1:7f:29:21:b1:24:35:43:ac:00:46:ca:82:ad:65:66:43:
         7b:ad:3c:68:3d:22:b2:81:f6:f4:a4:eb:57:01:7e:7e:3d:db:
         59:5f:1e:23:02:d4:8a:91:8d:01:27:75:d9:51:04:ab:e2:e8:
         4b:84:74:55:1a:6a:33:4d:f7:62:7c:af:d1:2e:07:82:ac:23:
         a7:59:f7:64:c5:b5:d3:6c:4f:04:56:1e:8a:50:a4:c3:bd:8a:
         36:23:6e:2e:28:84:b3:aa:81:0f:9c:7c:fa:55:ea:94:13:df:
         84:00:4a:ed:51:04:45:e2:cd:12:4c:7b:d5:b7:cb:46:c1:1e:
         99:01:15:92:3f:26:e2:c5:d3:fc:bd:a9:80:e8:f2:75:62:fd:
         ab:8a:ff:4c:d0:d7:7f:1b:fc:f1:44:c5:bd:48:2f:72:02:1d:
         00:78:b7:9c:42:a5:f3:56:2d:c9:5f:c0:2e:bd:4e:8b:fe:ea:
         89:65:e2:b2:8f:51:19:5b:33:f6:74:e2:9f:79:44:c7:ed:43:
         b9:fe:79:56
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQYupr0o7MeffiGKE2xa6mMY6uWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU1MjhCMTg4MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1
OTZCM0UwMTAeFw0yNjA1MDMwMjI5MDZaFw0yNzA1MDIwMjM0MDZaMDMxMTAvBgNV
BAMTKDY1NzgzMUMwNzE1Njg5MjlEQjQ0MkU0NEI1MEE2MjJCNjAzQTgyNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lvMSRJRCMka5I9Zb6zrMBpuM
eHPOyRgiPADOOrhhOW4sWYKlddrpJzbekQCAAPoF90iJ8JyMZeIl93Tls+MZmkQD
PLKZKDP47n/M1TDXGdQlQ7iGq8JSVBgxzj8mMfILQqzGVz9HD/eCZij0XE31J65s
PO8ZMWZBm142QhB49hkDIjJ+F1eOGsPh/Px++wtJkEaZ7ZndgYydxYdy+Tg6UecT
BM+mHt9usTnZfJMTT0NPK67gcWaKU/4l8bqnA8beSQdG1XTAQ3XLNAmxnyBpcR08
2vLS/cbeWez9bwkEt4A7InimoHxa3GNTYxLcImFVr8xsRr94gE1RxtQf4thfAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUZXgxwHFWiSnbRC5EtQpiK2A6gncwHwYDVR0j
BBgwFoAUxVKLGIDRo8QJ95mX5Cb5d1lrPgEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTVjZTM2ZGUtZjkyMS00Mjc0LTg0OTctMjk4N2Q5MDk1NDNlLzAvQzU1MjhCMTg4
MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1OTZCM0UwMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNTUyOEIxODgwRDFBM0M0MDlGNzk5OTdFNDI2Rjk3NzU5NkIz
RTAxLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMzMzYyZTMzMzcyZTM2MzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzEzNzMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkJUIwDQYJKoZIhvcN
AQELBQADggEBAIeaX41p/qPAxd80auPNWF6ALKq+DYs9UZk7VUOFQ9SXcpLh0F4v
ByyCeiKHYJj2G7+HqSgBXJGxfykhsSQ1Q6wARsqCrWVmQ3utPGg9IrKB9vSk61cB
fn4921lfHiMC1IqRjQEnddlRBKvi6EuEdFUaajNN92J8r9EuB4KsI6dZ92TFtdNs
TwRWHopQpMO9ijYjbi4ohLOqgQ+cfPpV6pQT34QASu1RBEXizRJMe9W3y0bBHpkB
FZI/JuLF0/y9qYDo8nVi/auK/0zQ138b/PFExb1IL3ICHQB4t5xCpfNWLclfwC69
Tov+6oll4rKPURlbM/Z04p95RMftQ7n+eVY=
-----END CERTIFICATE-----
Generated at Wed May 13 12:18:05 2026 by rpki-client