Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa
File:                     36312e382e36342e302f32302d3234203d3e2034383030.roa (raw, json)
Hash identifier:          u/3V+YUc4uTcyVtWF2imjpJ9kxtpOd7fsYnh6IgqcNs=
Subject key identifier:   E6:97:F5:2A:AE:1D:A4:FB:BC:BA:0B:95:6D:BC:03:5C:86:5B:F9:2D
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       6E5AD426EC70166B878DF99FF4DF9083E6BC36B2
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:34:01 +0000
ROA not before:           Sun 03 May 2026 02:29:01 +0000
ROA not after:            Sun 02 May 2027 02:34:01 +0000
asID:                     4800
IP address blocks:        61.8.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5a:d4:26:ec:70:16:6b:87:8d:f9:9f:f4:df:90:83:e6:bc:36:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:01 2026 GMT
            Not After : May  2 02:34:01 2027 GMT
        Subject: CN=E697F52AAE1DA4FBBCBA0B956DBC035C865BF92D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:ba:d1:7c:75:82:a2:f8:da:56:0d:05:27:
                    c9:ec:98:69:a3:4d:b4:5f:0f:97:e0:c1:e1:a3:05:
                    20:ef:a8:16:da:06:d0:22:3f:c8:31:99:80:4b:68:
                    e7:6e:f9:29:c4:7f:2d:24:03:e2:f7:7e:18:72:10:
                    97:95:c8:73:28:cb:4d:bf:0b:1e:5d:25:ad:5a:5d:
                    54:85:a0:16:3b:b4:4c:22:5c:75:e3:94:c4:74:75:
                    ba:e0:d7:1b:04:36:07:30:29:4c:bb:8a:b6:ba:b8:
                    d2:f0:43:0c:43:5d:f5:80:c4:88:a3:e3:c4:40:71:
                    2e:a3:38:cb:9d:94:8b:36:24:83:60:e5:88:6c:39:
                    f1:c3:df:f4:68:57:86:1a:15:2a:ea:1a:3e:b0:6c:
                    72:4b:d5:ba:7c:4a:6f:96:86:50:f0:f8:d9:66:e4:
                    1f:09:6d:d6:59:1f:38:25:d1:3f:b8:1e:1d:55:d3:
                    a0:ef:b3:b7:57:2a:39:ec:d1:0a:5b:6d:f0:43:6a:
                    46:5b:43:34:d4:67:e8:82:ed:80:25:58:74:92:0b:
                    f2:78:96:9a:a3:13:e1:22:a4:db:db:65:65:5c:8b:
                    09:ec:62:cd:a3:2a:cd:b7:bd:aa:31:ec:86:e4:a7:
                    0d:43:64:b5:99:f5:6f:d4:c3:ea:f5:5f:72:03:1a:
                    28:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:F5:2A:AE:1D:A4:FB:BC:BA:0B:95:6D:BC:03:5C:86:5B:F9:2D
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.8.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:62:37:8b:4e:13:f5:47:79:9a:4b:2d:d3:9e:c4:67:45:94:
         cb:04:af:5c:e3:a2:a9:2d:28:3b:04:77:a6:66:a7:45:fb:6b:
         73:a2:ca:70:be:fb:b0:df:f2:8c:12:6c:5e:19:88:dc:89:79:
         51:c9:dc:35:be:49:7f:45:d1:d4:e1:f8:6e:5e:10:32:61:af:
         bf:03:f1:b8:8c:5b:49:37:13:89:0c:b9:1e:84:2e:fc:27:9e:
         27:6f:22:5a:53:4d:02:8d:dc:5e:d8:8d:11:ca:6b:a7:d7:1c:
         b0:2f:a5:f9:85:de:e8:1e:eb:e6:a2:be:45:b1:f5:80:f7:0b:
         99:f7:93:82:98:ee:01:37:14:98:6e:b2:16:4c:bf:1c:ae:bc:
         e2:7f:6b:a2:bd:e3:0c:5a:1b:8c:03:be:48:3b:ef:7e:35:2e:
         34:71:ee:c1:f4:b2:c1:25:f7:3f:e8:f7:0b:a9:c8:43:30:da:
         0c:92:2c:cf:9f:39:ee:68:dd:0b:ed:a7:fd:3f:7d:7d:8b:70:
         53:ec:10:6b:e2:99:3f:b9:2f:61:d3:9e:da:b6:ef:44:01:c6:
         25:e2:88:f4:c8:ca:b8:b8:84:6f:1a:b8:10:4e:fd:f2:97:1f:
         df:82:b0:34:02:f8:11:e2:60:80:50:80:b7:23:a0:b8:ab:cf:
         38:12:a0:aa
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUblrUJuxwFmuHjfmf9N+Qg+a8NrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU1MjhCMTg4MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1
OTZCM0UwMTAeFw0yNjA1MDMwMjI5MDFaFw0yNzA1MDIwMjM0MDFaMDMxMTAvBgNV
BAMTKEU2OTdGNTJBQUUxREE0RkJCQ0JBMEI5NTZEQkMwMzVDODY1QkY5MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKubrRfHWCovjaVg0FJ8nsmGmj
TbRfD5fgweGjBSDvqBbaBtAiP8gxmYBLaOdu+SnEfy0kA+L3fhhyEJeVyHMoy02/
Cx5dJa1aXVSFoBY7tEwiXHXjlMR0dbrg1xsENgcwKUy7ira6uNLwQwxDXfWAxIij
48RAcS6jOMudlIs2JINg5YhsOfHD3/RoV4YaFSrqGj6wbHJL1bp8Sm+WhlDw+Nlm
5B8JbdZZHzgl0T+4Hh1V06Dvs7dXKjns0QpbbfBDakZbQzTUZ+iC7YAlWHSSC/J4
lpqjE+EipNvbZWVciwnsYs2jKs23vaox7Ibkpw1DZLWZ9W/Uw+r1X3IDGiiBAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQU5pf1Kq4dpPu8uguVbbwDXIZb+S0wHwYDVR0j
BBgwFoAUxVKLGIDRo8QJ95mX5Cb5d1lrPgEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTVjZTM2ZGUtZjkyMS00Mjc0LTg0OTctMjk4N2Q5MDk1NDNlLzAvQzU1MjhCMTg4
MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1OTZCM0UwMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNTUyOEIxODgwRDFBM0M0MDlGNzk5OTdFNDI2Rjk3NzU5NkIz
RTAxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTVjZTM2ZGUtZjkyMS00Mjc0LTg0
OTctMjk4N2Q5MDk1NDNlLzAvMzYzMTJlMzgyZTM2MzQyZTMwMmYzMjMwMmQzMjM0
MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD0IQDANBgkqhkiG9w0BAQsFAAOC
AQEAs2I3i04T9Ud5mkst057EZ0WUywSvXOOiqS0oOwR3pmanRftrc6LKcL77sN/y
jBJsXhmI3Il5UcncNb5Jf0XR1OH4bl4QMmGvvwPxuIxbSTcTiQy5HoQu/CeeJ28i
WlNNAo3cXtiNEcprp9ccsC+l+YXe6B7r5qK+RbH1gPcLmfeTgpjuATcUmG6yFky/
HK684n9ror3jDFobjAO+SDvvfjUuNHHuwfSywSX3P+j3C6nIQzDaDJIsz5857mjd
C+2n/T99fYtwU+wQa+KZP7kvYdOe2rbvRAHGJeKI9MjKuLiEbxq4EE798pcf34Kw
NAL4EeJggFCAtyOguKvPOBKgqg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:11:17 2026 by rpki-client