Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/33362e35302e39362e302f32342d3234203d3e20313532333536.roa
File:                     33362e35302e39362e302f32342d3234203d3e20313532333536.roa (raw, json)
Hash identifier:          WdJUD9VymB093sIE0zYyqec++4X5oG27MXfWK367p8g=
Subject key identifier:   4B:8E:36:93:50:7E:32:04:51:01:D1:90:3D:87:F8:2C:F5:6A:D8:65
Certificate issuer:       /CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E
Certificate serial:       06408B659C538032CFAA88467869AF785A1AE78A
Authority key identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/33362e35302e39362e302f32342d3234203d3e20313532333536.roa
Signing time:             Sun 03 May 2026 02:36:53 +0000
ROA not before:           Sun 03 May 2026 02:31:53 +0000
ROA not after:            Sun 02 May 2027 02:36:53 +0000
asID:                     152356
IP address blocks:        36.50.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl
                          rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:40:8b:65:9c:53:80:32:cf:aa:88:46:78:69:af:78:5a:1a:e7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E
        Validity
            Not Before: May  3 02:31:53 2026 GMT
            Not After : May  2 02:36:53 2027 GMT
        Subject: CN=4B8E3693507E32045101D1903D87F82CF56AD865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:aa:79:54:04:93:bd:43:b5:f7:fd:4e:58:
                    77:c3:63:0f:42:e0:85:60:31:4c:d7:b7:aa:9d:4a:
                    38:9f:8b:40:4d:51:d1:6b:64:20:26:1d:ae:bf:ff:
                    35:72:90:a7:61:dc:3a:81:19:dc:45:81:a7:60:db:
                    2c:d9:db:d7:b8:55:3a:22:0c:c6:0a:51:a4:ca:13:
                    d1:75:c1:dd:3f:15:b4:19:65:b1:d9:b6:85:7f:5d:
                    89:f5:28:51:73:76:0d:e3:90:90:be:3a:e2:97:3c:
                    ea:37:43:d9:8c:6f:b8:44:6b:eb:ee:bd:f4:fb:2e:
                    c5:ec:2c:2b:31:8b:f6:cb:da:bf:f2:8f:b7:fc:d1:
                    31:e4:9e:15:b7:6c:34:f3:cd:48:b3:96:0b:be:12:
                    7a:77:3d:a8:55:59:84:47:9f:6a:aa:fc:f0:13:18:
                    f0:4a:70:b8:01:80:94:65:23:cf:be:ef:55:ad:63:
                    cd:53:4d:26:c1:62:f9:98:2e:12:65:95:15:fd:c1:
                    81:93:72:6c:e6:3c:8a:c8:37:4e:ec:56:9c:bc:9c:
                    cf:f6:69:62:06:cc:1a:2d:f5:20:41:06:2d:ce:bc:
                    13:b0:c6:2a:70:f3:6c:af:e7:c3:8a:53:cb:e0:a5:
                    d4:b3:5a:d2:db:89:72:b2:cc:3b:62:e7:cc:11:6c:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8E:36:93:50:7E:32:04:51:01:D1:90:3D:87:F8:2C:F5:6A:D8:65
            X509v3 Authority Key Identifier:
                keyid:9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/33362e35302e39362e302f32342d3234203d3e20313532333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:d4:2e:15:e8:37:00:42:c9:76:55:c3:13:b7:7e:a8:6d:
         31:94:d6:db:9a:c0:c8:af:6b:66:04:65:86:41:45:35:d9:55:
         62:e4:b7:b8:35:64:c6:dc:e9:ec:a4:7a:63:d2:a2:22:b9:c9:
         1e:32:0d:5c:79:86:32:9b:91:b8:40:c0:4f:b4:57:30:a5:a8:
         9a:1f:d0:3c:0c:f4:a3:62:9b:d2:60:e0:35:78:15:f1:d0:8b:
         67:03:63:d6:ec:8a:74:17:10:39:0d:e1:13:47:08:b0:dc:0b:
         bd:e0:1f:75:a1:0f:0d:96:56:90:ce:3d:87:03:6d:65:09:06:
         45:8d:1f:87:36:7f:1f:c7:cf:ed:b5:5a:b0:52:b9:0c:34:c4:
         26:aa:76:9c:f2:4e:46:f6:52:fe:b1:76:2d:fb:9d:8f:97:f8:
         59:e5:46:9a:4b:30:01:e4:7c:53:27:15:be:09:d4:81:bc:fe:
         1e:57:a4:f7:6e:b4:39:73:74:4c:fe:3c:67:ee:97:63:fc:9b:
         c8:99:dd:3b:60:48:43:00:ac:99:54:c0:28:71:ef:07:e3:36:
         19:ef:15:0d:ed:43:f7:b8:c6:03:9d:85:81:36:6b:41:d2:31:
         61:d9:ff:31:68:51:5c:9b:dc:49:c7:eb:11:d2:c4:56:3c:50:
         9b:d8:0c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:38 2026 by rpki-client