Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e35362e302f32332d3233203d3e203535363637.roa
File:                     34392e3135362e35362e302f32332d3233203d3e203535363637.roa (raw, json)
Hash identifier:          LXofhMEruHNZkVP/FDGdRjlE9GAdxzBp7sQ6AFEv168=
Subject key identifier:   90:0E:89:7C:68:D7:79:ED:66:89:B5:24:F5:C1:55:AD:04:FE:70:C2
Certificate issuer:       /CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0
Certificate serial:       6A29BA4940B599C4CF5FE7659D163FA1CE918819
Authority key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e35362e302f32332d3233203d3e203535363637.roa
Signing time:             Sun 03 May 2026 02:38:05 +0000
ROA not before:           Sun 03 May 2026 02:33:05 +0000
ROA not after:            Sun 02 May 2027 02:38:05 +0000
asID:                     55667
IP address blocks:        49.156.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl
                          rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:29:ba:49:40:b5:99:c4:cf:5f:e7:65:9d:16:3f:a1:ce:91:88:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0
        Validity
            Not Before: May  3 02:33:05 2026 GMT
            Not After : May  2 02:38:05 2027 GMT
        Subject: CN=900E897C68D779ED6689B524F5C155AD04FE70C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:23:99:c4:e8:f1:f0:00:97:05:26:6a:d1:
                    a8:44:ab:35:fb:70:1d:25:cf:97:0a:98:49:ad:b4:
                    f3:80:ee:de:a3:b1:9b:38:13:8f:61:b1:d5:9f:47:
                    af:37:26:f9:03:7b:ba:5d:85:43:58:89:0f:b9:3f:
                    3e:c8:84:68:1c:24:6f:41:fe:18:4f:8a:dc:01:84:
                    61:ec:9e:80:b0:8a:c2:e8:5a:04:a1:71:d6:d2:2c:
                    7e:85:7b:ba:a4:ea:7d:46:96:06:51:83:81:d6:b3:
                    97:71:0f:2e:8b:bf:f7:3c:42:98:e0:ba:db:13:39:
                    d9:8b:fa:ac:70:38:d5:ed:a4:df:50:3d:20:51:ab:
                    61:e5:2f:93:b9:91:d6:3c:f5:69:3d:dc:8d:b0:f6:
                    4b:46:85:6c:27:a4:c7:5f:20:b7:31:cc:a1:a4:f5:
                    82:8b:01:97:ec:cc:32:5a:3c:53:d7:5d:57:90:c2:
                    55:04:b7:05:eb:b7:24:7b:58:69:86:ad:4a:32:de:
                    b6:d8:1b:b0:df:b7:85:25:23:ac:7f:31:34:65:99:
                    14:0a:43:79:c5:53:18:e5:f9:92:30:35:bf:a4:5c:
                    10:75:6e:ab:c3:f0:bb:05:51:f4:4b:82:05:ad:51:
                    c5:7b:b4:e0:45:d4:f6:90:ce:23:6a:41:cf:dd:69:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0E:89:7C:68:D7:79:ED:66:89:B5:24:F5:C1:55:AD:04:FE:70:C2
            X509v3 Authority Key Identifier:
                keyid:95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e35362e302f32332d3233203d3e203535363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.156.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:26:16:a5:8c:55:e6:88:e8:b6:c6:69:60:a5:8c:5d:7d:
         55:c3:96:6d:4f:75:19:a0:19:be:94:6e:12:91:4d:99:29:2a:
         c7:de:f6:e8:94:d7:36:8a:1c:ac:a1:a4:10:a6:7c:18:76:d8:
         21:47:ac:01:4a:1c:71:01:a7:f1:78:c2:24:0c:7f:9e:55:26:
         ec:4b:7e:fb:5e:59:37:68:9a:2b:8c:95:00:22:21:17:0f:c6:
         3c:ca:37:a4:0f:bb:60:c6:02:1c:aa:aa:aa:ec:0c:f0:32:2d:
         25:38:c7:a5:11:82:66:ff:0e:f5:e3:76:41:02:9b:88:a4:2c:
         36:82:ff:5c:4d:41:2f:11:9f:33:fb:a5:18:6b:a9:3c:06:7b:
         1e:c3:51:75:7d:86:dc:7c:5f:e0:0d:80:39:3f:32:4d:fe:b9:
         84:d2:95:b5:da:6b:56:84:26:9b:73:02:5a:81:d8:c2:4f:42:
         d8:31:c7:d1:15:2b:9f:9f:de:f9:92:43:fe:4b:d5:79:72:7c:
         ef:a0:35:50:a7:48:bd:ef:b4:ea:9b:2f:98:32:5e:11:4a:49:
         a7:31:aa:c7:4e:2d:6f:43:b7:a4:ff:76:5e:d0:0e:82:c1:26:
         eb:03:87:9d:94:32:ab:9c:2a:92:8c:28:d1:be:2d:2f:0c:0d:
         99:5f:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:12 2026 by rpki-client