Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e36302e302f32342d3234203d3e203535363637.roa
File:                     34392e3135362e36302e302f32342d3234203d3e203535363637.roa (raw, json)
Hash identifier:          dUcYMxyxr0kR8WWHVwUrDj577thKceAoVrMPKHmFvPk=
Subject key identifier:   65:D5:92:96:44:82:F3:D8:A7:FE:57:D7:DB:EA:B3:67:62:F5:4E:61
Certificate issuer:       /CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0
Certificate serial:       59C6E2564D9DB6EA43C6010DDF9250DB90B719A4
Authority key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e36302e302f32342d3234203d3e203535363637.roa
Signing time:             Sun 03 May 2026 02:38:04 +0000
ROA not before:           Sun 03 May 2026 02:33:04 +0000
ROA not after:            Sun 02 May 2027 02:38:04 +0000
asID:                     55667
IP address blocks:        49.156.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl
                          rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c6:e2:56:4d:9d:b6:ea:43:c6:01:0d:df:92:50:db:90:b7:19:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0
        Validity
            Not Before: May  3 02:33:04 2026 GMT
            Not After : May  2 02:38:04 2027 GMT
        Subject: CN=65D592964482F3D8A7FE57D7DBEAB36762F54E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:14:ea:60:5f:7e:05:32:24:7c:6e:8d:62:
                    d3:d8:97:09:54:34:ef:06:c7:0f:ad:ed:5b:d9:c8:
                    18:f4:24:cd:aa:aa:78:95:ec:da:a6:cc:5b:36:d2:
                    84:1f:cc:c0:4f:94:5f:a6:31:70:4b:9e:82:6c:7e:
                    e3:a6:ea:ef:44:03:93:53:ae:39:71:97:4f:c3:02:
                    6f:ee:9c:5a:65:9e:86:d4:4f:df:2f:ef:37:f5:3d:
                    74:88:8c:22:4a:89:06:77:aa:8c:4b:03:8c:cc:a4:
                    f4:b0:47:97:06:5e:e7:b7:7b:da:92:c3:8d:b4:41:
                    58:5d:51:20:99:ff:de:13:a1:b1:17:ca:c9:48:a6:
                    41:56:4c:f5:63:6a:04:54:4f:04:81:c5:72:7f:eb:
                    e2:49:83:2b:7d:fb:27:8a:81:61:20:2c:8d:18:77:
                    4b:44:12:db:21:8a:7d:d4:0b:d5:9a:f3:4b:8d:7f:
                    f5:68:31:33:65:16:98:fd:fb:eb:ea:5d:90:93:82:
                    59:49:9a:69:7f:19:c1:43:ea:d9:70:53:93:cc:11:
                    ff:52:aa:85:4e:63:0c:8f:86:01:73:b5:05:53:55:
                    9b:34:31:7c:f4:dd:58:9e:8c:1b:0b:12:d3:2f:54:
                    37:28:0d:e0:a4:25:f4:a2:a4:94:06:37:1c:15:6e:
                    44:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D5:92:96:44:82:F3:D8:A7:FE:57:D7:DB:EA:B3:67:62:F5:4E:61
            X509v3 Authority Key Identifier:
                keyid:95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e36302e302f32342d3234203d3e203535363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.156.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:18:4b:76:88:d8:5b:b1:b8:11:3f:db:19:ec:30:fb:ed:fa:
         dc:18:85:ca:96:e5:8f:84:58:36:76:62:e4:34:2d:80:de:e8:
         34:fd:28:20:e8:e0:61:9d:fe:cc:77:c1:a8:65:c9:02:9e:f7:
         d5:c0:86:69:2c:53:a9:41:99:dd:88:c0:16:a8:41:e8:9e:78:
         6a:69:ae:53:7d:54:34:32:32:8f:35:fd:32:65:44:71:ec:fa:
         87:d1:4f:15:31:5f:ae:e3:57:a6:63:a1:da:da:78:98:6d:49:
         d5:f6:f7:fa:81:56:ba:71:12:1d:63:f8:88:d0:9d:f4:d6:f0:
         f3:15:5a:24:1a:50:b0:e2:b9:82:23:18:14:5a:e4:7f:78:6f:
         03:87:28:5c:90:68:e4:8c:55:e4:3b:a1:4b:41:8e:03:df:da:
         44:3c:23:c3:43:57:c8:0a:5c:d5:45:29:01:9f:b4:4f:c6:55:
         14:e6:ba:8f:82:7c:43:54:7c:f2:36:95:34:2b:6b:35:54:6a:
         cb:a1:ea:97:3e:06:2c:9f:42:ac:34:24:44:0e:96:8d:52:05:
         e0:c1:44:57:a9:02:8a:9d:f1:7d:ba:17:02:05:71:3b:ac:12:
         e6:b2:08:4f:d6:3b:d0:24:72:4f:56:d8:1f:5f:3c:74:85:88:
         ee:81:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:10 2026 by rpki-client