Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa
File:                     34332e3233302e3135342e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          2Ev6HDikBh2Venhn8tcVx/c4kvr6/yn4RJxoentdMdc=
Subject key identifier:   51:B7:CB:C3:A3:59:7E:A0:A7:F7:1C:B6:FE:35:9C:F9:9E:C2:EE:3F
Certificate issuer:       /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial:       4AA392D2CBC1CA9A018CD639EC509EAB7B4605D5
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa
Signing time:             Sun 03 May 2026 02:39:05 +0000
ROA not before:           Sun 03 May 2026 02:34:05 +0000
ROA not after:            Sun 02 May 2027 02:39:05 +0000
asID:                     45725
IP address blocks:        43.230.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
                          rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a3:92:d2:cb:c1:ca:9a:01:8c:d6:39:ec:50:9e:ab:7b:46:05:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
        Validity
            Not Before: May  3 02:34:05 2026 GMT
            Not After : May  2 02:39:05 2027 GMT
        Subject: CN=51B7CBC3A3597EA0A7F71CB6FE359CF99EC2EE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:64:8e:c2:32:7c:e1:0c:b6:84:a4:35:21:
                    17:63:21:4e:87:67:60:a1:83:d9:fa:90:e4:80:c8:
                    a3:d6:b8:47:52:de:94:5c:e1:ec:09:ea:ae:e7:02:
                    f2:3b:ea:02:21:86:1a:53:6c:e1:c5:a9:83:5c:e3:
                    b1:b5:28:36:d4:40:c1:01:06:4b:b1:4d:88:8a:cb:
                    e8:4a:fe:93:e6:79:93:45:ae:0a:ae:a5:15:97:63:
                    37:84:f3:96:2d:7e:a9:0b:25:ef:38:62:a4:31:91:
                    06:eb:5b:43:7f:a8:cc:8a:d7:dc:b2:da:a3:69:5b:
                    25:a6:9e:43:ad:85:90:fe:ad:a1:a3:d7:16:b3:e1:
                    1c:7b:0b:fa:fc:42:5d:d9:90:cb:b0:1a:b8:50:45:
                    c4:2c:29:b2:29:a2:82:e2:51:db:3c:6a:6b:c6:b3:
                    ee:35:08:2d:5e:3f:0f:1d:c0:06:d5:ed:24:66:fe:
                    51:56:0e:00:23:99:da:b3:af:7d:e2:d4:c5:af:77:
                    d7:f9:82:33:a0:d0:22:82:9e:f3:76:6f:25:48:86:
                    f0:b8:d3:84:5d:c4:58:a4:12:c8:8b:6b:15:f7:db:
                    04:55:7e:03:a8:56:76:6d:da:43:8a:6f:a2:5a:38:
                    5e:07:9b:0c:54:62:68:30:c1:08:d1:20:7f:35:07:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B7:CB:C3:A3:59:7E:A0:A7:F7:1C:B6:FE:35:9C:F9:9E:C2:EE:3F
            X509v3 Authority Key Identifier:
                keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:44:e5:d8:e8:0b:b6:aa:37:a0:d5:45:e5:7b:41:69:3e:6e:
         94:f0:fd:53:1c:90:4e:d5:41:3c:47:ee:b1:14:04:91:1a:15:
         46:53:50:b1:56:1a:b7:a5:6f:e9:48:e2:81:91:9c:37:87:60:
         06:34:05:39:0f:56:8b:86:e1:5e:1e:33:b0:20:a9:18:0b:62:
         35:b6:c9:63:ce:72:3e:9a:55:9e:99:67:39:a2:73:e6:36:f1:
         e5:81:2e:6a:b7:14:3f:6d:9c:50:06:7a:be:fb:5d:44:f0:e0:
         50:1b:2d:b8:c2:6d:38:ca:4b:7d:42:41:5e:33:aa:af:54:f7:
         64:a8:2f:40:f0:1c:e9:55:e5:a8:50:bf:f3:fa:5f:a3:55:a7:
         91:b5:b3:00:77:59:a2:08:14:24:ba:26:ab:3f:cc:19:0b:ff:
         c0:d0:09:12:2e:85:ac:c3:09:c9:a7:38:37:32:b8:42:fd:de:
         f2:06:3a:69:11:8d:03:b1:ae:9f:17:20:fc:1b:95:0b:0d:f2:
         cb:d5:5f:3c:a9:18:60:da:ae:19:88:dc:2e:7d:b4:65:73:1f:
         82:3c:b6:b3:fd:d0:96:a9:aa:72:9c:8f:93:b7:5d:a4:05:ad:
         12:20:e0:43:ef:8c:ec:ba:ae:0d:2d:17:37:7d:cc:4b:75:06:
         5a:ac:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:04 2026 by rpki-client