Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa
File:                     34352e36342e3235322e302f32322d3234203d3e203435323934.roa (raw, json)
Hash identifier:          ziG1A6Oi8LeUJ0pFcFc03n/VrStN2lfnk92bw36q/aI=
Subject key identifier:   CE:27:CC:6F:C3:E8:35:0B:FF:DA:93:9A:59:2B:02:02:3D:90:C6:23
Certificate issuer:       /CN=06083035B4010CEC337EE26F5EA15A04DD209219
Certificate serial:       6CDBA974556BD2D9058A721E9F489FC4B9B61D15
Authority key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa
Signing time:             Sun 03 May 2026 02:39:19 +0000
ROA not before:           Sun 03 May 2026 02:34:19 +0000
ROA not after:            Sun 02 May 2027 02:39:19 +0000
asID:                     45294
IP address blocks:        45.64.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
                          rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:db:a9:74:55:6b:d2:d9:05:8a:72:1e:9f:48:9f:c4:b9:b6:1d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06083035B4010CEC337EE26F5EA15A04DD209219
        Validity
            Not Before: May  3 02:34:19 2026 GMT
            Not After : May  2 02:39:19 2027 GMT
        Subject: CN=CE27CC6FC3E8350BFFDA939A592B02023D90C623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:59:e6:8e:40:88:c0:cd:24:c1:4e:41:4e:
                    d3:2f:0a:74:b0:6a:eb:2e:c2:dc:3f:1a:cb:b0:7c:
                    94:32:9b:52:1a:94:0d:81:53:e3:7a:67:be:69:28:
                    bd:25:89:34:77:87:b3:60:65:e0:8c:11:f5:8d:05:
                    34:3f:7d:8f:ab:b1:35:1d:2c:3e:32:ba:96:04:b8:
                    6a:f3:aa:e7:3a:1a:69:d9:1c:2b:6e:5f:c1:ee:4e:
                    18:f1:11:a1:c5:d8:2e:af:97:12:ae:e4:f3:0c:37:
                    c6:92:06:f2:6d:ed:d3:6d:a8:16:db:08:5d:06:9a:
                    53:83:d0:d2:e9:8f:fe:e8:f6:f0:61:b6:20:fc:35:
                    d7:1e:ed:a0:21:de:d2:41:e2:eb:ed:ff:7b:cc:ce:
                    c5:38:9d:7c:fc:a5:8c:72:b6:64:41:87:ae:9c:5c:
                    18:d2:bb:a6:78:66:b5:09:26:b2:aa:d5:89:42:46:
                    45:15:eb:87:1a:0e:24:1d:d4:dd:3b:27:a3:4a:28:
                    30:50:9e:9b:ea:e0:eb:06:0e:0e:cf:16:0a:79:00:
                    eb:37:27:97:63:31:72:ce:6e:ce:70:75:8f:7b:c6:
                    26:a9:9d:f8:4d:f7:ed:6f:35:25:69:3b:b8:5c:13:
                    15:a6:52:f8:36:b0:ff:22:6c:c5:02:8d:4a:c0:9b:
                    20:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:27:CC:6F:C3:E8:35:0B:FF:DA:93:9A:59:2B:02:02:3D:90:C6:23
            X509v3 Authority Key Identifier:
                keyid:06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:06:60:0c:22:26:c0:a1:0f:80:85:50:df:63:79:af:db:78:
         d9:f4:0e:6a:aa:a9:7b:76:5a:e0:a7:d9:67:cf:2d:98:fb:63:
         35:33:b0:74:f0:29:7c:73:cd:f2:b8:14:16:35:c1:e4:0d:e8:
         4f:99:e0:f2:62:a8:7d:a6:79:09:84:69:b5:3b:f6:19:f7:10:
         d5:28:1c:dd:ea:39:6c:5f:90:09:92:3f:e2:eb:40:a3:46:5f:
         54:3b:82:44:b2:e0:04:2d:ba:c2:9c:76:b2:32:b9:c7:4e:17:
         ba:69:47:9e:e1:fd:83:76:79:ee:8b:ed:a4:59:a9:80:70:aa:
         ec:cd:08:c7:fb:0c:99:1e:e4:cf:d2:43:66:a9:d3:75:3a:44:
         72:f7:53:83:ff:c2:50:6c:08:b3:d0:ba:55:ca:64:2d:6f:ef:
         cb:8f:3b:bc:61:ea:eb:ad:13:0b:48:6b:3b:72:c4:34:eb:b3:
         be:bc:09:b7:c8:4f:cc:5c:29:3d:c8:10:71:23:e5:3c:d4:2c:
         9b:37:e7:d3:b6:13:b1:4e:a4:1c:c3:ca:ad:5b:f4:b1:6b:2c:
         c7:62:ea:99:4b:4a:77:46:96:87:6e:15:eb:a5:cd:35:35:45:
         69:e5:f0:6a:05:21:84:b7:ee:db:32:80:3a:c1:68:f5:e5:48:
         99:e8:12:ea
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbNupdFVr0tkFinIen0ifxLm2HRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYwODMwMzVCNDAxMENFQzMzN0VFMjZGNUVBMTVBMDRE
RDIwOTIxOTAeFw0yNjA1MDMwMjM0MTlaFw0yNzA1MDIwMjM5MTlaMDMxMTAvBgNV
BAMTKENFMjdDQzZGQzNFODM1MEJGRkRBOTM5QTU5MkIwMjAyM0Q5MEM2MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgcFnmjkCIwM0kwU5BTtMvCnSw
ausuwtw/GsuwfJQym1IalA2BU+N6Z75pKL0liTR3h7NgZeCMEfWNBTQ/fY+rsTUd
LD4yupYEuGrzquc6GmnZHCtuX8HuThjxEaHF2C6vlxKu5PMMN8aSBvJt7dNtqBbb
CF0GmlOD0NLpj/7o9vBhtiD8Ndce7aAh3tJB4uvt/3vMzsU4nXz8pYxytmRBh66c
XBjSu6Z4ZrUJJrKq1YlCRkUV64caDiQd1N07J6NKKDBQnpvq4OsGDg7PFgp5AOs3
J5djMXLObs5wdY97xiapnfhN9+1vNSVpO7hcExWmUvg2sP8ibMUCjUrAmyDnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUzifMb8PoNQv/2pOaWSsCAj2QxiMwHwYDVR0j
BBgwFoAUBggwNbQBDOwzfuJvXqFaBN0gkhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjQ4MzMwNzQtMzMwZS00YWFhLThjMDAtMDQwODkwYTcxYTExLzAvMDYwODMwMzVC
NDAxMENFQzMzN0VFMjZGNUVBMTVBMDRERDIwOTIxOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNjA4MzAzNUI0MDEwQ0VDMzM3RUUyNkY1RUExNUEwNEREMjA5
MjE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY0ODMzMDc0LTMzMGUtNGFhYS04
YzAwLTA0MDg5MGE3MWExMS8wLzM0MzUyZTM2MzQyZTMyMzUzMjJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM0MzUzMjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItQPwwDQYJKoZIhvcN
AQELBQADggEBAIQGYAwiJsChD4CFUN9jea/beNn0DmqqqXt2WuCn2WfPLZj7YzUz
sHTwKXxzzfK4FBY1weQN6E+Z4PJiqH2meQmEabU79hn3ENUoHN3qOWxfkAmSP+Lr
QKNGX1Q7gkSy4AQtusKcdrIyucdOF7ppR57h/YN2ee6L7aRZqYBwquzNCMf7DJke
5M/SQ2ap03U6RHL3U4P/wlBsCLPQulXKZC1v78uPO7xh6uutEwtIaztyxDTrs768
CbfIT8xcKT3IEHEj5TzULJs359O2E7FOpBzDyq1b9LFrLMdi6plLSndGloduFeul
zTU1RWnl8GoFIYS37tsygDrBaPXlSJnoEuo=
-----END CERTIFICATE-----
Generated at Wed May 13 07:45:14 2026 by rpki-client