Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa
File:                     33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (raw, json)
Hash identifier:          NfwodMU0ZpYOe0eGaroCaBHW6LXuenQTGATXpYvxAyk=
Subject key identifier:   04:18:85:98:77:6E:A2:05:88:90:81:EF:5F:F4:92:F4:15:AE:5E:B7
Certificate issuer:       /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951
Certificate serial:       270D479D03400F1FA30281CB296C6A58A5C04174
Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa
Signing time:             Sun 03 May 2026 02:39:36 +0000
ROA not before:           Sun 03 May 2026 02:34:36 +0000
ROA not after:            Sun 02 May 2027 02:39:36 +0000
asID:                     147128
IP address blocks:        36.50.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl
                          rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0d:47:9d:03:40:0f:1f:a3:02:81:cb:29:6c:6a:58:a5:c0:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951
        Validity
            Not Before: May  3 02:34:36 2026 GMT
            Not After : May  2 02:39:36 2027 GMT
        Subject: CN=04188598776EA205889081EF5FF492F415AE5EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:bd:e7:4a:79:e7:6a:f8:9b:4d:58:28:ee:
                    9a:6f:98:9f:fd:e8:9f:75:61:8f:a1:03:60:a5:de:
                    49:7e:2c:9f:70:74:2b:08:09:b0:0a:15:ba:61:55:
                    77:e9:f8:d9:df:c3:29:67:a2:b7:0e:18:2b:36:b5:
                    79:ce:cf:d5:0e:08:b4:65:b8:22:e1:44:32:05:97:
                    1d:60:f1:87:92:7c:d5:fd:76:f5:89:fa:c4:50:ce:
                    41:1d:b3:53:e2:2d:dd:ca:50:6d:57:52:bf:7b:5e:
                    07:01:ad:ad:48:a1:64:6e:72:2c:b4:63:bd:36:2d:
                    5b:8d:7b:76:20:43:32:59:9f:b6:b2:b3:75:df:06:
                    41:10:fc:40:05:95:99:58:90:80:48:3e:13:de:42:
                    93:be:d0:0e:71:d6:72:ab:ae:20:c5:e5:22:95:f6:
                    84:f3:f6:75:83:37:51:b4:41:1e:99:36:eb:d0:82:
                    20:51:4f:c9:f8:03:6f:85:f2:ad:11:05:49:00:bb:
                    68:aa:69:ee:5c:1b:09:f2:ed:0a:82:11:3f:98:4b:
                    09:ae:c7:95:89:ec:77:91:07:37:f1:13:a6:a4:1b:
                    d1:d7:2c:54:ed:6b:2d:f8:62:e3:e6:95:6e:5a:bc:
                    7e:2d:fa:33:74:39:45:02:1f:b1:a7:03:75:66:1e:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:18:85:98:77:6E:A2:05:88:90:81:EF:5F:F4:92:F4:15:AE:5E:B7
            X509v3 Authority Key Identifier:
                keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:c5:de:05:86:7c:27:20:81:29:21:81:7d:25:fc:69:f2:af:
         aa:e1:8e:d5:e2:dd:a8:a8:e0:cc:64:c7:98:49:2e:49:a4:73:
         0f:8a:03:da:2a:fe:c3:e6:cc:4f:dd:7e:fe:22:c3:c8:97:51:
         c5:1d:02:fd:85:37:7d:66:5f:75:f4:56:4c:ed:f6:8f:3d:a6:
         dd:8d:aa:27:c2:bf:96:e6:b5:71:61:07:44:db:bb:77:fd:e3:
         3c:7b:a7:d8:c4:4e:33:62:de:e0:46:98:76:99:b1:74:d3:83:
         f8:56:47:bf:ff:0d:d2:3a:af:52:5b:dc:f1:5e:dc:ab:24:7e:
         78:1f:11:5a:a0:49:4b:fa:1d:4f:36:d3:cd:8f:bc:fc:31:e9:
         e4:20:40:13:ba:86:b1:3e:e5:23:e3:96:f7:f0:d7:2c:3c:11:
         15:88:97:a7:6f:89:48:3c:bb:3f:28:85:40:6c:23:6b:ae:d5:
         24:4c:84:6a:fc:d3:50:14:03:42:8c:c7:7b:dc:56:e8:4d:45:
         15:51:05:9c:7e:4d:41:f1:d4:b1:3b:c7:95:16:e3:90:b2:29:
         8f:9b:28:86:fe:dd:7d:04:9f:64:4f:08:58:ae:d6:31:b8:60:
         11:54:5c:15:b8:e0:b1:87:2f:ed:a3:b6:55:54:aa:dc:0d:fd:
         a3:c6:3f:04
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJw1HnQNADx+jAoHLKWxqWKXAQXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlC
RDI4Mjk1MTAeFw0yNjA1MDMwMjM0MzZaFw0yNzA1MDIwMjM5MzZaMDMxMTAvBgNV
BAMTKDA0MTg4NTk4Nzc2RUEyMDU4ODkwODFFRjVGRjQ5MkY0MTVBRTVFQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsL3nSnnnavibTVgo7ppvmJ/9
6J91YY+hA2Cl3kl+LJ9wdCsICbAKFbphVXfp+NnfwylnorcOGCs2tXnOz9UOCLRl
uCLhRDIFlx1g8YeSfNX9dvWJ+sRQzkEds1PiLd3KUG1XUr97XgcBra1IoWRuciy0
Y702LVuNe3YgQzJZn7ays3XfBkEQ/EAFlZlYkIBIPhPeQpO+0A5x1nKrriDF5SKV
9oTz9nWDN1G0QR6ZNuvQgiBRT8n4A2+F8q0RBUkAu2iqae5cGwny7QqCET+YSwmu
x5WJ7HeRBzfxE6akG9HXLFTtay34YuPmlW5avH4t+jN0OUUCH7GnA3VmHp2JAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBBiFmHduogWIkIHvX/SS9BWuXrcwHwYDVR0j
BBgwFoAUNM/es+11wCw3QTwgKcLFyb0oKVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjU5ODlmYWYtNDhmYi00ZjQwLTllNzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNF
RDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlCRDI4Mjk1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNENGREVCM0VENzVDMDJDMzc0MTNDMjAyOUMyQzVDOUJEMjgy
OTUxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1OTg5ZmFmLTQ4ZmItNGY0MC05
ZTc3LTI0M2Q3OGE1YjVjNC8wLzMzMzYyZTM1MzAyZTMyMzEzNjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzQzNzMxMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASQy2DANBgkqhkiG
9w0BAQsFAAOCAQEAX8XeBYZ8JyCBKSGBfSX8afKvquGO1eLdqKjgzGTHmEkuSaRz
D4oD2ir+w+bMT91+/iLDyJdRxR0C/YU3fWZfdfRWTO32jz2m3Y2qJ8K/lua1cWEH
RNu7d/3jPHun2MROM2Le4EaYdpmxdNOD+FZHv/8N0jqvUlvc8V7cqyR+eB8RWqBJ
S/odTzbTzY+8/DHp5CBAE7qGsT7lI+OW9/DXLDwRFYiXp2+JSDy7PyiFQGwja67V
JEyEavzTUBQDQozHe9xW6E1FFVEFnH5NQfHUsTvHlRbjkLIpj5sohv7dfQSfZE8I
WK7WMbhgEVRcFbjgsYcv7aO2VVSq3A39o8Y/BA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:40:12 2026 by rpki-client