Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32332d3233203d3e203436303234.roa
File:                     34392e35302e342e302f32332d3233203d3e203436303234.roa (raw, json)
Hash identifier:          XE8RFX5JmU1fw92tpzdxihcqj1rOCmQY9wos4rjIuEI=
Subject key identifier:   AE:3A:43:3C:0E:A7:0D:A3:71:2F:78:AE:20:1E:19:21:B8:0B:20:0C
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       42CFCF9A0400E9F87A1B0FE375F6C2A90E3FD3D2
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32332d3233203d3e203436303234.roa
Signing time:             Sun 03 May 2026 02:39:51 +0000
ROA not before:           Sun 03 May 2026 02:34:51 +0000
ROA not after:            Sun 02 May 2027 02:39:51 +0000
asID:                     46024
IP address blocks:        49.50.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cf:cf:9a:04:00:e9:f8:7a:1b:0f:e3:75:f6:c2:a9:0e:3f:d3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:51 2026 GMT
            Not After : May  2 02:39:51 2027 GMT
        Subject: CN=AE3A433C0EA70DA3712F78AE201E1921B80B200C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:c9:7d:8a:52:1d:d0:fb:f0:5d:d1:86:47:
                    3a:db:c5:67:3e:d3:2e:94:47:a6:d4:c8:e2:58:28:
                    0d:1b:f9:9f:65:0b:46:e8:0a:45:5f:24:1e:38:0a:
                    ab:59:78:91:4a:24:f1:14:47:6f:7b:e2:cb:c8:35:
                    08:fa:11:79:23:cd:75:d6:e2:d7:2d:a1:54:8c:ac:
                    4d:fc:75:28:63:fb:33:6b:f3:73:85:fe:b9:a6:0a:
                    e7:3a:2b:56:4d:12:b3:48:c6:7e:3e:9c:7b:57:d8:
                    47:94:15:01:4c:68:e1:78:5b:e2:11:be:78:15:6b:
                    4a:d3:e1:e8:12:f9:e4:d2:b4:9c:9f:65:60:30:8f:
                    06:52:e7:43:30:5f:8c:9b:04:b7:7d:30:06:12:9a:
                    29:38:c9:3c:1b:a3:5d:f7:fb:de:ab:ff:07:68:f9:
                    1b:95:13:24:9a:20:3a:b6:b0:33:3f:88:cf:d3:79:
                    72:49:da:c3:ff:52:f1:08:55:2e:2f:19:58:cc:f7:
                    0d:1c:52:61:4b:dc:b0:4c:0f:fa:f0:d7:05:71:41:
                    38:c1:5c:41:56:41:32:a3:9e:1b:ac:1e:b9:39:2a:
                    d6:61:0b:57:b8:e2:33:88:f2:a6:0c:2d:f7:7c:95:
                    fc:47:e1:07:22:53:5e:7d:5e:5b:30:97:b9:a9:88:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:43:3C:0E:A7:0D:A3:71:2F:78:AE:20:1E:19:21:B8:0B:20:0C
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32332d3233203d3e203436303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.50.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:58:84:54:96:71:6f:b2:a4:24:53:45:82:63:7d:3c:e1:
         90:44:28:3c:74:5b:07:77:d1:10:83:61:f4:ca:a6:f6:6c:9e:
         e3:be:1b:c1:65:63:2e:d8:2a:ae:23:69:f4:8f:bc:f6:e4:f7:
         9d:f1:4e:1e:c7:d6:86:d9:9f:f5:c4:94:d5:46:88:84:b9:46:
         98:97:9b:df:8d:63:dc:5e:92:7a:f2:50:04:63:78:65:6a:f7:
         98:13:65:3b:0c:f6:11:3c:fc:a9:6a:f0:37:74:74:11:38:19:
         a2:8e:67:61:53:6c:21:ad:62:86:d9:4d:e9:4a:1f:e7:57:8d:
         e1:90:61:6b:c6:04:a4:47:78:0d:e5:26:14:c9:5e:4e:13:90:
         8a:14:b2:43:66:95:b4:26:5c:61:87:42:1d:e4:ac:a9:1e:60:
         53:00:7c:e7:b0:d1:fc:e0:c7:52:5b:ac:16:53:a1:6f:3f:8b:
         fc:d7:75:7d:d5:e8:a6:ed:60:8c:3a:9e:82:25:ce:53:ac:3b:
         d9:d3:2b:7a:b1:b5:f4:49:a9:bb:1b:ac:00:f6:6f:67:b5:fb:
         c0:57:0d:8d:ef:92:8e:c5:b1:ec:f4:77:05:6d:32:87:56:9e:
         3c:5b:49:17:bf:c8:12:02:d7:7a:0d:b7:6e:dc:62:5b:fa:b8:
         66:b9:fb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:25 2026 by rpki-client