Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32342d3234203d3e203436303234.roa
File:                     34392e35302e342e302f32342d3234203d3e203436303234.roa (raw, json)
Hash identifier:          KmVkU+NHeC47+NIKrld7ds+KmPkEEWIZRrJ1q2l1KVs=
Subject key identifier:   39:7C:5D:77:41:8E:7F:42:ED:D4:DB:72:A9:0D:EA:47:63:D7:DF:D1
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       6ED4A605877115D0D0F3C5651CD974924BEC5249
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32342d3234203d3e203436303234.roa
Signing time:             Sun 03 May 2026 02:39:42 +0000
ROA not before:           Sun 03 May 2026 02:34:42 +0000
ROA not after:            Sun 02 May 2027 02:39:42 +0000
asID:                     46024
IP address blocks:        49.50.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d4:a6:05:87:71:15:d0:d0:f3:c5:65:1c:d9:74:92:4b:ec:52:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:42 2026 GMT
            Not After : May  2 02:39:42 2027 GMT
        Subject: CN=397C5D77418E7F42EDD4DB72A90DEA4763D7DFD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:9a:ac:ef:b5:4d:d9:74:6c:0f:ac:63:b4:
                    2a:6d:d2:52:be:04:15:cd:33:81:a4:a5:c1:9a:5e:
                    72:35:4a:eb:ba:24:3c:d0:40:fc:6b:44:81:71:5e:
                    89:55:6c:82:e3:c6:67:85:1b:aa:4b:ea:fa:4f:3c:
                    0a:fb:c6:eb:74:f6:f3:10:f1:86:79:9c:5c:95:f5:
                    13:40:4b:bc:90:22:ac:4d:56:bc:c4:d4:93:44:fa:
                    ba:13:bd:35:fd:c6:ad:1d:1a:95:61:89:52:34:84:
                    8f:7a:a5:43:ee:8e:b7:17:f9:e4:a8:75:e0:8c:88:
                    99:a8:1b:8e:d2:56:6c:ad:cb:cf:7c:7b:68:7f:b8:
                    7c:74:e8:81:27:f5:0e:98:76:f2:43:38:c2:01:75:
                    5c:d9:9b:a0:41:26:7d:10:37:e7:59:bf:77:83:d3:
                    8a:d9:20:fb:b2:ae:5d:7e:7a:b1:6b:d8:9e:6d:19:
                    63:37:d2:c1:ff:a7:9d:7b:69:94:18:54:e2:98:0d:
                    19:12:a6:c3:a8:a3:01:f7:22:3e:a6:59:81:49:7b:
                    f8:25:7f:45:08:71:ef:2b:02:33:31:e0:0a:e0:d5:
                    30:78:7e:8d:d1:29:ce:da:a5:b2:6f:1e:1c:6d:39:
                    71:de:39:a0:85:7a:fb:c9:81:d5:64:a2:e1:e3:7b:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:5D:77:41:8E:7F:42:ED:D4:DB:72:A9:0D:EA:47:63:D7:DF:D1
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32342d3234203d3e203436303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.50.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:f1:d6:44:a8:ba:ed:99:33:f3:72:7e:14:86:c9:77:6b:
         07:89:b3:f1:f2:16:f0:29:0b:fa:94:f0:c7:3a:41:0a:91:3d:
         04:8f:ff:51:2b:49:02:7c:9f:4b:18:b6:df:ae:bd:61:f4:1a:
         60:d4:fb:45:95:2b:57:26:b1:33:96:c4:0c:c6:ad:fd:0d:f9:
         b5:a2:9e:23:42:6e:93:61:1f:5a:44:3b:06:fe:ba:70:c4:0e:
         26:f3:a5:bc:57:dd:7b:c8:1c:cb:d3:26:dd:3b:03:3c:6d:60:
         ed:03:76:0f:a3:f5:91:3e:19:e4:fc:92:82:44:7e:be:55:7e:
         17:ef:3e:8d:06:68:c5:49:20:87:6c:85:9e:1c:06:c3:e1:77:
         3c:6a:72:06:b2:a5:03:22:a7:c9:e4:5b:9a:6f:67:60:2f:28:
         44:99:cc:88:f4:3c:44:21:66:c0:c4:da:58:5d:e4:59:e7:d9:
         a2:33:ab:b9:e6:a0:d6:96:e2:16:70:d6:1c:1e:1b:f1:f7:b5:
         ce:3a:b9:c7:fa:fc:ce:ab:58:72:c9:2c:94:76:8e:fd:57:1a:
         a8:11:c4:41:fa:fb:66:22:bd:ba:08:46:67:05:e9:37:3c:c8:
         ea:26:ef:ca:35:7e:a9:48:56:9c:c6:76:85:6b:fb:a7:ac:ce:
         13:ef:67:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:40 2026 by rpki-client