Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203436303234.roa
File:                     34392e35302e352e302f32342d3234203d3e203436303234.roa (raw, json)
Hash identifier:          nFS5QU5ou89IxZP8HncF3riJVrU1zaoieWQvhjr5m8c=
Subject key identifier:   82:ED:AB:85:93:DC:66:5A:1C:FF:0F:8E:AA:EA:3F:97:1D:78:97:FB
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       595E5BB3DE8908F54A0081CBC20C3FB2E92E5C18
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203436303234.roa
Signing time:             Sun 03 May 2026 02:39:50 +0000
ROA not before:           Sun 03 May 2026 02:34:50 +0000
ROA not after:            Sun 02 May 2027 02:39:50 +0000
asID:                     46024
IP address blocks:        49.50.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5e:5b:b3:de:89:08:f5:4a:00:81:cb:c2:0c:3f:b2:e9:2e:5c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:50 2026 GMT
            Not After : May  2 02:39:50 2027 GMT
        Subject: CN=82EDAB8593DC665A1CFF0F8EAAEA3F971D7897FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:d6:0d:42:65:07:55:9a:9f:b0:dd:e3:48:
                    ad:58:04:0a:13:bb:a6:7d:7e:ce:35:59:c5:4d:b8:
                    eb:8c:7a:f5:f5:40:93:44:e1:a5:02:99:30:34:ff:
                    78:e2:b4:e8:53:f4:0d:46:c3:17:ae:ab:fe:d6:af:
                    2b:37:39:f6:23:f1:12:9a:e1:be:96:d4:57:0b:87:
                    da:26:22:fd:b0:2b:89:1c:a4:c6:ab:44:fd:22:32:
                    37:e6:49:01:0e:37:8a:7f:73:45:bf:f7:2b:4f:12:
                    d4:f0:86:5f:3a:33:e7:c2:10:94:f0:8b:a7:22:e9:
                    7c:3b:4d:52:84:96:c3:b0:a0:5c:18:ae:a7:95:a7:
                    b3:76:1d:34:bf:6a:c8:21:9d:fd:47:21:35:66:ce:
                    7c:b6:74:fc:26:1f:de:09:5e:b3:c9:2c:3c:00:b8:
                    4d:b9:a7:91:80:17:bc:a0:e2:c6:d1:cf:75:90:cb:
                    c9:b2:9a:5f:22:5d:57:dd:90:b0:bc:41:cf:7f:3d:
                    43:53:de:66:c5:91:21:ae:29:9d:3c:ec:ed:cb:20:
                    e3:a0:3c:e2:8d:62:8d:06:49:8d:7f:e9:e0:ed:2f:
                    23:90:c6:c5:fe:d6:e3:70:c8:85:5d:1c:1b:a5:8c:
                    cb:89:0c:1b:36:cc:91:b3:28:ea:49:27:98:82:92:
                    bf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:AB:85:93:DC:66:5A:1C:FF:0F:8E:AA:EA:3F:97:1D:78:97:FB
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203436303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.50.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e6:82:40:ac:df:83:33:f0:11:a8:dc:2c:6d:85:c3:b9:3a:
         a5:08:75:6f:cb:20:d3:23:fd:00:fd:12:e6:ac:21:82:00:ac:
         01:54:7e:a5:77:8c:fa:21:57:4e:f9:74:25:5e:39:c8:53:80:
         c2:30:ba:aa:00:7d:ea:1d:1f:3a:9d:2e:72:19:e6:3a:77:1c:
         0b:ea:13:0d:e7:6e:dc:dd:d4:b1:12:fd:3c:a0:ac:7c:b4:74:
         13:2d:c0:15:62:cd:5b:17:e3:05:ec:d0:6f:08:11:61:79:1b:
         9b:64:23:83:1f:e9:31:51:39:55:05:3b:24:3b:6d:a8:c8:c0:
         5c:45:9d:17:4b:b1:0b:cc:06:5a:c5:f3:bc:43:ea:f0:4a:7f:
         c0:5b:0e:db:a1:03:01:65:13:64:85:36:c5:b1:e8:13:6b:26:
         cd:75:da:e2:ae:27:33:f5:9a:18:f1:2f:ce:82:11:72:b3:15:
         f6:09:bd:12:9a:cc:02:9c:3a:b7:1b:db:64:4c:ce:77:46:f1:
         9f:82:91:01:db:58:29:d7:21:5a:45:b3:12:2b:c4:0f:1b:bb:
         2f:99:84:ba:c3:10:d7:14:6e:50:d3:ee:9a:52:00:be:ab:56:
         17:ee:f9:27:77:1b:57:72:2a:f9:c4:21:67:65:3f:e9:ea:b7:
         65:d2:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:48 2026 by rpki-client