Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132342e302f32322d3232203d3e203538343832.roa
File:                     34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (raw, json)
Hash identifier:          uAvyS9p76dmI7hlKCOH8+2FAYkKJ52QLfJ7+254DIqE=
Subject key identifier:   6E:97:71:52:1B:E0:37:D8:46:A1:D4:D4:BC:E3:F8:93:8F:16:36:32
Certificate issuer:       /CN=797581F67816C4132050EC6348DBB15EBC5C0189
Certificate serial:       7F1B7DF351DD8F150ACAC0B69CB6AAA2990FC7E9
Authority key identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132342e302f32322d3232203d3e203538343832.roa
Signing time:             Sun 03 May 2026 02:40:39 +0000
ROA not before:           Sun 03 May 2026 02:35:39 +0000
ROA not after:            Sun 02 May 2027 02:40:39 +0000
asID:                     58482
IP address blocks:        43.254.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
                          rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1b:7d:f3:51:dd:8f:15:0a:ca:c0:b6:9c:b6:aa:a2:99:0f:c7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797581F67816C4132050EC6348DBB15EBC5C0189
        Validity
            Not Before: May  3 02:35:39 2026 GMT
            Not After : May  2 02:40:39 2027 GMT
        Subject: CN=6E9771521BE037D846A1D4D4BCE3F8938F163632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:56:ff:f6:ce:0e:c1:6d:a1:54:db:8b:ad:
                    86:4b:51:48:5e:0e:93:3e:f7:ee:37:9b:03:1d:16:
                    e7:5e:6c:e9:ad:49:29:07:ee:1c:eb:1d:e8:55:e0:
                    f9:73:25:27:da:74:d4:9f:e8:3b:24:93:16:98:a6:
                    32:07:c8:a9:48:ff:d1:2a:2b:c5:84:4f:39:b1:4e:
                    bd:e2:d0:4d:1a:d1:30:19:93:e6:f9:24:48:10:a9:
                    6b:47:1e:47:61:92:b4:f0:a0:2f:16:62:61:5e:bd:
                    05:ba:7c:a0:9f:86:75:92:52:4f:d4:35:7d:d4:aa:
                    12:82:70:c7:00:fb:76:2e:ee:b3:0e:b9:b3:bf:43:
                    0f:ad:14:e4:7d:40:1c:df:29:9e:1b:2a:aa:d2:99:
                    83:fa:e5:46:f4:5a:47:ea:0a:dd:8f:5d:0b:e7:e5:
                    fa:fd:dc:6d:68:84:55:71:3d:b3:5b:c0:43:15:8c:
                    93:59:af:c6:9d:ee:b6:91:9d:f3:80:d0:27:ff:7e:
                    33:f9:3d:db:c8:5d:e9:e2:87:25:26:63:86:e8:71:
                    b0:46:6a:31:db:b2:b9:4a:03:c4:5e:e8:fe:52:a1:
                    e3:77:ee:1c:82:e0:5d:5b:c2:66:f2:b0:66:99:fa:
                    1b:dc:a6:13:04:fe:e0:06:6b:47:a1:97:ac:ce:a2:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:71:52:1B:E0:37:D8:46:A1:D4:D4:BC:E3:F8:93:8F:16:36:32
            X509v3 Authority Key Identifier:
                keyid:79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132342e302f32322d3232203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:77:38:ed:56:0c:20:e0:2d:d4:af:d1:21:f6:69:11:de:0d:
         72:5a:0e:c0:4f:0d:93:87:3f:02:44:63:6f:24:b5:e2:14:19:
         97:ee:e0:f3:d4:6e:15:2e:6f:83:ef:cf:f0:9b:ed:c2:e3:b0:
         49:bc:b2:0b:c5:d7:fb:5e:68:92:a9:c5:d5:35:0b:b7:cd:fe:
         5b:26:8f:49:69:f0:3c:c0:17:15:c3:83:2d:33:53:5c:71:8c:
         c1:b4:1f:17:81:27:87:82:51:c0:09:1e:48:1f:e8:99:e4:1f:
         01:1f:ce:86:37:55:27:4e:76:1e:ac:bc:e3:3e:41:63:ec:fc:
         9f:ea:08:05:5b:33:09:2f:24:97:40:a4:c1:60:85:11:5f:03:
         55:a6:50:6f:0c:e3:f9:51:e4:55:d7:64:0c:57:f4:e4:bb:36:
         99:bb:79:96:e5:e4:d6:c7:e2:14:3c:38:ed:8d:e5:42:47:0e:
         b0:49:b9:65:1e:31:f0:bb:17:ae:4d:1b:99:17:a7:8d:38:7b:
         14:1f:66:bc:38:99:53:56:35:94:ee:a1:65:02:3a:9a:c4:5c:
         9f:1c:39:95:f7:bd:5e:4b:f8:44:b4:6d:ba:6b:ba:3a:74:d1:
         01:25:21:ed:16:1b:8e:36:1d:5e:6c:ad:95:76:0a:31:6b:3c:
         97:0f:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:59 2026 by rpki-client