Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138362e302f32342d3234203d3e203538383136.roa
File:                     34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          47W870E4m4QdyunOfRZFw2zowyTv04bO++vhP0N3oGM=
Subject key identifier:   D4:16:B7:3E:DD:15:16:96:F8:D0:2F:AC:67:3A:78:30:FC:F2:84:F1
Certificate issuer:       /CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
Certificate serial:       49D227D97539449D7857CDAC5BE900EEBFD0C4
Authority key identifier: 92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138362e302f32342d3234203d3e203538383136.roa
Signing time:             Sun 03 May 2026 02:42:13 +0000
ROA not before:           Sun 03 May 2026 02:37:13 +0000
ROA not after:            Sun 02 May 2027 02:42:13 +0000
asID:                     58816
IP address blocks:        43.252.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl
                          rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d2:27:d9:75:39:44:9d:78:57:cd:ac:5b:e9:00:ee:bf:d0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
        Validity
            Not Before: May  3 02:37:13 2026 GMT
            Not After : May  2 02:42:13 2027 GMT
        Subject: CN=D416B73EDD151696F8D02FAC673A7830FCF284F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:81:dd:e4:cc:22:c4:61:93:0c:28:ae:36:
                    44:39:5f:7f:1a:c1:24:dd:ce:52:39:62:c5:af:fc:
                    c6:5e:65:fd:fa:36:e6:5a:d2:2c:ee:1c:f3:ee:13:
                    64:1c:31:fd:84:6a:31:5d:13:ae:89:f1:0c:ca:41:
                    7d:d5:23:e2:57:6e:b8:04:d0:85:8b:ec:4d:82:42:
                    a4:bf:a6:80:a0:98:c0:e9:76:be:58:c6:79:7a:e3:
                    fb:56:6d:b7:4f:f3:f1:0c:86:bc:20:1c:c8:89:2f:
                    4a:9b:5b:b1:76:4d:9c:a2:80:85:d0:94:75:e9:14:
                    59:dc:c0:a7:cb:24:c0:8e:3a:58:ad:20:a9:54:7b:
                    76:3c:b8:97:56:4a:2d:d5:ac:dd:de:79:22:04:79:
                    91:c9:e6:14:3b:e4:f0:70:cf:06:ca:6d:10:e7:ca:
                    c0:1c:d4:ff:89:22:74:7d:43:78:f1:39:f1:47:f1:
                    a0:a8:46:37:09:bb:3c:0d:b1:0c:78:ef:b3:b6:a9:
                    a2:77:d6:e3:62:fc:09:9d:50:a2:a7:f5:be:3a:28:
                    b4:dd:07:11:58:56:2d:6e:ff:8b:af:ff:60:d2:0e:
                    31:e5:27:bb:f1:26:bc:4f:60:ad:be:90:a0:83:e1:
                    9e:0b:a1:12:a0:2b:9b:f4:a7:38:91:5f:8d:e3:c1:
                    42:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:16:B7:3E:DD:15:16:96:F8:D0:2F:AC:67:3A:78:30:FC:F2:84:F1
            X509v3 Authority Key Identifier:
                keyid:92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138362e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:72:d0:4b:64:19:a2:1e:9f:1e:c0:b2:6c:49:bb:c6:93:b9:
         96:02:01:27:ce:7e:2c:cb:59:72:13:d1:3a:5b:0e:ed:5a:47:
         29:59:dc:86:f4:0f:f8:a0:27:53:be:68:7e:7c:59:4a:a0:e5:
         f7:5b:48:15:cf:d0:e2:f1:df:d4:8c:58:70:d9:c8:ca:76:f5:
         78:24:dd:f5:04:51:02:93:25:0b:90:20:88:a9:4a:4b:6a:19:
         cb:3d:05:f0:a8:41:09:9f:94:0f:2b:2d:97:0f:85:05:85:ff:
         89:7d:b1:45:eb:92:61:f7:00:ba:f6:92:2b:ec:85:07:aa:1a:
         1c:5b:34:d3:53:f2:49:95:bf:d1:24:94:51:13:34:72:76:fb:
         49:55:67:ba:c4:a9:cf:c6:4d:2a:14:27:d1:b6:1d:04:1c:71:
         c1:c6:b4:96:81:1f:d7:5c:30:75:a5:a7:fc:ba:10:cf:fb:64:
         8c:68:b3:aa:cb:ef:b0:6b:af:97:90:cf:e6:27:ab:f1:22:3c:
         b3:86:5c:0a:9d:5b:67:ff:03:2c:d1:89:bd:7c:99:e8:ef:b0:
         a1:38:ab:6d:2c:ec:02:02:22:74:7d:ce:e6:d1:58:fd:88:1c:
         fe:9b:60:45:fa:58:53:0a:0a:fb:1c:4b:4d:0c:60:09:ae:7d:
         70:db:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:18 2026 by rpki-client