Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138372e302f32342d3234203d3e203538383136.roa
File:                     34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          GZsdZA2Cq7tkVnAxosbYanPqXOKTaCHOyhg1jcl3A58=
Subject key identifier:   F4:E2:F8:26:5F:A4:BC:34:70:80:7A:ED:9D:EE:2E:24:66:07:44:2F
Certificate issuer:       /CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
Certificate serial:       09A9C1511FE17B895ACD9F486E9A227474935C86
Authority key identifier: 92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138372e302f32342d3234203d3e203538383136.roa
Signing time:             Sun 03 May 2026 02:42:14 +0000
ROA not before:           Sun 03 May 2026 02:37:14 +0000
ROA not after:            Sun 02 May 2027 02:42:14 +0000
asID:                     58816
IP address blocks:        43.252.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl
                          rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a9:c1:51:1f:e1:7b:89:5a:cd:9f:48:6e:9a:22:74:74:93:5c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
        Validity
            Not Before: May  3 02:37:14 2026 GMT
            Not After : May  2 02:42:14 2027 GMT
        Subject: CN=F4E2F8265FA4BC3470807AED9DEE2E246607442F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b7:ee:74:c7:67:de:29:34:14:93:e1:2e:7b:
                    21:52:4c:0f:e8:59:1d:a3:37:ef:f9:13:56:63:17:
                    e5:83:3d:f1:b6:85:b6:15:d0:e2:7c:c4:db:bc:1e:
                    de:e8:6e:c1:78:f0:a9:3f:23:32:b0:60:87:10:87:
                    20:77:d8:9e:64:72:11:fc:da:53:1c:94:c0:c7:49:
                    ad:2d:45:88:03:6f:7e:25:7e:e0:bd:73:c2:94:70:
                    40:2f:d1:39:a2:4c:96:fb:c6:1c:cc:d3:5b:79:78:
                    98:03:97:c2:86:67:33:c8:45:0c:db:61:af:19:65:
                    62:aa:17:ed:79:fd:6c:12:5b:c8:dd:c2:f1:d3:9f:
                    4b:1e:68:76:3f:bf:c0:6e:2a:a6:e3:82:a0:c9:6e:
                    10:7e:83:f9:34:fc:26:9d:cd:0e:41:63:7b:8d:d9:
                    bd:7d:85:13:db:cb:a2:e6:bb:9f:1b:31:ff:f4:40:
                    6e:73:96:63:a9:a0:e0:a1:f1:fe:b0:54:42:5d:4b:
                    5c:59:5d:aa:b9:8c:a2:e7:06:8e:2d:23:fc:19:a5:
                    50:36:e6:6a:bd:2b:26:c1:aa:ef:72:96:a1:a2:f5:
                    16:56:8d:43:fc:82:c8:0a:58:5f:64:6f:33:36:74:
                    20:49:18:18:1e:39:11:d6:dc:7f:4d:ff:fc:dc:8d:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E2:F8:26:5F:A4:BC:34:70:80:7A:ED:9D:EE:2E:24:66:07:44:2F
            X509v3 Authority Key Identifier:
                keyid:92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138372e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:96:f2:8c:3d:97:94:df:38:e3:01:3a:f0:da:8f:7b:36:
         00:22:37:03:51:c3:d3:c1:19:27:fb:e9:2c:0b:5a:13:ef:29:
         ff:1b:67:60:50:fb:09:99:d4:14:d9:c5:35:fc:2e:65:a0:c6:
         ad:e8:f7:4c:55:26:d9:5e:10:b2:0d:6c:58:4b:91:66:c4:c7:
         93:43:f8:77:0f:16:29:4a:71:62:89:6d:e6:5d:58:20:a1:d9:
         bf:49:cf:4d:69:f0:51:3e:cd:0e:cd:e8:b4:81:0a:84:ec:ab:
         d2:4c:9c:26:91:19:1e:cd:ef:cb:10:fb:4a:5b:ea:bb:53:b6:
         c3:26:e2:ea:86:21:9d:b4:97:fd:63:9e:df:b9:cc:46:49:5b:
         1f:3f:15:86:c5:62:ca:aa:c8:45:a0:db:ea:a7:86:d3:6d:05:
         b3:3f:1e:0f:d1:b9:39:56:07:c2:5c:f2:ec:bf:28:6b:c8:18:
         12:fe:31:ec:05:17:66:61:ac:d7:67:c9:ee:bc:f2:bc:a1:92:
         0c:e8:ba:6a:5a:9b:a5:36:c5:66:fd:f8:6c:98:bd:93:d0:dc:
         bf:c7:3c:5c:6a:b3:9c:b1:56:ca:9c:cb:ee:95:86:78:c8:ca:
         8d:80:34:89:b6:34:7b:bb:c5:b8:8e:1b:00:bc:9c:05:7f:85:
         bc:4e:51:77
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUCanBUR/he4lazZ9IbpoidHSTXIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJEOTFDNzhDRUQzMjBCOTBCRjY1NjJEMUI1NTZBRTky
MThGNzRBMTAeFw0yNjA1MDMwMjM3MTRaFw0yNzA1MDIwMjQyMTRaMDMxMTAvBgNV
BAMTKEY0RTJGODI2NUZBNEJDMzQ3MDgwN0FFRDlERUUyRTI0NjYwNzQ0MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCut+50x2feKTQUk+EueyFSTA/o
WR2jN+/5E1ZjF+WDPfG2hbYV0OJ8xNu8Ht7obsF48Kk/IzKwYIcQhyB32J5kchH8
2lMclMDHSa0tRYgDb34lfuC9c8KUcEAv0TmiTJb7xhzM01t5eJgDl8KGZzPIRQzb
Ya8ZZWKqF+15/WwSW8jdwvHTn0seaHY/v8BuKqbjgqDJbhB+g/k0/CadzQ5BY3uN
2b19hRPby6Lmu58bMf/0QG5zlmOpoOCh8f6wVEJdS1xZXaq5jKLnBo4tI/wZpVA2
5mq9KybBqu9ylqGi9RZWjUP8gsgKWF9kbzM2dCBJGBgeORHW3H9N//zcjerFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU9OL4Jl+kvDRwgHrtne4uJGYHRC8wHwYDVR0j
BBgwFoAUktkceM7TILkL9lYtG1Vq6SGPdKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmZjM2NiYzQtODg4My00MTFjLTg3NmUtZTllMjNhOGQ4YWQ5LzAvOTJEOTFDNzhD
RUQzMjBCOTBCRjY1NjJEMUI1NTZBRTkyMThGNzRBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MkQ5MUM3OENFRDMyMEI5MEJGNjU2MkQxQjU1NkFFOTIxOEY3
NEExLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04
NzZlLWU5ZTIzYThkOGFkOS8wLzM0MzMyZTMyMzUzMjJlMzEzODM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8uzANBgkqhkiG
9w0BAQsFAAOCAQEAMEyW8ow9l5TfOOMBOvDaj3s2ACI3A1HD08EZJ/vpLAtaE+8p
/xtnYFD7CZnUFNnFNfwuZaDGrej3TFUm2V4Qsg1sWEuRZsTHk0P4dw8WKUpxYolt
5l1YIKHZv0nPTWnwUT7NDs3otIEKhOyr0kycJpEZHs3vyxD7Slvqu1O2wybi6oYh
nbSX/WOe37nMRklbHz8VhsViyqrIRaDb6qeG020Fsz8eD9G5OVYHwlzy7L8oa8gY
Ev4x7AUXZmGs12fJ7rzyvKGSDOi6alqbpTbFZv34bJi9k9Dcv8c8XGqznLFWypzL
7pWGeMjKjYA0ibY0e7vFuI4bALycBX+FvE5Rdw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:40:57 2026 by rpki-client