Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34332e3232392e3234382e302f32322d3234203d3e203435373331.roa
File:                     34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (raw, json)
Hash identifier:          49rc320q+QyoI3Wo5yzjwV1JHfD3ARGCwSOWR1AVGd4=
Subject key identifier:   90:A0:40:A5:E5:11:D5:4E:E7:F2:5B:22:D1:41:46:DE:C6:72:2B:AE
Certificate issuer:       /CN=34B29E7722E2B5DD7C273585E39574B57B896900
Certificate serial:       5215085B16915EB1317F4C35936C987B2614E841
Authority key identifier: 34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34332e3232392e3234382e302f32322d3234203d3e203435373331.roa
Signing time:             Sun 03 May 2026 02:45:15 +0000
ROA not before:           Sun 03 May 2026 02:40:15 +0000
ROA not after:            Sun 02 May 2027 02:45:15 +0000
asID:                     45731
IP address blocks:        43.229.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl
                          rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:15:08:5b:16:91:5e:b1:31:7f:4c:35:93:6c:98:7b:26:14:e8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B29E7722E2B5DD7C273585E39574B57B896900
        Validity
            Not Before: May  3 02:40:15 2026 GMT
            Not After : May  2 02:45:15 2027 GMT
        Subject: CN=90A040A5E511D54EE7F25B22D14146DEC6722BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:f4:51:b3:e0:16:49:f9:c7:d4:1e:94:de:
                    fa:6e:b0:db:5c:5d:6c:df:a8:a4:24:e1:66:ec:1b:
                    a6:fb:42:59:0f:f8:ba:77:3c:0e:07:4d:6d:f5:ab:
                    b4:39:e5:da:30:fe:63:8f:ce:29:c8:4e:7e:f3:d6:
                    a1:19:72:e0:89:6b:01:de:bc:1a:eb:38:91:27:b4:
                    9c:01:6b:bb:ff:49:fd:2c:f8:3e:9c:6f:40:88:ec:
                    bc:eb:7d:0d:9c:6f:0c:62:7d:d4:e1:68:d1:11:7d:
                    41:d9:45:a7:0b:e0:b0:97:18:07:d6:9e:26:3e:f6:
                    2e:5e:de:32:94:1e:7a:00:d9:57:c3:87:12:40:73:
                    64:6d:3c:83:a8:a4:dd:5d:e0:eb:54:37:df:f6:ee:
                    b8:e7:1f:dc:0f:6e:01:ae:0e:45:1a:09:ce:97:d4:
                    cc:2b:47:bc:6b:71:94:15:c6:f9:8a:10:8d:8e:4c:
                    65:db:81:02:3c:21:5b:01:03:7b:31:df:8f:2b:57:
                    82:c9:6d:6a:46:0f:e0:ad:dd:96:96:5a:f7:33:d6:
                    27:94:69:3e:ce:8d:1b:aa:43:9a:1d:4e:ba:15:86:
                    d9:0f:04:48:bd:11:a3:d6:9f:e1:a9:c3:8f:d9:99:
                    4a:6b:40:95:59:bf:85:55:fa:32:ec:1b:51:5f:59:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A0:40:A5:E5:11:D5:4E:E7:F2:5B:22:D1:41:46:DE:C6:72:2B:AE
            X509v3 Authority Key Identifier:
                keyid:34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34332e3232392e3234382e302f32322d3234203d3e203435373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.229.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:8c:26:07:8d:4c:97:48:b1:0b:26:a5:27:56:02:2b:06:26:
         d6:51:38:a1:74:a5:aa:9f:18:49:48:8c:06:99:3b:31:18:79:
         d3:34:19:23:e1:eb:34:f8:08:1d:70:e8:b4:99:98:38:15:1a:
         59:cb:06:31:4d:e6:06:2a:9c:23:b7:4a:d8:c1:23:0b:d0:34:
         b6:6d:e4:c8:f9:82:da:30:4b:0a:42:1b:1d:41:6e:62:b5:0e:
         e9:79:ed:9e:6e:1d:28:b7:f7:3f:06:e9:30:55:02:09:4d:72:
         f1:ff:4d:98:d6:b3:f7:b4:ed:b7:59:a0:a0:df:8d:24:65:08:
         22:eb:52:87:25:c8:9e:a0:2e:7f:16:94:b3:0a:a8:1a:42:15:
         fa:8c:3a:cd:d6:3d:99:4c:ec:dd:cf:64:57:b1:76:8d:c3:20:
         26:fe:32:2b:cf:e3:e7:6e:0e:20:e0:31:f7:c8:b2:86:0e:df:
         40:7e:9d:26:43:d5:3d:3f:b1:3d:6e:b5:12:ab:f3:ca:2a:2d:
         84:04:fc:9b:a8:71:bf:33:04:06:80:1c:aa:38:1a:e6:34:5f:
         ee:a4:2e:ab:4c:dc:d4:ea:fc:bc:a0:bf:c9:ce:72:14:6b:7d:
         53:35:95:17:68:2b:2a:7a:d9:ea:04:ea:cb:e8:9e:10:ef:cc:
         5d:5c:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:22 2026 by rpki-client