Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3232332e302f32342d3234203d3e203535363638.roa
File:                     34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (raw, json)
Hash identifier:          mXTHiSZhWwuA+h0ucYRbux0aL56T66j7S5mrCfu31Vs=
Subject key identifier:   61:98:D7:21:D2:0A:4F:AB:D1:32:34:E8:48:C4:7D:2F:B2:8A:C6:93
Certificate issuer:       /CN=777E6650C707BC53014C9FB0600EB998ECDCCEC8
Certificate serial:       76980763B867ED98CC7BA61722DAB9CB9FF73CF7
Authority key identifier: 77:7E:66:50:C7:07:BC:53:01:4C:9F:B0:60:0E:B9:98:EC:DC:CE:C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3232332e302f32342d3234203d3e203535363638.roa
Signing time:             Sun 03 May 2026 02:45:36 +0000
ROA not before:           Sun 03 May 2026 02:40:36 +0000
ROA not after:            Sun 02 May 2027 02:45:36 +0000
asID:                     55668
IP address blocks:        49.236.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.crl
                          rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:98:07:63:b8:67:ed:98:cc:7b:a6:17:22:da:b9:cb:9f:f7:3c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777E6650C707BC53014C9FB0600EB998ECDCCEC8
        Validity
            Not Before: May  3 02:40:36 2026 GMT
            Not After : May  2 02:45:36 2027 GMT
        Subject: CN=6198D721D20A4FABD13234E848C47D2FB28AC693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:6f:a9:65:d8:75:88:91:08:ee:33:49:2e:
                    9d:33:1e:93:0c:bf:20:79:a1:4a:28:9b:8f:34:f9:
                    2f:f3:ab:6a:d1:16:80:f9:eb:d3:10:95:34:53:13:
                    b7:f6:e2:95:89:a1:62:c4:20:c2:13:5c:ba:af:6e:
                    02:84:f9:a8:30:d3:e2:af:d8:fb:e1:b8:6f:91:1a:
                    f0:99:c2:40:8c:f5:55:e9:25:95:2d:0e:51:31:84:
                    5c:3d:a5:19:98:64:a0:35:20:c8:f2:e3:f9:f5:30:
                    c4:78:89:96:c4:f8:33:79:1f:05:b6:d2:9f:6c:ab:
                    59:e6:64:12:96:b2:43:b2:26:3a:ad:2f:17:a1:c1:
                    1e:d1:34:8f:d6:0a:e7:43:92:a5:24:02:2c:24:d4:
                    e8:a6:77:cb:61:26:9a:70:ed:51:39:75:86:9c:a7:
                    50:04:18:b8:8c:ff:eb:a9:8a:02:0e:04:6f:44:e8:
                    4a:1a:70:9d:dd:be:38:68:d5:2e:0a:f7:2c:e3:9c:
                    50:e5:0b:2a:da:19:f4:9d:e9:f8:74:da:79:5c:c1:
                    de:4d:af:70:69:b1:e2:bf:65:94:ed:c3:76:64:aa:
                    f5:8d:34:fc:2e:3a:10:0f:fa:1b:4b:a0:5b:4c:53:
                    ae:95:14:4c:e2:db:bf:63:6d:36:29:c9:cd:99:17:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:98:D7:21:D2:0A:4F:AB:D1:32:34:E8:48:C4:7D:2F:B2:8A:C6:93
            X509v3 Authority Key Identifier:
                keyid:77:7E:66:50:C7:07:BC:53:01:4C:9F:B0:60:0E:B9:98:EC:DC:CE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3232332e302f32342d3234203d3e203535363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.236.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:23:62:24:a5:58:b0:42:b1:3b:e9:cd:9f:55:ad:b9:2f:
         02:ef:e8:39:7d:ad:85:cd:f5:a9:c4:17:2b:b2:71:be:74:ed:
         f1:66:84:1b:de:e6:30:df:58:f4:aa:fe:b8:5d:74:6f:92:59:
         9a:13:79:c2:5b:f2:50:17:b2:91:50:20:4c:0c:b4:a9:b1:cb:
         dc:de:a6:5f:10:04:88:45:64:ff:8d:53:e5:cd:32:ed:a5:f8:
         5d:3f:2f:c8:50:37:d1:be:fc:e9:3e:ea:89:0f:e7:2f:22:36:
         60:32:e6:2f:e2:59:2a:be:1c:f9:69:53:06:62:2f:04:5e:73:
         dd:c2:80:9a:33:ad:10:68:aa:5a:36:6a:42:7b:9b:c1:e1:2a:
         41:15:9c:c2:86:da:7b:f0:d1:30:46:a1:8f:f9:66:36:4f:57:
         72:88:11:6e:d4:da:19:9a:13:9c:a3:74:e6:35:79:23:0e:ba:
         7d:9f:f9:ea:5a:0c:4f:12:fa:73:83:ab:df:9e:de:25:31:fc:
         bb:da:82:6d:03:08:0f:79:4f:d4:c7:5f:97:f1:a3:54:50:24:
         3f:48:98:a6:3f:6b:25:20:c0:a8:77:60:84:57:28:92:9d:5d:
         86:da:d7:f6:b1:8a:37:9d:5b:3f:10:15:03:1e:c7:ec:1a:7a:
         a9:75:da:62
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdpgHY7hn7ZjMe6YXItq5y5/3PPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3RTY2NTBDNzA3QkM1MzAxNEM5RkIwNjAwRUI5OThF
Q0RDQ0VDODAeFw0yNjA1MDMwMjQwMzZaFw0yNzA1MDIwMjQ1MzZaMDMxMTAvBgNV
BAMTKDYxOThENzIxRDIwQTRGQUJEMTMyMzRFODQ4QzQ3RDJGQjI4QUM2OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvT2+pZdh1iJEI7jNJLp0zHpMM
vyB5oUoom480+S/zq2rRFoD569MQlTRTE7f24pWJoWLEIMITXLqvbgKE+agw0+Kv
2PvhuG+RGvCZwkCM9VXpJZUtDlExhFw9pRmYZKA1IMjy4/n1MMR4iZbE+DN5HwW2
0p9sq1nmZBKWskOyJjqtLxehwR7RNI/WCudDkqUkAiwk1Oimd8thJppw7VE5dYac
p1AEGLiM/+upigIOBG9E6EoacJ3dvjho1S4K9yzjnFDlCyraGfSd6fh02nlcwd5N
r3BpseK/ZZTtw3ZkqvWNNPwuOhAP+htLoFtMU66VFEzi279jbTYpyc2ZF7y3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUYZjXIdIKT6vRMjToSMR9L7KKxpMwHwYDVR0j
BBgwFoAUd35mUMcHvFMBTJ+wYA65mOzczsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2QwZjk5YzMtZTU2Ny00MWFlLWFhMDAtMjZjYjk3ODFmYmU5LzAvNzc3RTY2NTBD
NzA3QkM1MzAxNEM5RkIwNjAwRUI5OThFQ0RDQ0VDOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NzdFNjY1MEM3MDdCQzUzMDE0QzlGQjA2MDBFQjk5OEVDREND
RUM4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdkMGY5OWMzLWU1NjctNDFhZS1h
YTAwLTI2Y2I5NzgxZmJlOS8wLzM0MzkyZTMyMzMzNjJlMzIzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADHs3zANBgkqhkiG
9w0BAQsFAAOCAQEASr8jYiSlWLBCsTvpzZ9VrbkvAu/oOX2thc31qcQXK7JxvnTt
8WaEG97mMN9Y9Kr+uF10b5JZmhN5wlvyUBeykVAgTAy0qbHL3N6mXxAEiEVk/41T
5c0y7aX4XT8vyFA30b786T7qiQ/nLyI2YDLmL+JZKr4c+WlTBmIvBF5z3cKAmjOt
EGiqWjZqQnubweEqQRWcwobae/DRMEahj/lmNk9XcogRbtTaGZoTnKN05jV5Iw66
fZ/56loMTxL6c4Or357eJTH8u9qCbQMID3lP1Mdfl/GjVFAkP0iYpj9rJSDAqHdg
hFcokp1dhtrX9rGKN51bPxAVAx7H7Bp6qXXaYg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:47 2026 by rpki-client