Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa
File:                     33362e35302e35362e302f32332d3233203d3e20313532303239.roa (raw, json)
Hash identifier:          YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=
Subject key identifier:   5D:CE:A6:02:E1:A3:DC:A8:B3:E9:13:4B:58:25:FB:F2:56:BB:B1:37
Certificate issuer:       /CN=C9C56B3341FC31139F57F78A815CF9851E91375E
Certificate serial:       3CB784BEE1E69B38722B6688E938DD740BD498F7
Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa
Signing time:             Sun 03 May 2026 02:54:25 +0000
ROA not before:           Sun 03 May 2026 02:49:25 +0000
ROA not after:            Sun 02 May 2027 02:54:25 +0000
asID:                     152029
IP address blocks:        36.50.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl
                          rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b7:84:be:e1:e6:9b:38:72:2b:66:88:e9:38:dd:74:0b:d4:98:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E
        Validity
            Not Before: May  3 02:49:25 2026 GMT
            Not After : May  2 02:54:25 2027 GMT
        Subject: CN=5DCEA602E1A3DCA8B3E9134B5825FBF256BBB137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:50:81:2b:fc:82:a3:71:f0:d3:06:d6:a1:
                    b1:83:a9:bd:ea:a1:a9:b3:67:7d:b1:3c:c7:ee:00:
                    e3:39:2e:9f:8d:15:00:8c:93:2b:77:f3:d3:5a:a0:
                    c5:c0:82:e5:68:e8:61:56:c6:a6:c0:91:5f:16:56:
                    05:11:09:e7:88:05:c4:1f:d7:44:ff:ed:82:6f:16:
                    9e:9a:a7:48:c9:d8:fe:a7:de:28:34:ee:6a:0d:69:
                    0f:bb:62:dd:90:65:9f:1a:a5:ad:3d:82:be:47:09:
                    ed:19:00:a8:b0:3b:ab:de:17:f0:92:f4:30:f3:dd:
                    74:a0:84:b0:73:0a:74:50:f2:7e:86:32:81:bc:26:
                    b5:2b:8f:36:c6:4b:11:f8:41:20:bf:3d:89:50:de:
                    c2:df:5e:7b:1c:47:a1:47:08:9f:82:29:bd:fe:ca:
                    e9:d0:14:35:f2:d4:5b:35:66:cf:ff:ab:63:11:a8:
                    b2:a6:f5:6b:0f:d8:71:06:19:73:5b:03:6f:13:74:
                    62:34:37:3c:ad:43:3a:96:62:a5:eb:82:58:ef:6f:
                    08:36:06:cc:83:d7:7e:75:1b:c7:c5:53:bd:f4:37:
                    d3:35:bc:d3:a3:29:52:b9:99:76:13:ce:40:83:6d:
                    09:63:2f:e2:4a:58:e7:ba:72:a1:0f:74:5d:94:7a:
                    23:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:A6:02:E1:A3:DC:A8:B3:E9:13:4B:58:25:FB:F2:56:BB:B1:37
            X509v3 Authority Key Identifier:
                keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:5e:e5:3d:13:f3:f8:c1:11:38:6e:0c:84:fb:79:73:c6:58:
         5f:85:68:9a:32:04:d6:e7:a3:3c:9f:f6:e7:f0:9d:7f:53:5c:
         45:c9:32:d4:92:36:52:ce:47:93:4a:c1:0d:6e:ae:82:ea:bc:
         bf:a5:6e:04:8e:8d:e4:16:31:e8:db:b3:6d:43:a3:bd:08:eb:
         fe:1e:64:52:db:33:18:e9:73:c7:c8:52:29:3a:ac:a7:ee:26:
         30:1a:b3:ac:85:dc:8a:85:22:01:1e:d4:5e:cc:dd:c8:94:ca:
         73:39:9c:08:c9:aa:35:fb:73:54:94:e2:5f:15:2d:ac:4b:b8:
         d2:f1:f0:37:97:2b:8f:d0:4a:b3:b1:d3:68:52:bb:08:13:c8:
         f9:90:53:f0:45:f9:41:76:ae:8b:29:bc:a3:3d:5d:3f:8f:32:
         9b:f7:cb:92:70:57:84:b8:c2:1e:7a:f4:27:16:82:9a:4a:dd:
         26:32:f2:6d:cb:fa:01:a8:34:8c:39:a0:88:4f:0e:c5:1e:2e:
         64:33:d7:ce:48:eb:c2:1f:aa:a0:b4:5a:a0:4a:a3:67:3f:7a:
         fb:b8:c2:53:4a:29:9f:87:4d:08:c2:b5:b2:8f:13:14:92:e2:
         18:41:1d:5c:c6:ba:94:c8:1a:af:50:fc:cf:ad:75:a4:f6:4d:
         ad:9a:88:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:55 2026 by rpki-client