Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32342d3234203d3e20313532303239.roa
File:                     33362e35302e35362e302f32342d3234203d3e20313532303239.roa (raw, json)
Hash identifier:          UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=
Subject key identifier:   E2:65:00:90:A2:A2:6B:B6:74:5D:13:69:24:C8:3C:A9:2B:A9:CE:4E
Certificate issuer:       /CN=C9C56B3341FC31139F57F78A815CF9851E91375E
Certificate serial:       6A8FA42F6B46D4A4B60CACA65FB977A58681212B
Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32342d3234203d3e20313532303239.roa
Signing time:             Sun 03 May 2026 02:54:26 +0000
ROA not before:           Sun 03 May 2026 02:49:26 +0000
ROA not after:            Sun 02 May 2027 02:54:26 +0000
asID:                     152029
IP address blocks:        36.50.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl
                          rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8f:a4:2f:6b:46:d4:a4:b6:0c:ac:a6:5f:b9:77:a5:86:81:21:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E
        Validity
            Not Before: May  3 02:49:26 2026 GMT
            Not After : May  2 02:54:26 2027 GMT
        Subject: CN=E2650090A2A26BB6745D136924C83CA92BA9CE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:09:5f:58:3d:ee:c0:33:1b:f0:81:d4:b7:
                    1e:9e:61:5e:04:9c:58:c4:f3:44:a4:b4:48:4e:68:
                    7b:80:24:4c:b5:12:1a:26:62:cb:e2:f1:20:9b:4e:
                    e7:92:09:bb:3a:7b:45:85:2a:ee:0a:c1:65:6f:bd:
                    94:59:0c:57:9d:06:67:e5:19:98:0f:49:20:42:72:
                    e3:d9:22:fe:57:80:12:1e:5c:47:f2:d5:ad:df:bd:
                    d1:d5:a3:6c:ee:99:5f:cc:35:5b:55:46:9d:76:00:
                    b2:32:5c:01:b7:d2:6a:e8:fb:1d:40:15:d0:a2:e1:
                    8e:29:76:89:38:0e:93:fc:20:a9:8c:a4:9a:3c:97:
                    b7:7c:7e:cd:2c:d1:0f:96:10:24:7f:59:66:34:69:
                    4a:6d:31:69:94:72:2a:08:29:4d:16:31:37:ed:60:
                    15:80:30:9b:91:96:e6:23:f9:a7:04:90:8a:74:0c:
                    f6:51:d5:50:df:ca:eb:6c:66:d8:21:49:dd:be:6f:
                    4d:03:d1:c8:f6:1b:e3:38:e7:5b:a6:f8:d5:58:9e:
                    1f:a2:bf:82:e1:e2:e6:6f:11:c1:ce:bb:b7:52:9f:
                    b0:ea:02:17:63:b8:96:65:0b:5f:e7:f1:3e:61:61:
                    2b:b6:df:35:32:9e:98:d8:ad:79:ed:ef:86:94:16:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:65:00:90:A2:A2:6B:B6:74:5D:13:69:24:C8:3C:A9:2B:A9:CE:4E
            X509v3 Authority Key Identifier:
                keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32342d3234203d3e20313532303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:79:71:df:0e:2b:d4:be:00:80:9d:59:b3:c7:c7:1e:e2:4e:
         0a:8d:17:75:12:de:6f:09:eb:57:32:6a:58:3b:1f:df:a8:b5:
         c9:9f:3b:9a:07:ee:0e:bc:5f:29:a8:f0:e0:f8:a4:53:93:bc:
         a6:3f:ac:e8:0e:ab:8a:84:96:db:66:49:2b:12:ba:14:ad:90:
         c5:e1:b8:2a:8a:08:d3:b3:3f:9b:46:b3:ae:81:14:ef:5f:c3:
         79:af:f8:59:28:b7:34:38:4f:d4:10:0a:c5:64:a7:70:ab:ea:
         43:fe:68:bd:85:51:0b:1e:5a:b3:39:6d:1e:94:b2:05:5f:75:
         04:e6:7e:16:bd:a4:bc:94:52:90:b6:be:4f:60:4e:1a:68:92:
         fa:78:f9:e4:9c:b8:cf:bf:1d:a7:c1:af:e1:88:d9:86:b9:df:
         1e:cc:40:0b:3b:1e:2f:76:3c:67:0f:74:28:eb:3e:86:df:a4:
         df:d8:47:25:dd:cd:8d:de:6e:96:9c:e3:45:c0:f9:59:e6:77:
         7b:c5:72:c4:80:13:57:58:fe:b3:f3:bc:fd:fe:43:29:5d:d5:
         bc:28:20:2c:bc:da:e3:18:e6:d9:92:71:5c:14:fe:65:a1:68:
         9d:61:3a:17:a6:d2:6b:59:2e:ce:ab:53:ea:a0:81:c7:e9:02:
         90:2a:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:28 2026 by rpki-client