Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa
File:                     33362e35302e35372e302f32342d3234203d3e20313532303239.roa (raw, json)
Hash identifier:          ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=
Subject key identifier:   87:F5:B9:A6:3B:D7:C0:BC:45:BA:16:17:BE:40:CA:6A:7E:C0:33:2F
Certificate issuer:       /CN=C9C56B3341FC31139F57F78A815CF9851E91375E
Certificate serial:       48EE95BBE8B61AAF7D3B0604E689D5F148689EE0
Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa
Signing time:             Sun 03 May 2026 02:54:25 +0000
ROA not before:           Sun 03 May 2026 02:49:25 +0000
ROA not after:            Sun 02 May 2027 02:54:25 +0000
asID:                     152029
IP address blocks:        36.50.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl
                          rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ee:95:bb:e8:b6:1a:af:7d:3b:06:04:e6:89:d5:f1:48:68:9e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E
        Validity
            Not Before: May  3 02:49:25 2026 GMT
            Not After : May  2 02:54:25 2027 GMT
        Subject: CN=87F5B9A63BD7C0BC45BA1617BE40CA6A7EC0332F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:4d:f3:ac:39:83:14:2e:43:59:35:6a:9c:
                    23:a4:94:96:d9:54:a9:43:70:cf:fe:52:38:5c:bd:
                    dd:0e:87:93:cb:18:86:c9:85:9f:5b:4c:35:f7:09:
                    7f:80:1c:da:24:39:23:1f:b7:35:18:e4:9d:40:32:
                    cc:92:70:cb:a0:2d:03:c2:ca:65:c8:f7:7f:91:8d:
                    4b:5f:c2:7e:57:15:c6:ae:97:6c:20:30:62:06:a0:
                    92:13:e6:e1:6f:43:82:32:d7:6e:5c:f9:a7:58:a8:
                    e8:1f:14:6e:1d:24:eb:e8:f7:bb:1d:b1:e9:46:95:
                    8f:59:3b:9c:68:82:f3:e2:64:ad:0d:0a:77:52:8c:
                    99:85:88:9a:cf:cd:66:55:b3:2d:91:70:ff:d5:3f:
                    04:b7:82:25:8f:10:73:6c:b7:6b:99:1f:ea:4c:90:
                    3a:f1:d5:c1:1f:d6:be:3a:08:bd:c7:52:bc:6e:52:
                    e2:b0:37:86:81:33:c2:64:23:45:dc:13:d8:84:aa:
                    cd:bb:d2:ef:c0:6d:cb:6e:94:3f:ce:5f:49:61:da:
                    92:77:3a:61:08:d6:e9:0a:10:15:93:a7:3c:0a:e6:
                    21:3d:fe:76:94:0f:56:13:69:1f:c3:aa:6d:08:03:
                    39:d9:0f:2a:0f:60:32:53:52:40:f2:d9:f2:f6:f6:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F5:B9:A6:3B:D7:C0:BC:45:BA:16:17:BE:40:CA:6A:7E:C0:33:2F
            X509v3 Authority Key Identifier:
                keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c8:d7:c8:a3:7d:52:8b:7f:0f:d1:54:94:7d:25:0d:0e:f6:
         e4:2d:90:dc:56:bf:3e:9f:34:47:e1:74:42:50:1c:d9:89:74:
         94:8d:14:a4:27:d6:9b:30:99:34:07:77:30:d5:e4:d6:c3:a0:
         5f:99:54:dd:f4:51:d2:c9:97:4d:71:89:e0:5c:ce:0c:47:14:
         4e:7f:c5:9a:fb:0d:12:a2:eb:0f:7f:83:14:bd:55:c9:5f:26:
         6d:81:52:85:09:6c:91:85:a3:bf:22:d4:22:e8:87:18:10:73:
         a4:6e:ca:45:43:68:26:d6:ae:eb:07:1d:b8:f4:93:ac:c3:17:
         cf:18:9d:e3:a4:29:35:89:e6:6f:8e:ff:1d:c1:61:1a:91:f4:
         cf:6d:a7:3e:67:2c:f2:a1:7f:27:2d:f2:4f:c0:08:a5:f9:61:
         1d:15:2a:1a:87:db:f1:a7:1c:03:90:54:84:76:16:5f:7e:65:
         5f:d1:5a:51:f7:12:6f:7c:5e:39:18:69:dd:c4:35:f1:ac:19:
         eb:2d:a7:1c:41:db:f1:3e:eb:fc:b6:36:9e:42:c7:de:21:ad:
         ce:eb:41:e3:62:9a:59:26:4d:7f:ec:b6:6c:26:57:90:83:dd:
         49:7d:66:93:5b:a3:2d:4d:d0:6c:5c:db:72:2e:82:67:ac:24:
         2b:e3:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:16 2026 by rpki-client