Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS45305.roa
File:                     AS45305.roa (raw, json)
Hash identifier:          PfgfNM7dqbqt8ekh//zEu/i2Pp1pA5WTm4UZTXdiJsg=
Subject key identifier:   AC:33:48:FD:88:63:AB:B0:63:94:FD:A5:6D:99:79:78:F4:50:C5:48
Certificate issuer:       /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial:       0AC6D560CC8A374319B3BF93277CEA25FD4BA357
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS45305.roa
Signing time:             Sun 03 May 2026 05:56:24 +0000
ROA not before:           Sun 03 May 2026 05:51:24 +0000
ROA not after:            Sun 02 May 2027 05:56:24 +0000
asID:                     45305
IP address blocks:        160.19.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c6:d5:60:cc:8a:37:43:19:b3:bf:93:27:7c:ea:25:fd:4b:a3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
        Validity
            Not Before: May  3 05:51:24 2026 GMT
            Not After : May  2 05:56:24 2027 GMT
        Subject: CN=AC3348FD8863ABB06394FDA56D997978F450C548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:8f:c0:7b:ed:1c:63:e7:6e:a1:c7:5a:3a:
                    2c:57:b4:10:be:40:4e:5e:bc:09:99:aa:7e:3f:a1:
                    a0:68:9e:1b:68:2d:08:88:c2:2b:5e:ba:68:8d:34:
                    00:74:cb:00:6c:2f:e9:82:a0:67:bf:ca:96:9f:7c:
                    ea:fe:c9:e2:94:2e:f0:1a:b1:ea:35:68:ea:70:e5:
                    fd:f9:d2:68:72:4e:ae:0c:26:0e:96:91:f0:c3:33:
                    a9:47:cf:b1:10:46:b9:ad:a6:6d:ed:40:b0:16:04:
                    c0:2a:f8:29:df:4a:b2:c9:6c:2a:ac:9d:aa:55:cf:
                    8b:52:4e:c6:23:78:6c:3f:fa:83:12:d4:c2:09:05:
                    aa:7c:a4:97:32:cf:0b:17:e4:5c:39:e1:02:9e:6d:
                    4a:34:18:32:8a:b4:25:2e:76:88:4e:90:f3:36:91:
                    00:02:85:b0:c8:cf:4a:d1:59:82:95:2e:42:48:e3:
                    c6:ec:05:35:6f:b2:35:1d:38:a5:ca:00:05:07:05:
                    c3:06:cd:f2:28:93:e1:47:57:60:59:7b:eb:a6:b2:
                    97:dd:92:c2:ff:94:e2:15:0b:1a:8a:8e:2e:a1:fc:
                    dd:b8:a8:8f:9e:2c:5f:a0:20:f5:a6:b9:0b:7f:39:
                    2b:7e:52:33:15:a0:d2:e4:20:ac:17:7a:45:ca:84:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:33:48:FD:88:63:AB:B0:63:94:FD:A5:6D:99:79:78:F4:50:C5:48
            X509v3 Authority Key Identifier:
                keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS45305.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:78:9d:0e:cd:c5:28:63:c3:85:0c:48:21:56:57:8a:1e:41:
         31:7d:7f:e1:74:ad:8a:7f:ac:0a:3b:9a:de:66:dc:36:c5:df:
         91:21:ad:0b:3e:2a:67:cf:4b:27:ba:dd:8e:14:ff:73:65:ff:
         88:94:b1:58:08:1b:f5:2c:5e:c7:75:6a:2c:d3:ef:f6:bf:72:
         a6:1a:95:d8:b9:be:4a:b3:d0:93:f0:e7:57:7d:8b:4e:6b:b4:
         54:78:34:3c:58:e7:fe:bb:3d:11:13:9d:0b:55:1a:98:d5:1a:
         17:74:24:94:f9:78:ce:e9:b2:08:a8:82:22:d7:4b:c7:c9:e7:
         f3:97:76:6d:2f:ac:38:e5:27:6f:61:be:54:25:a1:a2:51:ec:
         8e:54:86:a5:17:fa:09:2f:a6:59:7c:95:ef:f6:b2:ee:68:f1:
         48:a8:0c:6c:99:0b:1f:ff:85:66:b3:5e:39:32:89:53:d4:cc:
         dd:60:8f:69:96:94:f0:7e:29:a6:e1:1e:21:74:89:db:a1:8c:
         34:77:f4:19:f8:ea:d4:f0:1c:a7:02:04:7c:b1:21:08:13:de:
         20:61:5c:08:e4:4a:c2:91:73:23:c5:fd:63:8f:59:31:f6:eb:
         fe:7b:7b:84:33:97:04:3e:88:23:a8:6f:6c:25:74:41:f9:e6:
         a1:55:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:58 2026 by rpki-client