Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32332d3233203d3e203338373533.roa
File:                     34352e3131352e36342e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier:          qA5izsUhsz93UcxLKKPJd1LGCBwCjh+E68bqfDzbYt4=
Subject key identifier:   31:46:A4:BC:26:32:D7:6D:5D:D0:2D:C3:12:89:17:A7:E6:81:03:69
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       683FF0B0112F4A8E6E66782E73CE121629574F27
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32332d3233203d3e203338373533.roa
Signing time:             Sun 03 May 2026 02:55:28 +0000
ROA not before:           Sun 03 May 2026 02:50:28 +0000
ROA not after:            Sun 02 May 2027 02:55:28 +0000
asID:                     38753
IP address blocks:        45.115.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3f:f0:b0:11:2f:4a:8e:6e:66:78:2e:73:ce:12:16:29:57:4f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: May  3 02:50:28 2026 GMT
            Not After : May  2 02:55:28 2027 GMT
        Subject: CN=3146A4BC2632D76D5DD02DC3128917A7E6810369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:f9:f6:b5:ca:b6:29:37:b1:12:bd:bc:3c:
                    47:db:ae:42:55:9a:be:69:5f:02:4b:bd:d2:94:12:
                    6a:6a:38:2f:fd:e0:01:3a:1d:54:6a:2c:4b:7e:c1:
                    4c:b0:1d:cd:a5:63:fe:77:b9:26:6d:12:14:a8:e4:
                    31:9c:cf:f5:75:de:ce:e4:b0:df:04:c4:13:27:06:
                    db:a9:5c:9c:1f:26:a9:6b:04:e2:63:c1:a3:0f:e9:
                    57:e0:dc:16:2d:f4:5f:56:f7:90:06:fb:f4:0c:23:
                    24:cf:64:59:3a:ed:05:1e:7f:6f:71:b3:84:e7:b9:
                    72:ff:aa:4f:e1:a2:2e:bb:79:b7:f2:b3:20:e8:94:
                    38:a2:b6:24:bf:c4:88:a0:98:d7:ac:0e:4d:16:72:
                    87:b3:45:81:80:f1:f5:78:a4:cf:91:43:a1:ee:07:
                    f4:63:2f:1e:f5:9f:f6:bc:2f:cc:d0:a2:65:62:61:
                    e9:ca:7e:3c:30:71:6a:3b:61:e5:9b:9d:13:c6:31:
                    cc:7d:96:bd:8d:ce:ff:ab:3b:2b:47:48:05:0f:b7:
                    24:c7:d7:87:4f:a4:a7:70:05:74:de:7e:ed:b6:39:
                    a2:35:13:98:61:76:83:58:6e:4a:e1:0e:e1:87:ca:
                    fc:a8:ff:9f:ff:32:b6:78:63:7d:41:9b:78:ea:4e:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:46:A4:BC:26:32:D7:6D:5D:D0:2D:C3:12:89:17:A7:E6:81:03:69
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32332d3233203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d5:d8:76:90:4f:f9:98:59:e3:55:11:e6:bc:5a:87:46:0a:50:
         43:c0:e1:57:12:f5:04:fa:2e:81:46:57:40:34:5f:3b:81:3d:
         d5:9d:d0:bf:8d:da:46:74:73:03:f0:29:c1:30:0b:79:9a:d0:
         7b:9a:5d:01:eb:7d:c3:cb:15:0b:20:ad:f2:ba:4a:fc:f9:8c:
         75:da:b4:80:9b:13:f9:df:8c:f9:ae:0e:e5:8b:2f:53:f4:2a:
         d5:7e:1d:a3:a4:56:0b:14:2d:ea:2b:ba:96:a2:e0:1e:dc:65:
         51:b6:fe:23:61:75:b6:4c:50:81:86:4d:bc:c6:a7:7e:45:22:
         bc:dd:32:83:9a:13:82:58:4d:ae:54:7a:83:fa:91:80:59:67:
         93:9f:eb:9c:8f:ff:a4:4b:80:36:95:1d:91:72:03:a5:91:d5:
         65:68:1a:d3:a2:08:dd:27:42:f0:dc:ce:e0:ce:e5:07:1b:4c:
         b4:01:ab:09:9e:9b:bd:aa:a9:b3:ac:60:29:d1:6d:93:6a:ec:
         5c:8c:9f:ee:c5:3e:ab:18:bc:46:4d:bc:5d:de:7d:79:7d:a2:
         15:a1:17:e1:3d:f8:82:bc:34:54:23:ea:84:c2:63:ea:5f:0b:
         a7:68:42:94:e1:20:1f:c2:45:68:00:b1:25:31:ca:9f:14:74:
         7b:54:e4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:30 2026 by rpki-client