Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32342d3234203d3e203338373533.roa
File:                     34352e3131352e36342e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          DqzG24Vg8g2xb67c7EJxvNA8CN9DoJSM8FWnsHw+np8=
Subject key identifier:   79:C3:0D:57:5C:CE:5D:07:E9:CD:04:3D:D3:39:AD:F4:76:D5:25:B2
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       15FAB3C5E114FCA26F456A91E731E0A80D6448B7
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32342d3234203d3e203338373533.roa
Signing time:             Sun 03 May 2026 02:55:28 +0000
ROA not before:           Sun 03 May 2026 02:50:28 +0000
ROA not after:            Sun 02 May 2027 02:55:28 +0000
asID:                     38753
IP address blocks:        45.115.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fa:b3:c5:e1:14:fc:a2:6f:45:6a:91:e7:31:e0:a8:0d:64:48:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: May  3 02:50:28 2026 GMT
            Not After : May  2 02:55:28 2027 GMT
        Subject: CN=79C30D575CCE5D07E9CD043DD339ADF476D525B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:d5:9a:8b:fa:68:18:84:a7:76:df:dd:02:
                    aa:c0:96:23:9b:99:59:a5:ca:61:21:7e:c8:6f:06:
                    78:9e:f5:96:29:fb:be:31:4f:9f:f0:aa:c2:3e:46:
                    ab:24:cc:4c:5f:12:18:43:c6:3f:27:52:c2:a9:cc:
                    40:bd:f7:f8:66:08:33:74:d0:20:22:ab:61:b4:06:
                    43:f6:10:84:eb:ab:98:cd:49:32:17:03:7f:0c:4a:
                    fc:84:4e:56:ea:62:78:ae:56:86:6d:bf:1b:22:6b:
                    4e:6d:0a:b8:cf:e2:40:b8:11:28:7c:bb:98:b1:1d:
                    90:a5:61:6d:5e:75:64:7d:01:a9:4e:2e:8c:d1:9f:
                    2b:e5:21:da:91:c0:44:7c:27:b7:b9:be:1c:f4:08:
                    3a:68:2b:e4:1f:0a:9c:b9:41:dd:e5:91:ed:33:f4:
                    e7:de:a2:15:49:a5:47:22:68:dc:f8:b3:c0:3f:20:
                    82:74:5e:0d:04:e6:b1:41:2a:4f:f6:3e:18:3a:fe:
                    57:21:26:69:c8:5f:24:ea:eb:bd:0b:e4:52:63:f4:
                    2c:be:39:aa:0f:98:5a:b7:60:ef:d5:76:7a:8e:c9:
                    98:39:46:41:d4:ab:62:88:5f:12:1b:b5:f9:77:6b:
                    cd:ca:82:49:26:c6:91:1d:02:03:8d:bd:2c:11:f1:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C3:0D:57:5C:CE:5D:07:E9:CD:04:3D:D3:39:AD:F4:76:D5:25:B2
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:29:51:e7:6e:89:a4:a7:24:13:ca:69:2c:69:16:a6:2f:64:
         eb:cf:59:81:72:74:a0:ff:0a:4f:79:e2:f2:75:54:ee:be:75:
         32:7e:3d:ea:2d:56:ea:8a:4b:c5:8c:83:b0:db:b2:6a:7b:38:
         cd:7b:4a:48:cb:3e:65:3c:d8:16:00:b2:ae:06:77:8a:e3:20:
         bd:bb:21:3d:7c:64:41:56:b1:03:a9:5a:e9:a4:22:1e:f1:83:
         a1:03:52:db:ef:19:4b:40:6d:2e:31:61:35:d2:fb:ec:b0:c3:
         3d:81:21:53:3b:0a:cd:cb:18:c3:0c:78:d1:20:b1:a5:04:c9:
         67:91:f8:00:40:4a:43:37:ac:f1:f1:0f:52:57:c6:58:c1:f2:
         61:9b:c7:b6:03:4e:f9:81:9b:95:35:8f:32:ab:30:2b:15:ab:
         08:ff:c5:11:36:84:c6:ae:67:60:ad:26:76:73:30:57:de:e2:
         a7:19:52:62:f8:73:b0:9c:60:fd:83:2e:56:b1:84:96:7c:9c:
         68:6f:bb:38:ee:e8:8b:1c:b3:a0:6a:4c:a2:4f:a0:0a:76:99:
         5b:e6:5b:d5:c7:b8:af:85:61:1f:4d:d2:dd:42:f9:bd:94:86:
         23:f8:a1:aa:fc:a5:e7:a4:ed:a8:54:26:21:77:8b:97:a0:e3:
         ca:60:31:d8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUFfqzxeEU/KJvRWqR5zHgqA1kSLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU1QUYyRDQxQzdDODRCRkUzNTRGODY0OEVFMzI3MTU4
NDQ1MkM3OTAeFw0yNjA1MDMwMjUwMjhaFw0yNzA1MDIwMjU1MjhaMDMxMTAvBgNV
BAMTKDc5QzMwRDU3NUNDRTVEMDdFOUNEMDQzREQzMzlBREY0NzZENTI1QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqdWai/poGISndt/dAqrAliOb
mVmlymEhfshvBnie9ZYp+74xT5/wqsI+RqskzExfEhhDxj8nUsKpzEC99/hmCDN0
0CAiq2G0BkP2EITrq5jNSTIXA38MSvyETlbqYniuVoZtvxsia05tCrjP4kC4ESh8
u5ixHZClYW1edWR9AalOLozRnyvlIdqRwER8J7e5vhz0CDpoK+QfCpy5Qd3lke0z
9OfeohVJpUciaNz4s8A/IIJ0Xg0E5rFBKk/2Phg6/lchJmnIXyTq670L5FJj9Cy+
OaoPmFq3YO/VdnqOyZg5RkHUq2KIXxIbtfl3a83KgkkmxpEdAgONvSwR8RJ/AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUecMNV1zOXQfpzQQ90zmt9HbVJbIwHwYDVR0j
BBgwFoAUlVry1Bx8hL/jVPhkjuMnFYRFLHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTA2YjY2NzMtNDdhMS00NWU1LWI2YzItNDJhYjhiNDc2MjQ5LzAvOTU1QUYyRDQx
QzdDODRCRkUzNTRGODY0OEVFMzI3MTU4NDQ1MkM3OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NTVBRjJENDFDN0M4NEJGRTM1NEY4NjQ4RUUzMjcxNTg0NDUy
Qzc5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i
NmMyLTQyYWI4YjQ3NjI0OS8wLzM0MzUyZTMxMzEzNTJlMzYzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtc0AwDQYJKoZIhvcN
AQELBQADggEBAGkpUeduiaSnJBPKaSxpFqYvZOvPWYFydKD/Ck954vJ1VO6+dTJ+
PeotVuqKS8WMg7Dbsmp7OM17SkjLPmU82BYAsq4Gd4rjIL27IT18ZEFWsQOpWumk
Ih7xg6EDUtvvGUtAbS4xYTXS++ywwz2BIVM7Cs3LGMMMeNEgsaUEyWeR+ABASkM3
rPHxD1JXxljB8mGbx7YDTvmBm5U1jzKrMCsVqwj/xRE2hMauZ2CtJnZzMFfe4qcZ
UmL4c7CcYP2DLlaxhJZ8nGhvuzju6Iscs6BqTKJPoAp2mVvmW9XHuK+FYR9N0t1C
+b2UhiP4oar8peek7ahUJiF3i5eg48pgMdg=
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:38 2026 by rpki-client