Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36352e302f32342d3234203d3e203338373533.roa
File:                     34352e3131352e36352e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          0vqlBHk+tbUaLZBiq8YRfD6O3wmF77fIbLPXgx+HHxc=
Subject key identifier:   36:BF:7D:36:A9:72:A8:0D:5D:78:05:FE:D2:CF:5D:06:AA:92:D7:0A
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       50D75AEED53326A1248226525F73DECB3C8A9CF4
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36352e302f32342d3234203d3e203338373533.roa
Signing time:             Sun 03 May 2026 02:55:19 +0000
ROA not before:           Sun 03 May 2026 02:50:19 +0000
ROA not after:            Sun 02 May 2027 02:55:19 +0000
asID:                     38753
IP address blocks:        45.115.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d7:5a:ee:d5:33:26:a1:24:82:26:52:5f:73:de:cb:3c:8a:9c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: May  3 02:50:19 2026 GMT
            Not After : May  2 02:55:19 2027 GMT
        Subject: CN=36BF7D36A972A80D5D7805FED2CF5D06AA92D70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:92:c9:3f:4f:1e:59:8a:24:aa:fe:d1:2c:
                    66:6f:c5:31:a2:27:b7:8b:09:bf:68:a1:70:55:b0:
                    9e:16:5f:fe:6a:6f:ae:32:72:20:64:53:06:55:6a:
                    26:09:dc:99:36:30:7b:12:6a:f7:73:cc:15:72:fd:
                    41:e4:4c:12:3e:43:e7:f0:63:ac:47:43:de:ad:54:
                    9e:bd:f8:b5:54:2b:99:91:37:fd:a9:4c:bb:58:85:
                    00:0d:9e:72:7d:a4:db:9e:78:c8:14:d2:71:0f:26:
                    92:8c:8e:73:1d:6e:fd:bd:cc:61:ad:d1:c7:6d:f5:
                    02:4d:9c:1a:62:c8:9d:a8:ff:9f:d5:46:0f:90:8c:
                    8e:28:ea:e2:0a:e6:0b:c3:ca:ea:9b:94:1a:3c:fc:
                    cb:cd:37:f5:73:e8:54:35:61:86:24:b2:db:61:67:
                    78:46:49:4c:b1:8a:69:14:2c:3c:7e:91:8e:06:bc:
                    e7:78:86:96:44:64:5f:94:a3:20:ec:7f:f7:c4:04:
                    85:3a:ae:b6:b9:f7:4e:22:6a:59:42:c0:44:ca:e5:
                    7b:94:ed:5d:7e:af:86:c7:fc:16:1e:45:f7:fa:04:
                    39:b8:cc:ab:c3:81:36:28:ba:79:4a:89:f3:87:3e:
                    06:bb:33:b4:b1:9f:b3:95:c3:d9:7f:f6:c3:ea:89:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BF:7D:36:A9:72:A8:0D:5D:78:05:FE:D2:CF:5D:06:AA:92:D7:0A
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36352e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e8:19:5c:ad:f3:4a:23:5b:8f:40:fc:d6:ce:b6:a6:6f:cf:
         b4:dd:d3:5e:06:98:5b:e6:26:87:75:7f:f5:9d:66:1c:89:d2:
         75:45:b3:fb:da:48:7e:91:b8:06:f8:01:fb:67:3a:2c:13:31:
         37:5c:7f:2b:06:82:92:c6:f3:fa:45:38:10:c8:f9:e0:39:90:
         c8:06:3a:46:82:a2:f3:4f:da:9c:ed:ee:16:87:8e:93:78:25:
         92:b1:5a:af:15:dd:ef:ce:46:77:fb:af:3c:fe:5d:58:39:0d:
         2b:0b:dc:b7:28:83:e1:78:cb:72:cf:02:55:66:e8:10:95:db:
         7a:1e:74:92:57:02:e6:3c:10:d4:e5:ca:1b:97:8d:58:d2:06:
         d4:3b:c5:1b:20:a6:79:66:12:44:c9:9f:fd:e7:b5:e3:bf:ba:
         28:a6:2a:e2:cb:cc:b0:6b:29:55:b5:c5:a3:c7:3b:5c:b3:25:
         b9:f9:b1:d0:d2:a1:98:64:ab:b9:f4:dd:66:64:b4:07:aa:05:
         93:df:83:25:74:26:62:c5:7e:e2:71:f2:e3:88:80:77:61:59:
         ab:ac:3e:f9:ee:0a:f2:d5:5d:09:65:48:83:7c:60:6e:ae:04:
         e4:8f:00:45:19:8e:23:1c:11:03:87:b7:92:28:34:f3:60:2a:
         ac:6d:3a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:51 2026 by rpki-client