Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32342d3234203d3e203338373533.roa
File:                     34352e3131352e36362e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          qRwwmBsknDfOtkgT9DU89mbMerOBSmUMAPghIOd0vu4=
Subject key identifier:   BC:C2:24:E2:94:7D:E4:8A:66:A6:0D:62:D3:9C:2D:BD:D1:61:5C:11
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       5761349C3239CEFB9CE2DC31FEC1B373DA8C2B
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32342d3234203d3e203338373533.roa
Signing time:             Sun 03 May 2026 02:55:21 +0000
ROA not before:           Sun 03 May 2026 02:50:21 +0000
ROA not after:            Sun 02 May 2027 02:55:21 +0000
asID:                     38753
IP address blocks:        45.115.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:61:34:9c:32:39:ce:fb:9c:e2:dc:31:fe:c1:b3:73:da:8c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: May  3 02:50:21 2026 GMT
            Not After : May  2 02:55:21 2027 GMT
        Subject: CN=BCC224E2947DE48A66A60D62D39C2DBDD1615C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:11:aa:13:91:72:fd:e8:d7:63:4f:bb:8f:d0:
                    91:b8:29:00:6a:f0:fb:e8:b7:d4:2d:d3:30:6c:8d:
                    04:c8:fa:d3:36:ca:c5:63:03:07:8f:e1:cb:65:a9:
                    0b:80:a3:a4:20:98:de:65:d3:cd:3d:fe:b2:ca:28:
                    01:e4:e8:e0:4b:6f:f4:9d:b0:eb:62:39:fa:c9:62:
                    03:c9:6e:03:2f:1e:26:a4:3b:a7:43:6e:c3:51:df:
                    a0:b0:06:2a:45:c8:b6:a7:0c:c0:03:5c:af:8e:9a:
                    a2:ec:a6:52:01:40:34:13:58:fe:a5:48:0a:06:ff:
                    83:60:97:bd:75:92:80:e9:d1:37:3e:4e:95:16:b6:
                    8c:c6:97:91:1e:ea:de:bb:20:1c:2f:13:bb:25:0b:
                    12:78:50:5d:5a:5b:78:80:6f:65:a3:ab:f6:d6:11:
                    ed:3b:31:7d:2c:51:a3:bc:5d:92:c4:9d:c5:51:f0:
                    e7:57:d6:fb:ed:6a:e1:d6:e8:80:a7:88:4d:ec:15:
                    aa:35:35:0f:56:d6:66:97:56:18:f8:43:fa:70:04:
                    41:e2:16:ae:75:cb:af:40:03:96:95:8b:7f:57:95:
                    5b:44:16:24:63:97:e1:af:db:d2:ab:b7:55:e2:ff:
                    0e:d8:b1:da:50:26:b8:85:39:d8:6b:ce:4a:54:e9:
                    56:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C2:24:E2:94:7D:E4:8A:66:A6:0D:62:D3:9C:2D:BD:D1:61:5C:11
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:a6:f4:3d:d3:a3:30:26:09:4b:60:cb:a0:30:9e:46:99:87:
         7f:e5:f6:3d:bd:d7:85:44:c0:23:f0:17:6e:a0:76:fd:af:7b:
         9d:25:6b:ee:31:88:96:b5:e0:2e:d4:2f:96:ee:04:e6:c8:87:
         07:30:23:1e:e8:46:29:98:a4:f7:fd:d2:72:de:b9:25:58:2e:
         18:3e:7c:07:23:7a:5f:79:96:ee:23:82:08:90:12:b9:70:d0:
         56:c2:6f:93:a5:e9:08:2f:9a:a8:e2:03:9f:db:71:9a:cc:bb:
         8f:a0:48:fe:f5:3c:94:d3:0c:bc:e0:75:1a:74:d9:01:94:ae:
         13:e4:33:20:82:df:cc:1f:8b:b8:42:aa:27:d3:74:0e:f7:64:
         9c:7b:9c:e8:e3:2c:1c:5a:18:a2:67:31:87:af:eb:ba:ec:c6:
         39:c7:32:d5:20:f6:7d:0f:37:28:0b:91:33:5e:cc:13:d8:f2:
         fc:f5:9a:b9:83:39:4c:c4:1e:c6:5f:1a:6a:2f:35:34:fe:d6:
         95:1f:34:6c:e9:8b:15:34:6f:6b:95:26:b8:1a:a5:9e:7f:b8:
         7c:1e:46:66:a8:6e:bb:4a:02:24:01:5a:55:32:76:08:86:f3:
         12:75:37:5f:9e:f7:63:6e:aa:a9:b1:aa:c0:79:ae:95:ab:c8:
         ea:80:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:45 2026 by rpki-client