Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36372e302f32342d3234203d3e203338373533.roa
File:                     34352e3131352e36372e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          V3VFTjfw6JHfDwNHfBqmwL7xYBI+P1o53RpZqP/oI5k=
Subject key identifier:   B2:1D:78:B1:D4:D2:5B:6B:31:16:1C:89:44:8A:13:46:FF:28:94:0F
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       438C303A23D7B71E2ACF3271BA64B29FFD19358E
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36372e302f32342d3234203d3e203338373533.roa
Signing time:             Sun 03 May 2026 02:55:22 +0000
ROA not before:           Sun 03 May 2026 02:50:22 +0000
ROA not after:            Sun 02 May 2027 02:55:22 +0000
asID:                     38753
IP address blocks:        45.115.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8c:30:3a:23:d7:b7:1e:2a:cf:32:71:ba:64:b2:9f:fd:19:35:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: May  3 02:50:22 2026 GMT
            Not After : May  2 02:55:22 2027 GMT
        Subject: CN=B21D78B1D4D25B6B31161C89448A1346FF28940F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a6:e7:06:d0:ad:ec:69:6e:4e:77:4d:2a:38:
                    6d:99:3d:f9:39:9a:07:c9:3a:9f:02:de:fc:08:e1:
                    d1:72:fd:34:cb:e2:f4:17:33:a5:c7:85:6b:fe:b1:
                    80:c5:3e:e2:75:26:55:fd:e8:01:86:5d:2b:96:ae:
                    1e:ed:d7:af:a6:fc:b5:75:c3:4e:3f:ce:42:00:be:
                    08:28:4a:53:2b:03:fb:65:fc:8e:cc:64:11:8b:3b:
                    9a:9d:59:e1:d1:c1:18:5a:e9:cb:0b:19:4d:df:ca:
                    2c:be:09:f9:79:f7:47:a0:05:fe:ab:a7:7a:ee:26:
                    69:f0:e3:5d:df:7b:d6:6c:e5:f8:4b:2f:59:09:b9:
                    4a:96:39:17:c1:75:db:9f:d1:c6:e4:c1:46:cc:ec:
                    7b:ae:46:5f:72:2d:16:f6:60:31:87:62:da:5d:fd:
                    c4:84:8a:48:7c:6d:c2:01:0b:ce:e6:ee:d7:af:ae:
                    c0:2d:1c:d5:81:96:a0:98:dd:ce:ad:e0:60:bb:ec:
                    46:53:d2:34:40:4e:d7:4f:ff:5f:cd:34:d1:fc:0f:
                    bb:ea:00:da:cf:dd:1e:da:c8:8d:f0:4e:62:7c:6c:
                    80:d0:30:22:75:53:e5:46:85:df:e4:d8:a2:da:75:
                    a6:94:92:ac:d8:81:62:84:c5:e3:ee:6f:8a:2f:10:
                    c5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1D:78:B1:D4:D2:5B:6B:31:16:1C:89:44:8A:13:46:FF:28:94:0F
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36372e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:97:ab:0b:79:4f:28:17:a6:34:6a:27:64:84:89:8f:ae:c6:
         08:b6:f6:d0:69:f7:51:1f:da:26:9b:1b:53:01:67:dc:b8:d3:
         d8:91:54:d1:f6:a6:92:26:7b:c0:53:f1:54:6f:02:c6:0a:87:
         63:2a:a4:4d:55:28:6e:51:0a:bc:e2:1c:a1:66:c9:a0:42:6e:
         88:6c:4c:0d:7a:a3:fe:09:44:e2:a4:fd:84:28:12:cb:c6:1a:
         ce:43:82:05:47:08:55:54:12:1c:36:17:5d:e7:1e:d2:89:f4:
         20:97:9f:7f:1d:05:99:3d:0a:95:0c:30:74:7c:1e:b6:ae:71:
         06:d9:ef:c4:80:88:4c:4f:68:7f:c1:3e:93:8c:2f:e7:6e:76:
         ba:d1:a5:d1:27:9c:8e:9c:d7:35:65:b5:2a:33:91:be:67:28:
         c3:d5:42:13:0b:b1:c3:ec:03:42:15:6f:f0:80:39:a1:2e:ea:
         15:2c:3b:f1:f8:a3:e2:f0:c1:09:9a:29:09:cf:3e:51:70:80:
         ed:8f:44:1b:f8:a9:e1:86:e0:e3:e0:64:76:a8:5e:40:e8:53:
         62:a8:6a:21:77:e6:be:d4:f1:ba:b1:a7:45:ef:87:26:89:7c:
         94:31:92:1e:c3:49:5e:5e:ca:46:08:1d:e2:05:3d:40:74:e6:
         bb:24:98:a2
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQ4wwOiPXtx4qzzJxumSyn/0ZNY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU1QUYyRDQxQzdDODRCRkUzNTRGODY0OEVFMzI3MTU4
NDQ1MkM3OTAeFw0yNjA1MDMwMjUwMjJaFw0yNzA1MDIwMjU1MjJaMDMxMTAvBgNV
BAMTKEIyMUQ3OEIxRDREMjVCNkIzMTE2MUM4OTQ0OEExMzQ2RkYyODk0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDppucG0K3saW5Od00qOG2ZPfk5
mgfJOp8C3vwI4dFy/TTL4vQXM6XHhWv+sYDFPuJ1JlX96AGGXSuWrh7t16+m/LV1
w04/zkIAvggoSlMrA/tl/I7MZBGLO5qdWeHRwRha6csLGU3fyiy+Cfl590egBf6r
p3ruJmnw413fe9Zs5fhLL1kJuUqWORfBdduf0cbkwUbM7HuuRl9yLRb2YDGHYtpd
/cSEikh8bcIBC87m7tevrsAtHNWBlqCY3c6t4GC77EZT0jRATtdP/1/NNNH8D7vq
ANrP3R7ayI3wTmJ8bIDQMCJ1U+VGhd/k2KLadaaUkqzYgWKExePub4ovEMVRAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUsh14sdTSW2sxFhyJRIoTRv8olA8wHwYDVR0j
BBgwFoAUlVry1Bx8hL/jVPhkjuMnFYRFLHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTA2YjY2NzMtNDdhMS00NWU1LWI2YzItNDJhYjhiNDc2MjQ5LzAvOTU1QUYyRDQx
QzdDODRCRkUzNTRGODY0OEVFMzI3MTU4NDQ1MkM3OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NTVBRjJENDFDN0M4NEJGRTM1NEY4NjQ4RUUzMjcxNTg0NDUy
Qzc5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i
NmMyLTQyYWI4YjQ3NjI0OS8wLzM0MzUyZTMxMzEzNTJlMzYzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtc0MwDQYJKoZIhvcN
AQELBQADggEBAGWXqwt5TygXpjRqJ2SEiY+uxgi29tBp91Ef2iabG1MBZ9y409iR
VNH2ppIme8BT8VRvAsYKh2MqpE1VKG5RCrziHKFmyaBCbohsTA16o/4JROKk/YQo
EsvGGs5DggVHCFVUEhw2F13nHtKJ9CCXn38dBZk9CpUMMHR8HraucQbZ78SAiExP
aH/BPpOML+dudrrRpdEnnI6c1zVltSozkb5nKMPVQhMLscPsA0IVb/CAOaEu6hUs
O/H4o+LwwQmaKQnPPlFwgO2PRBv4qeGG4OPgZHaoXkDoU2KoaiF35r7U8bqxp0Xv
hyaJfJQxkh7DSV5eykYIHeIFPUB05rskmKI=
-----END CERTIFICATE-----
Generated at Wed May 13 04:17:08 2026 by rpki-client