Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35392e302f32342d3234203d3e20313332363437.roa
File:                     34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (raw, json)
Hash identifier:          qArl8RBpNQGv7NW/pHMi5u7s8FPFuQtE+K0tYbKrjHU=
Subject key identifier:   2D:AF:CB:45:FE:D2:23:31:09:21:6C:29:2C:6A:52:07:D8:D6:AF:69
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       35CE58F495C7AB9D90B26A07B3EB5BB6343A0EBC
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35392e302f32342d3234203d3e20313332363437.roa
Signing time:             Sun 03 May 2026 02:56:59 +0000
ROA not before:           Sun 03 May 2026 02:51:59 +0000
ROA not after:            Sun 02 May 2027 02:56:59 +0000
asID:                     132647
IP address blocks:        45.126.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ce:58:f4:95:c7:ab:9d:90:b2:6a:07:b3:eb:5b:b6:34:3a:0e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: May  3 02:51:59 2026 GMT
            Not After : May  2 02:56:59 2027 GMT
        Subject: CN=2DAFCB45FED2233109216C292C6A5207D8D6AF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d4:1d:4b:77:13:aa:69:53:1b:f0:f7:79:c6:
                    f3:81:6a:6c:54:59:24:56:77:08:de:e4:01:26:83:
                    6f:8f:74:cb:96:38:50:12:b2:1e:2c:82:f8:da:de:
                    81:7d:ab:17:2e:e3:79:62:3b:42:b6:07:39:05:d3:
                    04:15:c2:08:27:aa:65:1e:cc:ea:fa:8a:ba:40:eb:
                    4c:50:71:99:f8:f7:c3:94:da:93:a1:84:99:bf:d9:
                    46:58:a5:4e:0f:20:09:8b:01:65:0a:5f:ce:af:28:
                    2d:a5:b5:d1:99:69:28:76:55:5b:52:59:98:bf:b7:
                    7c:98:be:0b:10:c1:ce:c3:f2:0d:2a:97:cb:13:c7:
                    bd:14:cb:77:74:0f:f2:3b:4c:31:f3:2e:2b:0c:37:
                    8d:46:28:7c:f6:ba:fd:8e:a1:ea:d2:bf:8e:0f:12:
                    cf:5d:43:e8:a7:79:0b:8c:dc:be:67:12:40:ca:db:
                    f2:1a:d1:8e:fa:0c:d7:6c:23:f6:0d:2e:24:fb:95:
                    57:2d:dc:9f:75:11:a4:28:ee:95:77:03:f3:4a:bd:
                    85:2f:fa:4e:13:3e:25:72:91:6f:06:74:cf:41:6c:
                    3c:a1:63:a4:a8:07:75:ef:8c:9c:a5:cf:ed:66:22:
                    16:02:31:03:3e:ff:4a:98:fa:e8:35:79:54:e4:f1:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AF:CB:45:FE:D2:23:31:09:21:6C:29:2C:6A:52:07:D8:D6:AF:69
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35392e302f32342d3234203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:6c:de:aa:3f:28:79:dc:65:76:22:76:a5:40:0f:93:da:
         bf:f4:c5:10:0e:7f:36:41:e6:4a:0e:4a:f9:ec:51:d9:bf:25:
         a7:b9:d0:3d:27:36:94:7b:42:69:05:31:df:f6:5b:fb:45:28:
         c5:ab:76:22:7a:98:21:fc:b3:0c:9e:c9:f0:9d:86:c7:55:c8:
         f8:aa:e0:13:32:78:3f:89:45:f2:56:c7:d5:2f:66:b3:e6:d5:
         df:d3:4d:67:f7:de:1c:39:24:a3:5d:2f:f7:fc:0a:10:d8:e6:
         38:7c:e4:45:46:50:79:93:01:90:b7:ba:80:47:9c:8a:5f:ca:
         c5:95:3d:49:e1:53:01:bc:27:48:9a:e6:57:aa:1a:38:16:ba:
         b5:31:cc:c0:dd:a3:b3:05:ee:76:a8:e6:6a:b5:d6:7c:cd:69:
         a8:46:ae:b4:5f:80:0e:25:91:11:bf:e4:49:ef:73:6e:cc:eb:
         f5:97:0e:a5:a7:ac:60:98:a4:10:89:d6:e6:45:6e:71:72:0f:
         00:e3:7d:99:77:ee:ed:d3:e4:07:66:a0:e5:39:a8:60:17:8d:
         92:08:15:7e:02:74:7f:18:f1:a7:4f:1d:10:61:4a:94:3b:15:
         48:01:50:10:ed:4d:f6:f5:e6:1f:ca:8e:f3:ac:62:5a:94:bb:
         3f:27:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:19 2026 by rpki-client