Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34392e3132382e3137362e302f32312d3234203d3e203535363636.roa
File:                     34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (raw, json)
Hash identifier:          P5fkn9tS99g2XrUG4Apipk9ejfQyJlucoKHgpqn+9oE=
Subject key identifier:   76:B5:F3:B0:47:6F:BA:C1:C6:F9:5D:7B:65:7B:90:F3:2D:52:23:BA
Certificate issuer:       /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial:       62BF5EF7B8CD2FF0AE125177F507DA79CBC00720
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34392e3132382e3137362e302f32312d3234203d3e203535363636.roa
Signing time:             Sun 03 May 2026 02:59:29 +0000
ROA not before:           Sun 03 May 2026 02:54:29 +0000
ROA not after:            Sun 02 May 2027 02:59:29 +0000
asID:                     55666
IP address blocks:        49.128.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
                          rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bf:5e:f7:b8:cd:2f:f0:ae:12:51:77:f5:07:da:79:cb:c0:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
        Validity
            Not Before: May  3 02:54:29 2026 GMT
            Not After : May  2 02:59:29 2027 GMT
        Subject: CN=76B5F3B0476FBAC1C6F95D7B657B90F32D5223BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:ac:31:c3:81:80:d5:ee:63:e2:58:26:9c:
                    24:31:47:7f:e9:3a:ed:bc:3b:bb:19:6f:f3:c0:1f:
                    71:dd:86:2d:52:cf:f1:fd:5f:64:fd:2f:f8:e5:60:
                    eb:10:de:c4:dd:10:ca:9d:f2:8d:fa:e5:92:25:42:
                    68:23:36:44:53:77:80:c9:1b:7d:7b:55:6e:e4:02:
                    bc:b5:d4:2a:40:d9:60:e3:7b:f9:06:84:6c:05:db:
                    24:0a:9a:46:82:33:2d:da:63:f4:c5:c5:d8:b3:32:
                    7b:2a:e2:03:af:b3:71:7a:f5:95:2c:23:48:b9:e7:
                    0d:72:7c:50:86:73:ad:f9:d9:6e:f0:7a:77:9b:a5:
                    ec:a1:2f:85:2a:18:10:88:1f:60:87:45:40:2f:29:
                    0b:13:c6:53:aa:05:63:8b:51:2a:99:47:fb:57:14:
                    12:31:73:f5:70:8b:c6:e4:45:bf:82:ad:b1:74:5d:
                    5d:2b:35:91:8a:1a:16:11:ec:fd:25:6d:38:ab:09:
                    b4:d1:48:be:d3:f1:ae:0e:b7:e7:0a:38:1d:16:55:
                    d6:bf:d2:9a:3a:a6:b6:2c:3e:d4:bf:ec:7f:43:d0:
                    6b:38:bf:48:1e:fd:27:86:c3:ba:e4:89:26:67:e1:
                    62:9d:5b:7b:71:07:69:e0:c7:6b:11:30:a4:99:3a:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B5:F3:B0:47:6F:BA:C1:C6:F9:5D:7B:65:7B:90:F3:2D:52:23:BA
            X509v3 Authority Key Identifier:
                keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34392e3132382e3137362e302f32312d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:a4:3e:e5:76:37:a5:34:e4:c8:6d:e3:8d:11:05:c2:80:36:
         d8:dd:21:f5:71:80:7d:13:d7:0e:08:6f:17:67:8f:88:ba:19:
         a2:a7:62:d3:22:4b:c9:aa:03:1b:b8:87:75:ca:89:8d:e5:da:
         85:99:60:5c:cf:c3:58:14:b6:09:60:24:c9:38:c1:99:86:0a:
         6b:4e:9d:13:32:3a:fb:7c:a8:82:cf:e1:12:21:53:d2:a2:30:
         8a:f6:a3:8e:f1:6d:a2:85:ac:3d:f8:ee:f2:3b:47:79:d3:6d:
         fd:b6:ef:51:be:a8:89:9f:42:57:ce:c0:40:af:c7:fe:c2:bc:
         c4:a0:9f:e7:fc:84:7e:05:c7:09:d9:58:90:54:74:e2:2f:96:
         d1:f0:76:10:5c:84:c5:ce:50:4b:3a:0f:a8:96:32:37:6e:fe:
         8c:a2:f0:64:e0:6e:eb:4f:1a:7b:2e:7f:a4:77:5c:16:05:fa:
         db:7e:26:2a:64:08:02:76:49:93:a4:cc:36:4f:ad:ea:29:ce:
         be:2c:87:48:26:f5:66:a0:22:bb:76:87:3c:a9:c7:5f:f3:20:
         c4:2b:f1:24:4a:64:6e:0c:f4:ba:5b:e4:13:6a:80:e6:1b:79:
         66:31:ca:45:4d:d6:4b:a4:f2:f1:16:c0:22:c3:9d:1d:70:e3:
         82:9e:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:44 2026 by rpki-client