Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa
File:                     34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (raw, json)
Hash identifier:          eNviqEPANiU+R88ED/BdXauQGAcTaPYxgTmStYUAEXw=
Subject key identifier:   74:2F:FB:09:8F:D2:C2:DC:B2:E6:E8:02:D6:73:B3:CA:F6:B5:4E:B6
Certificate issuer:       /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1
Certificate serial:       3FA669386B84FCBE75B992CE1111963B079922E0
Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa
Signing time:             Sun 03 May 2026 03:03:25 +0000
ROA not before:           Sun 03 May 2026 02:58:25 +0000
ROA not after:            Sun 02 May 2027 03:03:25 +0000
asID:                     151592
IP address blocks:        45.126.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl
                          rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a6:69:38:6b:84:fc:be:75:b9:92:ce:11:11:96:3b:07:99:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1
        Validity
            Not Before: May  3 02:58:25 2026 GMT
            Not After : May  2 03:03:25 2027 GMT
        Subject: CN=742FFB098FD2C2DCB2E6E802D673B3CAF6B54EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:05:5e:33:4b:2a:3c:08:1b:a0:16:4f:59:
                    7e:07:6d:ff:e6:15:b0:d0:58:c3:64:e4:5d:e6:bd:
                    c5:b7:34:fe:2c:4d:0a:84:77:87:78:40:32:c3:43:
                    e9:da:2e:25:62:e5:7c:75:40:24:d2:e4:bb:62:56:
                    1e:7e:ed:aa:03:c4:3f:e9:77:f4:8c:e4:5a:6b:03:
                    b1:e7:26:12:5f:e8:f8:71:11:62:88:b9:9f:26:52:
                    12:75:d0:5c:ae:03:80:cb:95:07:b1:ea:ac:5f:b6:
                    a1:90:77:2e:71:1b:a2:a2:be:20:fc:53:ae:e2:b0:
                    08:95:b4:96:c9:2b:1e:6e:a4:f2:be:ee:a9:d5:7d:
                    40:08:f2:7f:6e:ac:d6:6c:1b:d3:c0:58:4d:f2:b8:
                    13:35:52:94:7f:09:d5:6d:68:bf:51:bb:f5:c1:a8:
                    82:d6:fd:ef:0c:7a:fb:c4:cf:5e:37:86:69:c2:28:
                    ed:61:29:56:c1:51:bc:55:b6:71:4c:21:f0:98:02:
                    c5:7c:85:10:f6:35:b6:2e:28:ee:b3:c8:e8:38:fd:
                    24:70:0e:6e:1e:92:6f:af:a6:20:9b:56:ba:76:74:
                    83:8f:50:a9:78:f1:d4:9e:86:c4:dd:98:cf:2d:cc:
                    4c:bc:0a:58:35:e9:0c:bb:b0:de:57:56:fb:4b:cd:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2F:FB:09:8F:D2:C2:DC:B2:E6:E8:02:D6:73:B3:CA:F6:B5:4E:B6
            X509v3 Authority Key Identifier:
                keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f3:64:2d:3b:06:2e:14:d6:2d:ab:31:22:10:9b:63:0e:53:
         75:a8:42:1b:dd:f6:b3:ea:1e:50:9e:89:9f:11:b5:1d:b8:4a:
         fe:2e:32:54:5f:98:2e:e9:23:bb:a8:84:fa:58:38:f3:df:b2:
         1e:db:ea:b3:5c:f1:cc:2a:3d:fd:4f:0d:a5:ac:c4:05:b6:d7:
         00:3a:af:a4:42:6c:6c:27:dc:25:0c:f3:10:95:f8:63:ec:a2:
         43:86:dc:81:94:20:a4:db:7e:ff:9a:03:5d:3c:61:df:9f:de:
         68:5d:b0:30:69:c4:16:01:19:4d:5c:8e:a3:ff:e1:7c:95:bb:
         20:6a:d8:18:87:35:2f:8c:a1:ae:47:c9:56:b2:5f:51:26:ce:
         f3:5d:6c:4c:27:b8:fd:3c:7c:f3:8b:cd:d8:7a:6d:a3:28:08:
         18:cf:69:40:08:19:11:8f:7d:3f:7f:3b:e4:cb:d1:83:03:92:
         a3:aa:e0:12:7f:3f:fb:f9:38:9d:c9:e4:f3:43:07:6c:45:d6:
         67:f5:62:98:83:2a:71:af:d5:4c:4d:f8:43:c5:f1:da:a4:71:
         d5:fc:b3:8b:b7:06:9f:a4:c0:09:7a:db:14:66:d4:29:81:2c:
         60:6d:42:88:7e:f5:f4:9c:03:81:2d:a5:76:3f:be:3a:e0:d7:
         75:6f:f4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:49 2026 by rpki-client