Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/34332e3234392e3134312e302f32342d3234203d3e203535363533.roa
File:                     34332e3234392e3134312e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier:          Bc5YFcqICb+bh4tRwH4x3D73YQXCDozUg5+ESseoBXI=
Subject key identifier:   72:12:FA:2C:01:FF:ED:51:60:2A:51:62:F3:A2:E9:5B:AB:DB:F3:5F
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       749C9FE7EBB99E5D8B01B13AD710D5C0DF12BBDC
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/34332e3234392e3134312e302f32342d3234203d3e203535363533.roa
Signing time:             Sun 03 May 2026 03:06:20 +0000
ROA not before:           Sun 03 May 2026 03:01:20 +0000
ROA not after:            Sun 02 May 2027 03:06:20 +0000
asID:                     55653
IP address blocks:        43.249.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9c:9f:e7:eb:b9:9e:5d:8b:01:b1:3a:d7:10:d5:c0:df:12:bb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: May  3 03:01:20 2026 GMT
            Not After : May  2 03:06:20 2027 GMT
        Subject: CN=7212FA2C01FFED51602A5162F3A2E95BABDBF35F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:16:21:17:e4:fd:56:7d:96:79:bc:ac:fa:
                    07:ca:1f:ff:37:ec:03:61:91:76:f4:c4:c0:f1:64:
                    ee:f8:fa:bd:5a:a4:7a:95:eb:99:bb:8d:e5:83:f7:
                    4a:2f:89:cc:a5:96:5b:77:92:3c:7a:1f:85:f6:7d:
                    ab:97:c2:3d:d0:35:ce:dd:d7:1e:69:77:5c:a5:63:
                    55:1a:6f:a5:1c:5e:29:77:0f:f4:ae:43:1f:93:7a:
                    01:d2:f5:0d:66:0a:d6:43:20:7d:c5:84:c5:71:57:
                    d4:0b:ea:84:75:3c:45:92:0c:8f:6b:93:06:bb:28:
                    8a:94:5a:b8:82:66:3c:7c:64:81:ac:bb:73:98:ce:
                    03:80:5d:e8:55:97:09:f2:bd:70:83:39:f1:d1:15:
                    27:05:a5:a6:0d:d1:80:ae:79:b1:0d:e3:3e:6b:bd:
                    b3:1b:ff:50:1d:22:2a:55:5b:de:d7:15:db:e8:f3:
                    b6:a3:aa:20:21:01:59:9a:a5:41:fd:db:4f:e0:11:
                    18:37:8c:37:fb:4a:db:97:ae:9a:c9:02:9e:d2:c7:
                    a8:02:d7:82:3c:4b:10:a1:54:78:4b:ff:a9:ba:7f:
                    56:4f:b6:97:aa:82:4a:fe:aa:14:97:26:89:7b:90:
                    03:e6:35:35:65:91:27:d2:67:ed:72:e3:13:12:28:
                    9a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:FA:2C:01:FF:ED:51:60:2A:51:62:F3:A2:E9:5B:AB:DB:F3:5F
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/34332e3234392e3134312e302f32342d3234203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.249.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:05:8e:7b:e8:5b:f3:63:48:e5:cd:e7:4c:72:ee:8a:4d:da:
         51:6a:b0:a1:e0:78:4b:ce:58:e4:a7:f3:67:fc:80:23:91:e9:
         dd:80:37:f6:e9:52:1b:6d:4d:9b:19:8e:3f:84:6f:4b:ce:89:
         d8:14:d2:66:70:1e:5b:a6:3e:69:70:be:ef:1f:64:57:69:9a:
         54:d8:96:33:f9:27:78:1a:9c:dc:13:0e:2b:08:11:31:2a:76:
         c6:cb:27:99:24:e5:cf:50:92:62:d1:31:d0:45:94:19:f5:19:
         5d:a8:93:d8:e8:ee:d5:bb:bd:a7:17:30:1c:07:45:4d:5b:89:
         16:e2:fd:61:84:f3:cb:30:b2:f0:e1:b3:91:ee:be:0f:89:93:
         04:32:19:4e:39:a3:ae:40:12:51:b0:eb:4a:a6:2e:78:cd:9d:
         43:76:f6:c9:3b:1e:62:58:be:65:a4:c8:37:99:32:b4:80:9e:
         48:b1:bd:c8:4f:ae:ee:02:dc:29:66:10:9a:e0:d5:c2:80:99:
         ed:17:b4:1b:37:13:7d:b6:d0:f4:b8:12:29:2d:ff:a7:a4:eb:
         af:bc:f9:32:e8:ef:50:0d:05:38:1f:fa:b5:db:d2:c5:92:f7:
         70:d7:35:d0:1e:1c:ef:e4:eb:09:bf:26:8f:cd:98:12:65:53:
         40:d1:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:57 2026 by rpki-client