Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa
File:                     34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          fRTHSzlS/kkerP4SjyexReRSZRyzRj6VQ2sAHATlKhQ=
Subject key identifier:   17:3C:B9:A0:00:8D:FC:0E:E9:CA:71:52:74:60:8D:65:F4:C0:E3:2F
Certificate issuer:       /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial:       183C2D3F1C80EB19E5E9935EA4C301A585A94536
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa
Signing time:             Sun 03 May 2026 03:08:11 +0000
ROA not before:           Sun 03 May 2026 03:03:11 +0000
ROA not after:            Sun 02 May 2027 03:08:11 +0000
asID:                     131717
IP address blocks:        45.118.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
                          rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3c:2d:3f:1c:80:eb:19:e5:e9:93:5e:a4:c3:01:a5:85:a9:45:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
        Validity
            Not Before: May  3 03:03:11 2026 GMT
            Not After : May  2 03:08:11 2027 GMT
        Subject: CN=173CB9A0008DFC0EE9CA715274608D65F4C0E32F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:5a:5e:7e:95:a1:a5:89:79:2f:be:7d:79:
                    84:eb:4e:4c:cc:58:f7:30:fe:d9:30:d7:e6:2f:c8:
                    0e:5f:e4:1e:ae:59:a9:6e:ac:5e:e3:90:20:6b:a8:
                    07:cf:c2:20:a6:77:9c:2b:8a:a0:84:a0:2e:cb:18:
                    84:9e:34:89:ba:5b:a3:cd:a3:da:00:ee:78:04:4c:
                    75:40:ff:e3:32:27:e8:e1:48:21:e6:4b:c5:ab:fd:
                    38:82:fd:4a:f6:59:23:91:bc:6e:4c:be:b8:e6:77:
                    91:fa:1f:73:88:9c:c3:06:77:3a:3a:1b:a5:e3:6c:
                    39:82:96:a5:a2:7a:06:c0:ae:e1:be:26:14:1e:22:
                    0c:7f:a9:45:13:c5:3c:db:27:67:bd:46:af:9a:81:
                    a2:9f:d7:26:ed:9f:93:63:1c:99:6b:7b:7c:6c:be:
                    3f:15:09:82:74:db:8e:d5:30:dc:18:1d:37:c7:c5:
                    fb:4c:80:ee:c3:61:c6:11:70:7f:fc:6b:8f:42:36:
                    13:22:71:fd:ad:32:38:fb:8b:ca:c6:71:bd:fd:a6:
                    e5:ce:6f:08:d5:bf:dc:86:22:25:bd:94:c8:40:22:
                    d3:e7:be:ba:12:6c:60:31:74:39:70:0f:69:d2:c8:
                    47:6b:54:fb:5e:4a:4c:60:46:1c:d8:62:62:8c:4f:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3C:B9:A0:00:8D:FC:0E:E9:CA:71:52:74:60:8D:65:F4:C0:E3:2F
            X509v3 Authority Key Identifier:
                keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.118.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ad:2a:19:50:0c:10:9a:58:da:19:53:a5:79:6c:f3:de:97:
         01:a8:25:e1:d3:ec:ec:e8:62:fd:d0:86:78:cb:56:72:1f:24:
         4b:f8:40:a7:88:89:df:87:37:65:71:2b:1f:b7:b8:ee:c3:dc:
         e5:ad:b7:01:5b:ce:d7:63:25:7c:3c:b7:ce:68:2e:8d:fe:36:
         07:35:51:d6:ba:38:5a:c0:0e:46:28:c9:7e:ed:b5:dc:ad:ea:
         07:47:99:ba:7d:ab:22:a4:0d:95:07:d7:f4:2f:13:6e:19:21:
         3b:dc:cc:16:ef:94:6a:0c:e7:98:02:a4:5d:c9:d2:ca:4e:d8:
         05:af:a4:91:92:89:63:72:de:98:bf:7e:56:8c:47:31:78:0a:
         bd:32:15:de:a5:a3:ab:fc:e0:d9:0d:79:9e:c6:3b:10:4a:bf:
         71:49:03:0a:f6:f4:02:9e:16:68:2e:aa:08:f3:8b:64:db:9a:
         19:aa:ed:a0:55:a6:91:ed:b0:d6:68:5a:73:5b:7b:42:46:26:
         62:6f:6c:63:26:65:f2:69:ba:ee:f9:b4:fc:e6:9a:46:43:1e:
         bc:19:2d:f3:e3:c3:b1:38:40:6d:38:97:73:ba:c9:b0:e9:c1:
         84:16:49:ea:3d:55:5a:86:79:92:38:6a:30:79:c6:4e:5b:89:
         76:ab:40:9f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGDwtPxyA6xnl6ZNepMMBpYWpRTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5
QTkyOTU5RjAeFw0yNjA1MDMwMzAzMTFaFw0yNzA1MDIwMzA4MTFaMDMxMTAvBgNV
BAMTKDE3M0NCOUEwMDA4REZDMEVFOUNBNzE1Mjc0NjA4RDY1RjRDMEUzMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRvVpefpWhpYl5L759eYTrTkzM
WPcw/tkw1+YvyA5f5B6uWalurF7jkCBrqAfPwiCmd5wriqCEoC7LGISeNIm6W6PN
o9oA7ngETHVA/+MyJ+jhSCHmS8Wr/TiC/Ur2WSORvG5Mvrjmd5H6H3OInMMGdzo6
G6XjbDmClqWiegbAruG+JhQeIgx/qUUTxTzbJ2e9Rq+agaKf1ybtn5NjHJlre3xs
vj8VCYJ0247VMNwYHTfHxftMgO7DYcYRcH/8a49CNhMicf2tMjj7i8rGcb39puXO
bwjVv9yGIiW9lMhAItPnvroSbGAxdDlwD2nSyEdrVPteSkxgRhzYYmKMTyqFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUFzy5oACN/A7pynFSdGCNZfTA4y8wHwYDVR0j
BBgwFoAUywpgb9BkLmi1ISrnUZU+C5qSlZ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDA3NDcxYTMtZWU1My00OTljLTlmMmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZE
MDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5QTkyOTU5Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DQjBBNjA2RkQwNjQyRTY4QjUyMTJBRTc1MTk1M0UwQjlBOTI5
NTlGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05
ZjJkLWNmMTZiMWU0YTM1My8wLzM0MzUyZTMxMzEzODJlMzEzMTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXZxMA0GCSqG
SIb3DQEBCwUAA4IBAQAtrSoZUAwQmljaGVOleWzz3pcBqCXh0+zs6GL90IZ4y1Zy
HyRL+ECniInfhzdlcSsft7juw9zlrbcBW87XYyV8PLfOaC6N/jYHNVHWujhawA5G
KMl+7bXcreoHR5m6fasipA2VB9f0LxNuGSE73MwW75RqDOeYAqRdydLKTtgFr6SR
koljct6Yv35WjEcxeAq9MhXepaOr/ODZDXmexjsQSr9xSQMK9vQCnhZoLqoI84tk
25oZqu2gVaaR7bDWaFpzW3tCRiZib2xjJmXyabru+bT85ppGQx68GS3z48OxOEBt
OJdzusmw6cGEFknqPVVahnmSOGowecZOW4l2q0Cf
-----END CERTIFICATE-----
Generated at Wed May 13 04:09:30 2026 by rpki-client