Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS46024.roa
File:                     AS46024.roa (raw, json)
Hash identifier:          ylmYw4/KnmlumROmFOx5Ugd+ZvIq9v4dyoc2wy3GxMY=
Subject key identifier:   84:34:1D:2D:04:0C:FC:35:B5:32:C3:CD:5A:05:A7:80:66:11:AF:8B
Certificate issuer:       /CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
Certificate serial:       458BF9FC85F1BB621F98D1B38AD6C6899818EA7F
Authority key identifier: 1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS46024.roa
Signing time:             Sun 03 May 2026 03:14:39 +0000
ROA not before:           Sun 03 May 2026 03:09:39 +0000
ROA not after:            Sun 02 May 2027 03:14:39 +0000
asID:                     46024
IP address blocks:        203.191.44.0/24 maxlen: 24
                          203.191.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl
                          rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8b:f9:fc:85:f1:bb:62:1f:98:d1:b3:8a:d6:c6:89:98:18:ea:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
        Validity
            Not Before: May  3 03:09:39 2026 GMT
            Not After : May  2 03:14:39 2027 GMT
        Subject: CN=84341D2D040CFC35B532C3CD5A05A7806611AF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:a0:30:74:17:ee:f2:5f:b5:b0:ed:3c:5b:
                    3c:51:85:c1:2b:de:8a:c9:97:bd:da:ae:8a:00:91:
                    4d:ca:41:5b:9c:c5:58:91:c6:ae:43:4b:d9:65:78:
                    44:4b:09:da:cb:f3:92:04:6c:c3:1e:e8:b7:df:6c:
                    8b:03:c6:57:f1:cf:89:3a:f1:fa:a5:49:42:6c:56:
                    93:08:a4:3f:16:3f:19:f5:f5:5c:40:35:b6:dc:3b:
                    48:67:64:24:5b:ae:3f:25:67:6c:19:a8:d9:07:bb:
                    2e:aa:eb:73:6f:02:44:b9:55:51:d5:8b:f8:fa:1c:
                    79:17:dd:cd:0f:13:d7:24:a1:55:2b:be:75:9b:dd:
                    85:00:28:83:c5:3c:c4:6e:26:57:d2:eb:5c:21:1f:
                    6b:68:98:f2:94:40:38:9f:13:62:02:7d:20:f9:9a:
                    58:0f:d4:71:0c:dd:3a:2a:24:fc:60:74:4c:a3:20:
                    ec:72:f7:e6:73:87:4e:3f:83:a6:3d:8f:bb:0f:4c:
                    e5:3e:9d:d3:21:34:ec:fb:64:81:1f:b6:07:c4:39:
                    1b:62:e3:b5:67:b6:6f:5b:db:70:ca:ae:87:a1:bf:
                    60:75:9e:c4:22:bd:64:20:54:07:82:41:34:1b:68:
                    8c:ff:71:66:e8:2c:da:b4:02:1a:28:1e:f9:09:e5:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:34:1D:2D:04:0C:FC:35:B5:32:C3:CD:5A:05:A7:80:66:11:AF:8B
            X509v3 Authority Key Identifier:
                keyid:1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS46024.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.191.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:e6:89:eb:f2:f6:6f:3d:74:d2:12:c1:d4:d9:8c:dc:9e:f3:
         3c:7a:e8:e9:3e:9b:6e:99:1b:13:45:4b:d1:eb:46:c7:09:68:
         a5:3c:73:dd:91:95:41:52:84:81:46:09:4f:11:a9:e3:61:e3:
         f5:b8:e5:20:7c:6e:89:43:1a:cb:e3:52:29:c6:d0:55:5b:c6:
         c0:d1:83:a2:bc:44:09:45:c8:bf:e5:3b:be:06:99:59:84:9f:
         28:ce:d7:ad:48:11:c7:42:17:5d:41:14:cd:90:50:43:76:63:
         d7:29:14:bb:3d:9e:30:8a:01:0f:f5:a6:77:d6:6e:a2:c1:64:
         3a:12:d7:11:39:84:5f:35:be:cc:ee:34:d9:3f:08:22:3b:eb:
         3b:e1:45:07:59:4c:8b:20:dc:0c:0c:61:24:45:d4:f7:fb:ee:
         f7:22:e9:01:b5:6e:17:ba:d0:60:84:56:11:80:8f:cc:f5:08:
         3a:a9:f3:eb:4f:68:7c:87:0a:91:cb:11:8b:75:c7:38:da:f6:
         6c:ed:a6:ab:09:63:1f:b3:93:83:68:b0:4c:08:23:47:39:ac:
         52:68:5e:b5:d7:49:e0:22:ea:cd:7c:c3:e1:21:22:f5:5f:f5:
         89:3a:b3:d1:11:48:03:7e:21:4c:12:1d:66:50:cf:26:cb:82:
         80:da:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:00:50 2026 by rpki-client