Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/34352e3131352e3133362e302f32322d3234203d3e203633383733.roa
File:                     34352e3131352e3133362e302f32322d3234203d3e203633383733.roa (raw, json)
Hash identifier:          ZBadKIUk/3x1VD+iY8T20vrwwxnWCyDi/bgS1szA1DA=
Subject key identifier:   D9:EB:94:A0:D9:38:93:4E:06:F1:6C:95:11:68:77:F6:FE:F0:12:C2
Certificate issuer:       /CN=6372758CCA381920292B5E0D338ECF89D0000FEE
Certificate serial:       5487A7E23DB84C85EE1A4592B046D61D9CB383CD
Authority key identifier: 63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/34352e3131352e3133362e302f32322d3234203d3e203633383733.roa
Signing time:             Sun 03 May 2026 03:15:38 +0000
ROA not before:           Sun 03 May 2026 03:10:38 +0000
ROA not after:            Sun 02 May 2027 03:15:38 +0000
asID:                     63873
IP address blocks:        45.115.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl
                          rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:87:a7:e2:3d:b8:4c:85:ee:1a:45:92:b0:46:d6:1d:9c:b3:83:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6372758CCA381920292B5E0D338ECF89D0000FEE
        Validity
            Not Before: May  3 03:10:38 2026 GMT
            Not After : May  2 03:15:38 2027 GMT
        Subject: CN=D9EB94A0D938934E06F16C95116877F6FEF012C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:d3:d5:32:a8:1a:3d:0a:d1:a3:7a:ed:21:
                    29:8e:b9:19:dc:a1:6e:be:66:d9:c3:f0:a1:c4:ed:
                    62:eb:25:43:dd:02:b0:f3:2b:35:34:3b:70:59:d0:
                    8f:a7:74:67:62:0f:85:1a:e7:3c:7a:ed:a5:f4:64:
                    35:64:e0:ea:e1:d7:b3:28:30:28:85:a3:1b:a6:a1:
                    8d:f3:a8:b5:fe:a3:37:e0:5c:0d:f3:38:09:cc:0e:
                    d9:8d:8b:a4:0c:78:8b:70:ed:85:65:87:22:1b:1d:
                    ea:47:03:96:60:da:54:8d:ab:ad:5b:22:a8:61:26:
                    52:22:0a:a0:9e:b0:4e:d9:a6:a2:b0:62:aa:20:3c:
                    60:20:6b:e7:a3:04:3b:50:d5:9c:14:40:f8:3e:42:
                    4f:83:89:5f:7b:18:96:3a:53:2f:c6:72:93:c8:96:
                    44:d3:71:fe:f8:93:ea:d9:9f:fd:1e:d3:f7:05:8b:
                    4d:f2:75:33:a3:3b:1a:34:9f:23:36:d2:45:24:cb:
                    31:7a:de:22:d1:39:c7:16:2c:77:d6:be:17:32:c4:
                    39:7c:e5:ef:74:87:19:0b:b3:3e:8e:88:08:77:03:
                    73:c4:39:83:4b:6e:23:e3:8b:56:f5:8e:e1:e2:22:
                    21:ee:3f:4d:d7:cd:ed:77:e7:98:7e:9f:ba:19:8b:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EB:94:A0:D9:38:93:4E:06:F1:6C:95:11:68:77:F6:FE:F0:12:C2
            X509v3 Authority Key Identifier:
                keyid:63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/34352e3131352e3133362e302f32322d3234203d3e203633383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:90:48:c2:50:bd:0c:cf:43:1d:58:f7:cd:67:2b:28:7f:
         e8:23:eb:d5:60:75:0f:d9:80:76:21:0d:ce:90:03:2e:6a:cf:
         a1:63:b9:c9:f7:a7:36:7a:a2:5a:d7:22:1e:dd:8c:23:95:a9:
         e2:7e:cf:8b:c7:b1:6f:7e:b7:f9:99:97:cc:88:b8:70:0d:72:
         a3:f0:d3:ab:20:9f:e9:08:f4:79:df:bf:92:de:85:82:6b:a6:
         a6:0f:b7:57:c5:a0:9b:f6:8f:3a:52:ff:cb:d1:47:12:7f:c0:
         19:1d:6b:62:c3:7f:39:ff:62:73:ed:de:9f:b0:a3:52:19:b1:
         f6:74:3f:6f:6e:e3:75:a2:df:0b:a6:31:e5:64:89:15:7c:2b:
         15:66:da:3e:4a:d9:24:67:48:2a:80:1d:d8:2f:94:1a:45:57:
         eb:9a:e5:da:26:03:34:f4:7f:e3:1f:e9:61:fc:ec:92:ee:a3:
         bd:45:0a:71:4a:70:d8:b3:a0:0b:25:0b:d3:ba:c3:53:00:aa:
         7e:5b:74:84:ab:ac:a5:11:6b:7e:11:90:00:bd:3b:4d:e1:70:
         c6:62:cc:24:a1:1f:37:8b:31:ec:59:b0:a4:03:8a:c4:c1:cb:
         c9:97:d6:56:63:4e:a0:9a:e4:69:0b:37:70:a1:c2:2c:a0:27:
         83:77:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:38 2026 by rpki-client