Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/33362e35302e3135342e302f32332d3234203d3e20313532303738.roa
File:                     33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (raw, json)
Hash identifier:          8bdm59nV7JGD6nAo69wqK5zS2ZyFtuzqAXaUdVJTTG8=
Subject key identifier:   58:5D:BF:B9:DC:3B:C1:81:2E:C5:86:80:C0:B6:B9:3E:85:71:FA:30
Certificate issuer:       /CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80
Certificate serial:       5793592282B368083D34ADCFA318CEDC92156D3B
Authority key identifier: C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/33362e35302e3135342e302f32332d3234203d3e20313532303738.roa
Signing time:             Sun 03 May 2026 03:18:02 +0000
ROA not before:           Sun 03 May 2026 03:13:02 +0000
ROA not after:            Sun 02 May 2027 03:18:02 +0000
asID:                     152078
IP address blocks:        36.50.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl
                          rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:93:59:22:82:b3:68:08:3d:34:ad:cf:a3:18:ce:dc:92:15:6d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80
        Validity
            Not Before: May  3 03:13:02 2026 GMT
            Not After : May  2 03:18:02 2027 GMT
        Subject: CN=585DBFB9DC3BC1812EC58680C0B6B93E8571FA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:ec:55:f1:39:17:1a:59:be:bb:0f:42:0f:
                    2a:23:b4:a5:bd:8e:7a:ea:83:eb:10:f9:be:3f:e5:
                    e7:01:87:79:e6:10:82:c7:43:c6:f6:76:7f:e6:14:
                    53:70:95:59:7f:ab:e3:0a:bb:cf:fe:87:fc:0c:48:
                    8c:63:1e:01:cc:37:73:f8:9a:7f:8a:96:1f:22:ce:
                    09:9d:36:81:13:72:f3:71:44:38:fd:cc:d2:98:1f:
                    fe:77:77:d8:36:05:60:35:52:a2:47:a4:72:b5:02:
                    9c:70:2b:be:89:cc:58:38:39:97:9f:8a:bb:de:4a:
                    86:0e:7f:7d:de:bb:78:13:78:60:9a:8d:16:d2:96:
                    d0:66:8a:83:57:27:6d:76:f2:35:db:9b:79:07:ef:
                    71:93:2e:70:31:59:ce:36:4f:a1:48:40:77:ef:db:
                    c9:d8:e8:e6:ee:3b:0a:76:11:33:bf:87:70:02:a8:
                    0e:5b:c4:86:83:7b:9b:d5:2f:6b:ba:05:b2:ef:9d:
                    19:7b:dc:b8:f6:23:bd:da:fc:77:85:78:69:21:c2:
                    d7:50:50:35:a1:8c:dd:2c:ae:4e:14:60:7d:70:82:
                    28:88:c4:bc:85:bb:8a:da:06:fb:54:71:f2:49:fc:
                    5c:1b:ad:7e:c1:a2:bc:a7:aa:4a:a7:1d:a0:b4:09:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5D:BF:B9:DC:3B:C1:81:2E:C5:86:80:C0:B6:B9:3E:85:71:FA:30
            X509v3 Authority Key Identifier:
                keyid:C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/33362e35302e3135342e302f32332d3234203d3e20313532303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:36:5a:de:4f:b7:2a:a8:8f:2b:e1:91:64:e7:76:ba:8a:e5:
         08:28:c2:f7:55:26:26:0f:9a:8c:b2:c3:11:c9:c4:65:76:3b:
         68:8b:e9:21:ba:7a:2b:f5:63:1d:e8:62:71:25:09:18:af:03:
         0b:ca:14:24:f1:df:cb:12:81:43:ed:bb:8d:b9:56:46:24:27:
         b4:e6:b0:5f:e3:8d:b4:fb:e6:2c:aa:f0:81:8a:07:ca:20:1c:
         ad:7b:3c:11:d9:fc:a3:49:df:95:c2:89:60:0d:52:ec:3f:cf:
         f0:ef:8b:1d:00:fa:0b:fc:48:6b:52:7d:87:cc:6d:44:c5:87:
         5b:89:be:5e:38:b6:4e:e1:8d:b3:f9:d4:15:e2:40:9b:cc:05:
         3c:95:88:a9:74:d0:4a:8a:72:89:8e:86:bb:21:0a:cf:50:17:
         85:44:08:64:f0:81:2e:f7:88:d7:11:a6:04:4d:15:10:51:8d:
         7e:59:5a:3f:7d:a2:06:1b:62:1f:b0:f5:c7:a2:af:cb:1f:0e:
         72:12:0a:84:98:fa:53:7d:68:14:ba:40:f2:56:d0:76:45:99:
         7b:42:ca:63:5e:3c:e7:a2:bb:9c:bb:92:c0:39:19:09:34:10:
         90:3f:c5:ab:20:7c:75:a6:c8:f6:56:27:d1:90:ad:53:85:49:
         7e:0c:6e:01
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUV5NZIoKzaAg9NK3PoxjO3JIVbTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ0NEZCOUVBNUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAx
MjQwMkM4MDAeFw0yNjA1MDMwMzEzMDJaFw0yNzA1MDIwMzE4MDJaMDMxMTAvBgNV
BAMTKDU4NURCRkI5REMzQkMxODEyRUM1ODY4MEMwQjZCOTNFODU3MUZBMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNk+xV8TkXGlm+uw9CDyojtKW9
jnrqg+sQ+b4/5ecBh3nmEILHQ8b2dn/mFFNwlVl/q+MKu8/+h/wMSIxjHgHMN3P4
mn+Klh8izgmdNoETcvNxRDj9zNKYH/53d9g2BWA1UqJHpHK1ApxwK76JzFg4OZef
irveSoYOf33eu3gTeGCajRbSltBmioNXJ2128jXbm3kH73GTLnAxWc42T6FIQHfv
28nY6ObuOwp2ETO/h3ACqA5bxIaDe5vVL2u6BbLvnRl73Lj2I73a/HeFeGkhwtdQ
UDWhjN0srk4UYH1wgiiIxLyFu4raBvtUcfJJ/FwbrX7BorynqkqnHaC0CUlVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWF2/udw7wYEuxYaAwLa5PoVx+jAwHwYDVR0j
BBgwFoAUxET7nqXkyk2l+4W6ExxiwBJALIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjcwMDI5MmYtMjg2OC00N2IzLWFjMjEtNjAwYTQ2N2E3MjM3LzAvQzQ0NEZCOUVB
NUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAxMjQwMkM4MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNDQ0RkI5RUE1RTRDQTREQTVGQjg1QkExMzFDNjJDMDEyNDAy
QzgwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3MDAyOTJmLTI4NjgtNDdiMy1h
YzIxLTYwMGE0NjdhNzIzNy8wLzMzMzYyZTM1MzAyZTMxMzUzNDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASQymjANBgkqhkiG
9w0BAQsFAAOCAQEAPjZa3k+3KqiPK+GRZOd2uorlCCjC91UmJg+ajLLDEcnEZXY7
aIvpIbp6K/VjHehicSUJGK8DC8oUJPHfyxKBQ+27jblWRiQntOawX+ONtPvmLKrw
gYoHyiAcrXs8Edn8o0nflcKJYA1S7D/P8O+LHQD6C/xIa1J9h8xtRMWHW4m+Xji2
TuGNs/nUFeJAm8wFPJWIqXTQSopyiY6GuyEKz1AXhUQIZPCBLveI1xGmBE0VEFGN
fllaP32iBhtiH7D1x6Kvyx8OchIKhJj6U31oFLpA8lbQdkWZe0LKY14856K7nLuS
wDkZCTQQkD/FqyB8dabI9lYn0ZCtU4VJfgxuAQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:50:53 2026 by rpki-client