Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/34332e3234322e3133322e302f32342d3234203d3e203538343736.roa
File:                     34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (raw, json)
Hash identifier:          0XQ1YZo4kGL7Y3CIQczOPIPj1y3PxpdocpKouQW/EdQ=
Subject key identifier:   BB:70:32:DD:F5:46:7D:A8:6B:E1:BB:42:86:52:8A:9C:8A:47:78:B5
Certificate issuer:       /CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1
Certificate serial:       0144A5D6801DCAC228C36FE6D8D877DE6EDB7834
Authority key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/34332e3234322e3133322e302f32342d3234203d3e203538343736.roa
Signing time:             Sun 03 May 2026 03:18:24 +0000
ROA not before:           Sun 03 May 2026 03:13:24 +0000
ROA not after:            Sun 02 May 2027 03:18:24 +0000
asID:                     58476
IP address blocks:        43.242.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl
                          rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:44:a5:d6:80:1d:ca:c2:28:c3:6f:e6:d8:d8:77:de:6e:db:78:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1
        Validity
            Not Before: May  3 03:13:24 2026 GMT
            Not After : May  2 03:18:24 2027 GMT
        Subject: CN=BB7032DDF5467DA86BE1BB4286528A9C8A4778B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:6a:3c:03:47:a4:6d:ef:b6:e3:cb:a8:73:
                    ff:47:d8:e1:ea:88:2a:d0:9d:58:b2:b7:ec:dc:48:
                    da:a9:55:91:43:12:6b:c4:1d:cc:76:a2:0a:38:4e:
                    3b:4a:04:95:51:d3:fe:89:7b:93:ac:c9:3d:f5:cc:
                    30:45:ec:ba:83:1a:ee:d5:f4:db:7d:bd:e7:96:35:
                    2e:7b:3f:c5:18:4c:ff:2a:f5:27:b7:5b:f7:82:62:
                    a1:d7:9e:f5:51:a8:4e:48:53:c3:ad:96:4b:e2:f2:
                    fa:ce:52:5f:bc:3b:f2:fc:d5:8f:88:83:d2:3f:bf:
                    ea:45:85:ba:a7:22:91:10:57:06:c8:bc:a4:76:99:
                    d0:2a:93:0f:b1:d7:53:9b:ff:fc:62:ce:d5:59:5e:
                    09:ee:94:cc:f7:97:9e:be:94:cb:05:ce:33:0c:25:
                    7c:3d:56:0d:2e:b7:a7:ff:46:82:58:ed:60:cd:df:
                    90:04:46:3d:4a:05:08:14:35:6b:84:8d:35:06:dd:
                    42:38:f0:cd:d4:8f:6e:72:68:24:b1:c6:99:f2:e2:
                    9f:5f:a2:5f:41:29:de:f5:8b:ca:ab:3d:d4:c4:72:
                    33:ae:94:99:ae:1f:17:74:2c:e1:d2:87:ae:20:52:
                    65:75:aa:f7:83:f3:ce:2d:e1:23:f4:6c:88:20:04:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:70:32:DD:F5:46:7D:A8:6B:E1:BB:42:86:52:8A:9C:8A:47:78:B5
            X509v3 Authority Key Identifier:
                keyid:B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/34332e3234322e3133322e302f32342d3234203d3e203538343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:96:a7:80:35:98:c2:dc:28:67:90:cf:94:dd:ff:6f:69:49:
         da:6e:fa:2c:19:89:d2:01:7c:bd:96:46:8d:80:3f:99:8a:25:
         f2:54:3e:f8:2d:9e:b3:c9:cd:a2:02:63:0b:2d:78:16:84:d7:
         e5:6c:e3:e5:a3:b9:b6:83:54:d2:c0:25:01:17:fe:fe:85:90:
         8b:44:97:59:f9:b4:6a:cb:35:6c:99:f3:2d:cd:83:c5:5b:53:
         27:69:90:62:0d:d3:95:e6:9c:3e:1b:e1:ed:1b:71:76:34:62:
         78:f2:1e:87:f0:16:f8:38:27:e3:10:36:88:6a:27:b2:95:86:
         28:a5:41:b5:cc:fc:f9:31:32:d0:2c:2e:db:d9:98:26:88:dd:
         2f:94:30:fa:99:5b:a3:62:84:e1:3a:bc:2b:90:8f:8c:38:77:
         e2:ac:a3:18:a2:87:33:35:0d:e7:fc:a4:72:a0:93:3f:12:92:
         d2:58:72:b2:90:0f:cb:a7:84:4e:20:70:c5:86:03:f1:5d:3a:
         36:c5:19:a4:92:b8:cd:a1:73:9e:b0:a5:5f:49:6d:59:bb:d0:
         14:38:4b:70:d4:e9:e0:05:5f:da:15:35:a4:41:dc:80:b9:6c:
         bc:75:4d:b5:ea:33:56:ab:5a:42:7f:b9:39:33:59:b2:61:a7:
         b0:8b:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:26 2026 by rpki-client