Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa
File:                     34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa (raw, json)
Hash identifier:          5uDrM08RtxFQGhpofHGoopc2eLc8d9vvsd0mx/K+JjM=
Subject key identifier:   72:31:B8:28:D4:99:24:80:52:7D:6B:A0:18:ED:29:F9:31:9D:34:A6
Certificate issuer:       /CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E
Certificate serial:       72559AB42B295BAF240F71B2CE301D1A101703F8
Authority key identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa
Signing time:             Sun 03 May 2026 03:19:40 +0000
ROA not before:           Sun 03 May 2026 03:14:40 +0000
ROA not after:            Sun 02 May 2027 03:19:40 +0000
asID:                     152049
IP address blocks:        45.123.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl
                          rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:55:9a:b4:2b:29:5b:af:24:0f:71:b2:ce:30:1d:1a:10:17:03:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E
        Validity
            Not Before: May  3 03:14:40 2026 GMT
            Not After : May  2 03:19:40 2027 GMT
        Subject: CN=7231B828D4992480527D6BA018ED29F9319D34A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:02:a5:03:10:7c:a5:eb:7a:c5:81:68:85:5e:
                    ed:e7:fe:ca:98:bf:c7:b1:da:c6:06:12:26:20:0b:
                    0a:28:e7:88:2e:79:b7:48:b0:33:29:c3:76:c7:a7:
                    bc:f3:92:9e:f8:d5:c9:e8:1a:77:0f:77:2d:18:b4:
                    61:2e:9a:fc:cf:4b:7c:c1:16:9c:f0:40:40:3a:5b:
                    28:b6:34:f4:f0:99:5a:f9:0f:38:86:45:f9:de:e6:
                    11:52:cd:7d:7f:c3:3e:bc:67:f5:93:38:cb:6f:e3:
                    14:d5:9c:c2:8a:61:7c:4b:99:a9:b5:72:3f:eb:bd:
                    9f:b7:83:63:15:cd:bc:1f:71:65:2c:d6:bb:78:f6:
                    67:ed:14:11:dc:01:a1:ac:b3:65:bd:5d:80:5b:98:
                    05:42:ce:50:99:f9:62:36:e9:e6:84:03:0b:7a:71:
                    e9:2b:4b:c5:e1:8e:dc:1e:cf:13:3a:bd:e9:29:3b:
                    4d:cc:d6:e8:2f:d3:75:76:57:4b:bb:c0:fe:ba:44:
                    07:ce:42:3c:f5:68:8e:10:3a:c9:57:0e:12:0b:cc:
                    2f:e7:6f:1a:81:09:71:48:69:64:ad:ba:bd:46:64:
                    96:82:46:2c:95:09:53:a2:a6:b0:6e:53:a5:5f:e4:
                    df:2e:42:9d:33:26:77:8c:c6:87:b4:06:6d:c9:5c:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:31:B8:28:D4:99:24:80:52:7D:6B:A0:18:ED:29:F9:31:9D:34:A6
            X509v3 Authority Key Identifier:
                keyid:54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:33:76:b2:6e:3d:6f:78:37:8d:b9:64:3e:83:74:74:4f:7d:
         ab:1f:0b:c6:30:15:46:f8:2f:15:cd:a3:43:23:96:1f:e1:c4:
         0d:2b:db:a0:7f:de:9c:7e:ba:f8:b4:18:41:c3:d2:b9:57:aa:
         a9:b4:77:79:ce:4f:ba:76:b6:70:db:a3:4e:cf:b3:46:74:46:
         b1:49:79:d1:ba:92:80:ea:e1:4b:ff:fb:19:e4:fc:bb:3a:97:
         26:74:ee:1c:55:4e:06:ca:08:40:13:63:83:d6:18:06:7d:92:
         0e:8d:8d:2e:e4:60:66:1f:d2:ae:40:ac:08:a5:66:83:28:02:
         18:4b:0b:a6:90:db:9f:92:2c:af:85:79:f6:ff:e5:7b:84:c0:
         91:80:28:b4:0e:6b:72:5b:d1:47:85:44:8f:be:8b:25:a4:6b:
         4f:8c:12:df:69:56:b6:29:a3:b6:1a:9f:67:6b:12:8b:47:24:
         20:6b:8a:6e:4c:d0:75:7d:4d:59:84:e5:b0:d3:bf:9b:5a:2f:
         74:50:3f:51:5d:12:3f:2f:d0:d6:0d:59:89:ab:56:10:ed:3c:
         cc:bf:a5:b9:39:cb:8d:90:c8:8e:f6:f8:81:54:51:2c:74:e2:
         1d:81:56:30:cd:97:a5:42:ad:f8:35:4c:b2:d8:8a:8d:ca:8f:
         d3:1c:05:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:12 2026 by rpki-client