Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa
File:                     AS45493.roa (raw, json)
Hash identifier:          JFF0dBU20PveLMjEby6Gyb1xZkghp5FhZDVpNjyb37Q=
Subject key identifier:   7E:2D:93:07:3C:37:50:AE:A3:D5:80:B4:78:D6:BD:B7:56:33:06:FC
Certificate issuer:       /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial:       4C590B473C70D31AEE2F0F67A7CC0A83D7BF131C
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa
Signing time:             Sun 03 May 2026 02:26:23 +0000
ROA not before:           Sun 03 May 2026 02:21:23 +0000
ROA not after:            Sun 02 May 2027 02:26:23 +0000
asID:                     45493
IP address blocks:        182.253.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
                          rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 12:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:59:0b:47:3c:70:d3:1a:ee:2f:0f:67:a7:cc:0a:83:d7:bf:13:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
        Validity
            Not Before: May  3 02:21:23 2026 GMT
            Not After : May  2 02:26:23 2027 GMT
        Subject: CN=7E2D93073C3750AEA3D580B478D6BDB7563306FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:6b:c3:13:72:d0:3e:6b:12:15:46:6d:27:
                    d2:0b:89:f0:27:2a:2f:01:6b:49:bf:18:d4:0e:28:
                    99:bb:dc:de:6b:ff:69:a7:00:57:ac:3f:d8:65:91:
                    2c:ab:54:61:60:0b:b5:8a:8a:89:41:f1:be:4d:79:
                    e5:6f:cd:61:56:5b:30:6b:7d:ff:30:6e:f2:bf:42:
                    63:b2:a2:d5:12:00:0d:b5:99:ee:fe:5a:94:6a:a0:
                    32:8f:5c:3e:e2:47:a4:00:dc:53:d3:d4:64:3b:32:
                    34:10:46:74:31:de:5f:82:89:f5:40:32:cd:bb:2d:
                    e0:c9:98:18:98:8c:17:63:94:d3:64:3e:d6:77:97:
                    3d:c0:da:3d:f6:5a:59:2b:c8:82:f5:53:c1:64:e2:
                    aa:b6:04:a3:41:a2:a6:7d:c4:1b:5b:6d:1f:61:59:
                    ce:c5:03:1d:c2:d0:12:03:37:30:80:4c:79:4d:29:
                    9b:fb:15:b9:cf:1f:e9:f8:1e:3a:bc:31:98:f6:fa:
                    9f:7c:1b:9f:da:85:bd:45:7b:fe:e7:0d:cc:4c:8c:
                    f4:e4:9c:e2:de:b8:d5:e8:a1:3e:b5:a1:f0:0b:f3:
                    11:0e:44:e4:6f:78:42:eb:85:55:7c:f7:91:df:1c:
                    72:a8:a5:92:1e:8b:47:f9:21:71:ba:9b:ac:e0:fe:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2D:93:07:3C:37:50:AE:A3:D5:80:B4:78:D6:BD:B7:56:33:06:FC
            X509v3 Authority Key Identifier:
                keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:0a:d0:9d:48:16:a8:69:cb:af:c1:72:9e:2c:db:89:7b:db:
         5a:d1:d8:71:60:e3:a5:1f:20:bf:99:9e:71:68:e6:cf:0f:37:
         de:15:55:d7:b7:d4:34:fb:3b:e5:cf:35:59:1f:1a:d4:d0:77:
         cd:e0:68:f3:63:5c:c7:32:0c:ec:42:01:36:c6:fa:52:86:aa:
         ac:af:73:79:21:d3:93:50:72:a8:10:d7:79:0d:a7:1a:72:d6:
         40:d9:79:c7:a8:82:0f:d3:73:30:d1:c6:ab:26:4a:73:74:06:
         8f:fc:4c:e7:22:f9:49:c0:0c:da:4f:fb:3d:ec:1a:c3:0f:f7:
         4a:eb:54:aa:5c:9a:95:7a:63:60:2b:b0:2c:69:3d:31:38:1e:
         c5:60:d3:a1:a0:80:6c:84:6b:00:b0:c4:7b:3f:18:43:27:bf:
         6f:37:a4:1b:ff:bd:fc:b9:e7:39:51:5b:f5:ac:27:56:86:58:
         8e:fd:63:71:31:65:0b:9a:d2:61:b6:7a:f1:22:e3:2c:2f:e6:
         0e:69:bf:5d:49:94:43:96:98:1b:e5:39:c8:7c:60:df:43:e0:
         32:0e:8a:ab:ec:9f:5f:c6:d0:c6:33:c5:89:75:c9:d5:8e:aa:
         13:e0:ff:21:dc:9b:3a:89:04:9e:42:02:02:9b:cd:f2:af:a6:
         0e:f9:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 23:38:55 2026 by rpki-client