Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232372e302f32342d3234203d3e203633383539.roa
File:                     36362e39362e3232372e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier:          6q/WC8ifb4jsmDMXKtRDJKLcTEj4B3yiFcTxYSzfq/c=
Subject key identifier:   AB:26:29:B3:A4:D9:07:51:F1:60:9A:0D:E6:69:BF:CC:F9:AC:16:18
Certificate issuer:       /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial:       51E92650BA939CF3D35CDC0F1DD6F47E6FA8FD77
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232372e302f32342d3234203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:21 +0000
ROA not before:           Sun 03 May 2026 02:22:21 +0000
ROA not after:            Sun 02 May 2027 02:27:21 +0000
asID:                     63859
IP address blocks:        66.96.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e9:26:50:ba:93:9c:f3:d3:5c:dc:0f:1d:d6:f4:7e:6f:a8:fd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
        Validity
            Not Before: May  3 02:22:21 2026 GMT
            Not After : May  2 02:27:21 2027 GMT
        Subject: CN=AB2629B3A4D90751F1609A0DE669BFCCF9AC1618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:84:53:4c:cc:14:85:33:a1:ed:39:5d:9c:
                    cd:3d:67:d7:02:62:91:af:72:1c:c0:1b:13:a2:4b:
                    c1:85:df:0a:11:d8:14:9e:89:7a:db:80:02:ac:4e:
                    5a:2c:b1:5a:fe:cb:82:79:41:3c:04:33:e9:27:71:
                    7a:0b:a9:a7:be:2a:bf:8f:5c:5d:b7:d6:fa:59:46:
                    6b:d7:81:02:c4:96:ab:45:75:53:ce:e1:b9:31:5f:
                    3a:26:93:06:7c:28:26:5c:26:5a:c5:fb:e4:27:7b:
                    5c:38:1d:44:b1:29:d2:03:ef:f8:b9:94:10:84:88:
                    67:0b:76:33:10:26:a1:82:07:c3:4b:fe:ea:b9:33:
                    16:2f:8a:3c:89:1a:a2:9d:b8:da:24:97:30:cb:a6:
                    e8:52:70:de:a1:61:5c:8f:02:09:af:ba:b0:47:33:
                    eb:dd:08:36:83:dd:95:16:7e:f5:5d:8e:4b:84:e1:
                    cd:97:ef:86:1a:55:ae:5a:92:f6:6b:ce:b8:37:21:
                    e3:66:4b:ab:58:05:c8:13:c7:02:b8:f8:ac:ba:61:
                    33:1c:ce:1f:07:e1:b3:fb:e3:67:9a:9f:61:bf:a4:
                    29:42:a8:a4:b6:65:0d:a8:b2:85:d7:e4:30:c9:a3:
                    66:b2:a0:41:b3:90:43:24:b4:ca:68:7f:f8:f7:8a:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:26:29:B3:A4:D9:07:51:F1:60:9A:0D:E6:69:BF:CC:F9:AC:16:18
            X509v3 Authority Key Identifier:
                keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232372e302f32342d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:92:fe:b3:a5:4d:f6:b3:f3:f8:81:20:6a:32:d9:18:37:76:
         bd:92:85:53:d8:59:6d:84:9b:d9:a2:b0:39:ea:e8:9d:6c:56:
         2a:b0:11:fe:c0:5d:fc:a8:2a:41:0d:83:12:5d:78:2e:7d:60:
         ce:93:98:d1:c4:dc:55:1c:a9:23:5f:e0:3f:2e:99:4f:de:25:
         b9:c5:41:93:f2:2d:ad:72:c1:f0:bb:73:67:41:29:46:e2:d7:
         c0:66:ce:47:bd:32:75:99:ab:46:c4:da:9c:5c:1a:cd:5c:c7:
         34:30:a6:d2:68:08:bd:07:9a:91:55:f0:88:35:ea:90:22:df:
         26:90:c8:9c:0b:ba:82:2b:cc:96:e5:9e:e2:01:b1:4f:36:6f:
         45:8c:ae:5d:f0:79:eb:71:ed:04:9d:38:51:af:b5:ee:be:d7:
         c2:e6:a7:47:2b:81:4a:9d:19:2b:f6:3e:f7:9d:c4:fa:66:b3:
         c3:4e:9e:6b:6f:14:88:9f:2e:0d:94:76:a9:9c:40:84:4a:a3:
         ad:89:32:6a:40:84:e4:f6:b1:4b:73:02:26:50:67:b8:d3:54:
         80:7d:e4:30:4a:3f:d2:73:53:3c:d7:56:a9:2d:ec:7e:29:13:
         ea:d8:dc:8d:8d:6e:68:d7:0a:ab:19:cf:2c:e2:a2:10:fd:98:
         62:8d:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 23:07:14 2026 by rpki-client