Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/34352e3234392e3232322e302f32342d3234203d3e203535363634.roa
File:                     34352e3234392e3232322e302f32342d3234203d3e203535363634.roa (raw, json)
Hash identifier:          Vjfy++1UTy4HdciM0b5EcH2pt0NLDYQCKiFurrkzCiE=
Subject key identifier:   E7:CF:3A:61:9C:3E:F0:10:D9:97:13:FD:E5:1E:2F:B4:3C:8B:13:14
Certificate issuer:       /CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265
Certificate serial:       5803029CDF1435BE08BF550E9A21D475F0302C56
Authority key identifier: CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/34352e3234392e3232322e302f32342d3234203d3e203535363634.roa
Signing time:             Tue 20 Oct 2026 04:01:31 +0000
ROA not before:           Tue 20 Oct 2026 03:56:31 +0000
ROA not after:            Tue 19 Oct 2027 04:01:31 +0000
asID:                     55664
IP address blocks:        45.249.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl
                          rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 12:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:03:02:9c:df:14:35:be:08:bf:55:0e:9a:21:d4:75:f0:30:2c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265
        Validity
            Not Before: Oct 20 03:56:31 2026 GMT
            Not After : Oct 19 04:01:31 2027 GMT
        Subject: CN=E7CF3A619C3EF010D99713FDE51E2FB43C8B1314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:87:ee:f7:1f:c1:75:68:4e:5e:a5:9b:69:
                    a7:eb:55:0d:52:e6:4f:56:e0:35:29:c7:08:e6:41:
                    44:ad:96:95:d6:0c:5c:74:c7:77:e9:4f:b2:e2:44:
                    ff:43:e9:57:78:1b:60:59:bc:1c:89:86:df:e6:c6:
                    1c:d7:53:1d:45:25:71:a4:08:9e:a3:47:56:21:92:
                    af:01:ed:91:90:43:4d:25:47:4d:21:ef:6a:3f:c8:
                    77:3a:a4:93:09:91:a4:31:43:ad:54:a9:01:04:89:
                    40:e8:9a:50:7c:28:27:59:01:c5:d2:e4:c4:7f:e4:
                    27:56:4a:c6:13:a0:5e:24:4d:30:30:a4:36:d5:99:
                    72:ce:e0:49:0c:23:76:d2:1c:ac:d6:36:28:a4:8b:
                    9a:1c:4f:cf:20:4f:e3:69:7d:5b:6c:46:66:61:43:
                    3e:e9:dd:1b:a3:17:40:1e:26:f5:2f:79:db:eb:ee:
                    ed:51:6d:14:7d:2d:bd:cc:02:e1:25:ee:3c:af:0d:
                    06:96:bc:2d:76:8e:c2:b2:9e:86:a6:4e:80:a3:fe:
                    72:ce:9f:c8:21:cc:13:f2:be:a3:cf:22:d5:1a:98:
                    f2:f8:5a:57:31:29:be:2e:20:a8:fb:76:5b:88:dc:
                    23:23:4e:f5:74:f8:d9:9d:97:f4:51:50:89:c4:82:
                    77:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CF:3A:61:9C:3E:F0:10:D9:97:13:FD:E5:1E:2F:B4:3C:8B:13:14
            X509v3 Authority Key Identifier:
                keyid:CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/34352e3234392e3232322e302f32342d3234203d3e203535363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:1d:79:8a:e4:cc:6b:3e:74:1d:50:a9:f2:0f:a8:7f:3f:
         fa:d3:2b:4b:2c:ee:4f:15:54:fd:21:10:7d:ed:53:4c:91:9f:
         69:d5:81:cb:ef:2b:d6:b5:4f:b6:2f:e1:b6:8e:1f:80:a2:45:
         56:90:a3:a1:f0:4d:38:bd:76:60:e5:2c:80:a7:3e:6c:d0:78:
         96:50:51:50:c7:2f:b8:06:77:d1:f5:5a:05:4a:a8:cb:fd:69:
         eb:24:59:fb:4a:f1:cf:d9:2d:1e:aa:a6:ce:e6:23:a1:41:fb:
         7d:fa:d9:d0:0d:1c:18:15:24:f1:61:8c:c2:c5:79:52:3a:51:
         85:9d:f8:be:4c:fc:8a:e3:9c:33:3f:3d:fd:56:51:c9:15:a7:
         bc:4b:81:a9:71:3b:bc:32:3b:2b:7d:b2:a0:4b:5b:3c:dd:5c:
         7e:53:83:a8:68:89:7e:59:74:04:e6:1f:ea:1b:8e:af:08:f0:
         13:84:92:6c:f5:e6:bf:fb:fa:86:f8:1e:fb:a3:bb:bc:d2:eb:
         26:c7:24:1e:32:2e:d8:b1:74:0b:63:67:9b:7f:44:cd:e5:e2:
         95:5f:ce:2f:08:d4:c6:74:31:26:89:c6:1c:45:f7:6d:a7:71:
         13:d0:0d:97:4a:fc:f5:9e:b3:ca:58:bf:65:4f:b7:6a:08:73:
         ee:5f:a9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:08:44 2026 by rpki-client