Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/34392e302e32342e302f32332d3234203d3e203137393935.roa
File:                     34392e302e32342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=
Subject key identifier:   81:04:BE:89:DB:48:BC:7E:DC:65:A4:88:30:5D:49:C2:D5:0F:2D:92
Certificate issuer:       /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
Certificate serial:       6040A3AC9CB722065EA92259979AB76EDB3A4618
Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/34392e302e32342e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 03:19:42 +0000
ROA not before:           Sun 03 May 2026 03:14:42 +0000
ROA not after:            Sun 02 May 2027 03:19:42 +0000
asID:                     17995
IP address blocks:        49.0.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl
                          rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 20:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:40:a3:ac:9c:b7:22:06:5e:a9:22:59:97:9a:b7:6e:db:3a:46:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
        Validity
            Not Before: May  3 03:14:42 2026 GMT
            Not After : May  2 03:19:42 2027 GMT
        Subject: CN=8104BE89DB48BC7EDC65A488305D49C2D50F2D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:9a:da:fb:a5:7f:3e:c5:50:9b:ef:cf:44:
                    e2:22:ac:11:49:ef:2b:f2:90:67:9f:fb:5a:b1:59:
                    1a:83:2e:72:cc:79:47:c5:7c:4c:b6:19:cd:6c:11:
                    2c:bc:97:4c:37:73:de:63:b9:c3:3c:60:fa:a6:90:
                    cb:7c:03:96:be:bd:ad:38:b3:4a:1c:f1:cf:48:2d:
                    c2:19:9f:a7:63:dd:63:2b:6a:2a:04:f4:22:2f:61:
                    7d:c6:91:af:a0:54:45:52:7e:70:68:f0:28:24:0f:
                    04:d3:1c:eb:ed:d0:bb:90:df:bb:4a:c0:7f:b9:b7:
                    83:e9:1d:3b:b5:dc:16:95:2a:f2:f8:de:d4:cf:3c:
                    6c:94:0c:b9:d7:a0:2b:b2:9d:e6:49:79:6f:5f:10:
                    74:bd:68:09:a1:cd:2b:17:1b:37:d9:f0:80:86:e3:
                    26:33:e8:aa:52:ba:4e:c3:24:ee:e6:f3:89:a9:4f:
                    60:5b:54:d3:03:ac:b7:87:b4:37:14:88:02:91:93:
                    ed:3d:0f:c1:be:bc:bf:ac:7b:c4:4d:d5:cc:78:ca:
                    ac:ca:66:ca:34:1f:d0:2c:d9:56:9a:2e:4f:38:90:
                    11:0e:3f:45:97:38:fb:c1:9e:6d:2c:53:9a:e0:46:
                    2a:a0:67:6d:73:ea:9e:88:48:e1:17:53:b7:c9:5e:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:04:BE:89:DB:48:BC:7E:DC:65:A4:88:30:5D:49:C2:D5:0F:2D:92
            X509v3 Authority Key Identifier:
                keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/34392e302e32342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:ed:e9:0a:81:dc:d4:32:1f:98:10:41:89:60:a6:fe:d0:54:
         60:ff:84:f7:fe:7b:c5:7a:05:93:97:88:69:fc:6b:9d:29:1b:
         d4:ae:26:f1:ac:a8:2b:9f:bb:e7:eb:84:f2:50:14:86:ea:96:
         43:e1:71:0d:3a:a5:f9:b2:1b:ec:d3:8d:43:0d:26:4a:a7:87:
         2b:34:ca:4f:73:68:83:af:39:f7:be:93:6c:92:19:fe:4b:1d:
         b8:66:07:28:a0:31:47:a0:62:6c:88:c5:47:0a:30:72:44:6e:
         8e:6e:c0:f2:82:d2:4c:77:f3:ac:26:67:76:09:59:fc:d4:b0:
         e7:2d:4f:c2:48:1d:9b:46:10:47:62:2b:d7:31:79:51:7c:cd:
         db:86:b2:91:0f:ee:6b:ec:10:87:cc:4a:28:bc:85:87:fc:b1:
         cf:37:42:4c:8e:e5:0e:e4:01:9c:ac:5d:5f:84:e6:bd:2f:27:
         b4:31:8b:12:03:b7:1b:01:4e:79:39:4c:ce:d5:84:25:75:78:
         68:29:21:97:f6:67:7d:5b:be:22:53:5f:fe:55:44:9d:fe:70:
         52:52:33:c0:1f:39:3f:6b:9e:f0:4a:58:1e:1a:42:55:e0:11:
         f3:5f:66:15:e0:87:0f:b8:d3:78:3d:72:67:e2:ac:b6:f0:6e:
         5d:05:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:33:56 2026 by rpki-client