Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/3134342e37392e3232392e302f32342d3234203d3e20313432313933.roa
File:                     3134342e37392e3232392e302f32342d3234203d3e20313432313933.roa (raw, json)
Hash identifier:          z0l7Jg74I6/X1fUoqM2N8PY0DnkyoPTf46foVKvgxYU=
Subject key identifier:   00:A5:30:14:77:C3:C9:6A:96:F3:81:CD:DD:96:AA:D7:79:80:20:D0
Certificate issuer:       /CN=87357D7017B31FB08B42DD4ECE6B29F36D937E74
Certificate serial:       3DC3B2F54849AC66C1D345CB7B69B503CEE808F1
Authority key identifier: 87:35:7D:70:17:B3:1F:B0:8B:42:DD:4E:CE:6B:29:F3:6D:93:7E:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/3134342e37392e3232392e302f32342d3234203d3e20313432313933.roa
Signing time:             Wed 30 Sep 2026 15:02:18 +0000
ROA not before:           Wed 30 Sep 2026 14:57:18 +0000
ROA not after:            Wed 29 Sep 2027 15:02:18 +0000
asID:                     142193
IP address blocks:        144.79.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.crl
                          rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 14:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c3:b2:f5:48:49:ac:66:c1:d3:45:cb:7b:69:b5:03:ce:e8:08:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87357D7017B31FB08B42DD4ECE6B29F36D937E74
        Validity
            Not Before: Sep 30 14:57:18 2026 GMT
            Not After : Sep 29 15:02:18 2027 GMT
        Subject: CN=00A5301477C3C96A96F381CDDD96AAD7798020D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:22:41:4a:84:80:7a:57:01:95:98:bd:07:85:
                    40:70:7c:fe:9e:6a:29:67:0a:51:25:67:8a:e8:43:
                    1f:b8:f6:bb:4f:db:45:13:7c:52:78:3e:27:74:7b:
                    91:62:e9:21:c9:2f:99:d9:b3:ad:c0:64:b2:d3:d8:
                    18:3f:2d:ec:98:f4:1b:99:15:c7:6e:2d:84:1d:92:
                    17:64:4c:c5:6f:3c:8c:4f:57:f4:30:12:f7:03:24:
                    58:d8:3a:99:94:ba:a9:6c:57:dc:21:5d:9a:3a:66:
                    d6:e9:91:ab:7f:6e:cd:97:80:6f:b8:f1:b0:de:4f:
                    1f:54:d2:94:e7:33:a6:b5:ad:3c:35:0e:6f:1d:14:
                    d0:5f:ef:21:b4:f1:f8:76:75:95:84:19:07:7e:d8:
                    d2:3e:02:a0:dd:ea:48:94:d6:ac:e4:dd:6f:1b:67:
                    71:a4:17:d5:e1:97:ac:82:5a:c0:56:ef:ce:85:42:
                    2c:91:0e:79:b4:da:fe:cd:90:e9:87:0f:a2:68:c3:
                    9d:7e:d0:ac:d5:34:d7:31:00:8f:eb:9e:4f:71:23:
                    cb:e3:c7:93:0e:79:89:3e:aa:d3:3a:4f:cc:38:47:
                    c4:b6:9c:59:43:3a:2a:d0:75:52:a3:b0:d5:95:f3:
                    ba:27:b4:3c:ac:24:0a:32:02:53:c5:dd:3f:15:09:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A5:30:14:77:C3:C9:6A:96:F3:81:CD:DD:96:AA:D7:79:80:20:D0
            X509v3 Authority Key Identifier:
                keyid:87:35:7D:70:17:B3:1F:B0:8B:42:DD:4E:CE:6B:29:F3:6D:93:7E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/3134342e37392e3232392e302f32342d3234203d3e20313432313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:b8:cc:99:8c:ea:08:6f:7b:94:ba:55:18:e1:8c:6d:29:a9:
         fa:ee:b0:88:a1:ab:2f:72:0b:cb:b1:42:bc:8b:40:e0:8d:48:
         5f:37:23:3a:5e:90:b1:58:28:2b:e5:46:f0:33:94:de:69:b6:
         3e:b9:2a:1d:b8:8e:7b:53:0f:f5:a8:9c:b8:64:ca:22:a1:60:
         ea:08:af:50:6f:19:7a:d1:c6:95:9c:06:66:88:c8:10:cd:d4:
         ed:41:e1:be:ba:95:00:a3:db:d4:a4:f7:95:67:66:6b:ef:a9:
         15:63:19:d8:84:5b:03:99:2e:f0:c2:06:fb:2e:06:cb:55:ef:
         8f:99:8a:15:11:db:85:d3:4f:37:d2:fc:b2:19:e9:49:61:1e:
         77:7f:87:03:ce:12:6e:2f:93:8c:bb:60:54:75:f9:03:37:c9:
         fb:c8:76:11:eb:7f:96:68:29:3f:29:ca:b2:92:53:cc:a1:22:
         b2:ff:d1:bd:f0:99:f4:b3:e9:c5:55:4e:df:83:6d:ce:1f:21:
         ff:a0:b1:5e:fd:b2:35:31:f9:ce:c9:2d:58:0e:dc:05:d0:9e:
         01:3b:84:65:bf:83:1d:2a:6d:ab:2c:fc:58:9a:ea:21:d9:82:
         a6:fa:2b:68:fd:b1:98:c3:a1:43:a1:79:53:1b:d2:b5:78:ef:
         8e:75:39:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:01:26 2026 by rpki-client