Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130302e302f32342d3234203d3e203435373135.roa
File:                     34352e3235302e3130302e302f32342d3234203d3e203435373135.roa (raw, json)
Hash identifier:          cwM9Kh2yEw6ODn4twTe3API40rwhC1dzzCc6tmmVHY4=
Subject key identifier:   F9:DC:06:E5:3C:34:A7:67:AD:E3:25:2B:D8:61:95:DC:67:EE:87:5E
Certificate issuer:       /CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
Certificate serial:       049AE614EE9FB41B84C14E990D395A71959F8B90
Authority key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130302e302f32342d3234203d3e203435373135.roa
Signing time:             Fri 16 Oct 2026 09:32:16 +0000
ROA not before:           Fri 16 Oct 2026 09:27:16 +0000
ROA not after:            Fri 15 Oct 2027 09:32:16 +0000
asID:                     45715
IP address blocks:        45.250.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl
                          rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9a:e6:14:ee:9f:b4:1b:84:c1:4e:99:0d:39:5a:71:95:9f:8b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
        Validity
            Not Before: Oct 16 09:27:16 2026 GMT
            Not After : Oct 15 09:32:16 2027 GMT
        Subject: CN=F9DC06E53C34A767ADE3252BD86195DC67EE875E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:99:dc:87:59:95:bf:9f:f4:c6:2b:bc:df:
                    b0:49:5e:6a:3a:fa:d1:98:80:05:19:a6:44:57:09:
                    51:a2:5e:58:76:9c:11:93:86:c5:1a:4d:d9:4f:7e:
                    13:6d:45:90:ea:28:c7:21:00:ce:50:4b:52:e2:bc:
                    be:92:84:1d:dd:e3:62:a7:63:85:bd:9c:09:62:0d:
                    68:b6:61:b7:ec:61:e6:b3:98:02:67:7b:1a:09:20:
                    2c:1d:b2:91:c6:01:d7:aa:80:cb:9b:a2:db:4a:f7:
                    e5:a3:11:5e:f0:f8:27:e7:27:8d:4e:84:9e:ac:96:
                    41:2a:bf:d2:9a:df:95:4f:65:8b:44:dc:7c:b0:62:
                    b4:5e:5f:19:a8:ce:ff:c6:03:e0:1f:54:99:46:63:
                    ef:3f:79:12:f6:7f:67:45:72:dc:ee:d0:7b:36:3d:
                    23:62:2a:8a:6b:c7:62:ae:96:a5:24:17:f7:df:31:
                    a0:9c:42:c2:f4:16:c8:eb:96:cf:ce:ff:fd:57:4d:
                    6a:db:c7:dc:ca:f5:56:43:16:a0:6c:aa:b2:00:fa:
                    57:40:f6:a1:ff:21:70:fb:e7:e7:91:4d:10:a4:d8:
                    93:52:4d:58:c2:6f:49:44:b4:46:09:3c:9e:6a:fb:
                    61:bb:19:cc:ad:b1:07:d7:40:a8:e7:98:78:c8:10:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DC:06:E5:3C:34:A7:67:AD:E3:25:2B:D8:61:95:DC:67:EE:87:5E
            X509v3 Authority Key Identifier:
                keyid:0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130302e302f32342d3234203d3e203435373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e8:87:70:68:ad:68:4e:2d:56:95:55:a0:05:16:a6:e3:42:
         84:b4:dc:d9:83:16:43:1b:7c:5d:65:bc:6a:89:7f:b9:b6:fd:
         71:25:21:6a:45:9b:5b:04:d4:0c:19:e8:19:27:2b:2e:da:9a:
         ca:2c:cf:08:eb:46:3a:b4:d9:83:18:82:33:42:13:3c:8a:a6:
         c9:35:86:15:5c:0d:ed:36:c9:5a:d8:fa:01:03:e3:29:75:13:
         42:bc:2e:7e:fb:15:39:83:f6:7d:23:35:4b:66:54:f4:a3:5a:
         d7:ce:13:e7:02:7a:7a:f1:50:1a:69:9b:81:ab:3b:de:df:f9:
         1c:42:ca:72:24:5e:4b:5c:09:e4:63:c2:3d:b6:f4:2c:57:71:
         6f:94:f5:53:44:15:63:58:e8:29:2b:d3:92:c8:2a:e3:96:c7:
         70:95:56:84:b3:d3:ad:00:37:a5:84:ad:e5:2c:b1:94:e7:70:
         5c:90:ec:48:ed:81:1a:8e:5b:f8:b3:7a:38:e6:84:fc:7c:93:
         af:54:96:21:0d:c6:07:30:e4:e4:4c:4e:99:0c:41:14:46:fa:
         96:2b:39:04:74:a1:c1:8b:d2:41:df:eb:ca:e8:11:19:e4:be:
         6a:8b:df:ca:fc:c4:71:5d:2e:6b:52:a6:ef:9b:8e:e1:ca:ec:
         0b:a9:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:02 2026 by rpki-client