Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130312e302f32342d3234203d3e203435373135.roa
File:                     34352e3235302e3130312e302f32342d3234203d3e203435373135.roa (raw, json)
Hash identifier:          jkQHVpY+b8x1fVrBYmfrV/VR7GaRoecR+sAgoMdC2Ko=
Subject key identifier:   46:EA:C6:CE:A4:15:94:3B:8E:0D:5A:AC:DA:62:FB:15:61:4B:AA:B1
Certificate issuer:       /CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
Certificate serial:       1BBA72E6498D5A3FF78BC5FDCCA4899955EA018F
Authority key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130312e302f32342d3234203d3e203435373135.roa
Signing time:             Fri 16 Oct 2026 09:32:28 +0000
ROA not before:           Fri 16 Oct 2026 09:27:28 +0000
ROA not after:            Fri 15 Oct 2027 09:32:28 +0000
asID:                     45715
IP address blocks:        45.250.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl
                          rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ba:72:e6:49:8d:5a:3f:f7:8b:c5:fd:cc:a4:89:99:55:ea:01:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
        Validity
            Not Before: Oct 16 09:27:28 2026 GMT
            Not After : Oct 15 09:32:28 2027 GMT
        Subject: CN=46EAC6CEA415943B8E0D5AACDA62FB15614BAAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:49:6c:da:70:09:06:c7:04:5c:45:9b:8c:
                    72:97:c2:c5:34:a4:d2:a0:00:2d:89:29:6f:c9:bf:
                    dc:56:39:9d:28:55:9e:d6:73:4c:d7:35:58:69:c5:
                    84:2e:26:c5:e5:15:13:20:61:ca:6d:91:0d:6b:54:
                    bf:34:85:2a:0a:61:93:f4:c0:e2:42:f7:2d:bc:40:
                    af:79:75:fb:6c:14:6b:78:a3:75:68:da:00:ee:e6:
                    c3:bf:98:1a:27:6d:4c:33:46:c0:38:13:b8:38:32:
                    c7:e1:63:4a:41:b5:05:0f:91:fa:a4:37:e3:bc:3b:
                    04:ce:05:ab:d4:67:84:39:f1:31:49:a9:ac:c4:9b:
                    34:3c:73:a0:c7:ab:b6:6a:41:9a:b9:69:c0:e5:b4:
                    c2:57:b6:6c:66:31:12:30:39:5f:12:a3:17:e7:5d:
                    87:b0:16:3b:29:bf:44:64:5a:62:10:da:40:d3:86:
                    c4:62:44:72:d9:de:13:a9:28:a6:e3:97:ee:e6:bb:
                    da:46:11:86:63:27:15:78:c4:55:ff:c0:a9:8e:1c:
                    71:67:94:50:95:a8:89:29:6f:88:a4:1d:6b:e1:c9:
                    7e:d6:38:c4:2d:59:dd:62:fc:0d:b0:98:00:5b:50:
                    2e:94:13:12:16:ba:7c:ab:d4:02:eb:d4:2d:12:04:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EA:C6:CE:A4:15:94:3B:8E:0D:5A:AC:DA:62:FB:15:61:4B:AA:B1
            X509v3 Authority Key Identifier:
                keyid:0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130312e302f32342d3234203d3e203435373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:3c:b7:92:4e:f1:50:a1:25:89:8d:3b:30:5c:cf:e7:f9:
         bd:85:a7:8d:92:c9:58:f1:e5:a3:35:1a:27:32:a8:82:03:03:
         1f:72:72:32:2f:69:17:a3:e2:57:37:0f:cb:3f:11:09:9b:c4:
         af:0f:e6:a1:f9:58:1d:cf:55:72:d2:19:a1:b0:e9:10:4f:89:
         af:d8:8b:57:ac:f0:d2:6e:d5:13:c9:bb:39:31:fa:5e:9a:35:
         a0:b8:f1:bb:14:75:b6:bc:37:28:2c:e2:f5:05:8a:02:48:5b:
         e5:94:13:53:b4:7c:5c:d0:2d:36:20:70:b2:52:e5:23:f5:f6:
         1d:33:38:83:bb:34:ed:8c:61:58:a5:cc:b9:de:fe:39:88:91:
         18:61:54:80:0e:f6:56:71:05:7b:1c:9b:15:cb:e3:7a:9d:a0:
         2b:29:8f:b9:b5:92:99:21:d5:f5:ce:38:3b:f1:80:34:f1:4a:
         d1:4e:99:64:03:51:56:22:51:41:39:f0:2f:09:ee:27:c1:d5:
         6c:eb:c4:a9:d2:99:51:5f:37:a6:5b:0e:0f:4b:da:5c:63:ca:
         26:b8:9e:24:59:bf:98:be:a3:e8:00:11:76:8d:28:91:9d:a1:
         40:13:4c:f8:1c:47:f5:c4:e3:5b:0a:65:e3:98:bb:da:b5:83:
         c8:4e:38:03
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUG7py5kmNWj/3i8X9zKSJmVXqAY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE0MEQ4NkVBRTI5QzU1OEIyNDA2QTUyREYxNTExMjhB
NTk2REZFRjAeFw0yNjEwMTYwOTI3MjhaFw0yNzEwMTUwOTMyMjhaMDMxMTAvBgNV
BAMTKDQ2RUFDNkNFQTQxNTk0M0I4RTBENUFBQ0RBNjJGQjE1NjE0QkFBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ20ls2nAJBscEXEWbjHKXwsU0
pNKgAC2JKW/Jv9xWOZ0oVZ7Wc0zXNVhpxYQuJsXlFRMgYcptkQ1rVL80hSoKYZP0
wOJC9y28QK95dftsFGt4o3Vo2gDu5sO/mBonbUwzRsA4E7g4MsfhY0pBtQUPkfqk
N+O8OwTOBavUZ4Q58TFJqazEmzQ8c6DHq7ZqQZq5acDltMJXtmxmMRIwOV8Soxfn
XYewFjspv0RkWmIQ2kDThsRiRHLZ3hOpKKbjl+7mu9pGEYZjJxV4xFX/wKmOHHFn
lFCVqIkpb4ikHWvhyX7WOMQtWd1i/A2wmABbUC6UExIWunyr1ALr1C0SBITFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQURurGzqQVlDuODVqs2mL7FWFLqrEwHwYDVR0j
BBgwFoAUCkDYbq4pxViyQGpS3xURKKWW3+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjY0YTczNGYtOTg0ZS00OWNiLWI0YjAtN2MxZDc5MjM3Y2IxLzAvMEE0MEQ4NkVB
RTI5QzU1OEIyNDA2QTUyREYxNTExMjhBNTk2REZFRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTQwRDg2RUFFMjlDNTU4QjI0MDZBNTJERjE1MTEyOEE1OTZE
RkVGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY2NGE3MzRmLTk4NGUtNDljYi1i
NGIwLTdjMWQ3OTIzN2NiMS8wLzM0MzUyZTMyMzUzMDJlMzEzMDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTM3MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC36ZTANBgkqhkiG
9w0BAQsFAAOCAQEATas8t5JO8VChJYmNOzBcz+f5vYWnjZLJWPHlozUaJzKoggMD
H3JyMi9pF6PiVzcPyz8RCZvErw/moflYHc9VctIZobDpEE+Jr9iLV6zw0m7VE8m7
OTH6Xpo1oLjxuxR1trw3KCzi9QWKAkhb5ZQTU7R8XNAtNiBwslLlI/X2HTM4g7s0
7YxhWKXMud7+OYiRGGFUgA72VnEFexybFcvjep2gKymPubWSmSHV9c44O/GANPFK
0U6ZZANRViJRQTnwLwnuJ8HVbOvEqdKZUV83plsOD0vaXGPKJrieJFm/mL6j6AAR
do0okZ2hQBNM+BxH9cTjWwpl45i72rWDyE44Aw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:36 2026 by rpki-client