Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130332e302f32342d3234203d3e203435373135.roa
File:                     34352e3235302e3130332e302f32342d3234203d3e203435373135.roa (raw, json)
Hash identifier:          JfR90L2fSkzh8gyVqNNZ5dWscKwV334XnwSqf7aqBcI=
Subject key identifier:   10:BB:60:8C:08:EB:07:87:EA:04:42:B7:8D:43:36:38:52:AF:68:FC
Certificate issuer:       /CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
Certificate serial:       3805AD53C2A9A9263CA65D46B4CECE9A4147E51E
Authority key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130332e302f32342d3234203d3e203435373135.roa
Signing time:             Fri 16 Oct 2026 09:33:08 +0000
ROA not before:           Fri 16 Oct 2026 09:28:08 +0000
ROA not after:            Fri 15 Oct 2027 09:33:08 +0000
asID:                     45715
IP address blocks:        45.250.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl
                          rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:05:ad:53:c2:a9:a9:26:3c:a6:5d:46:b4:ce:ce:9a:41:47:e5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
        Validity
            Not Before: Oct 16 09:28:08 2026 GMT
            Not After : Oct 15 09:33:08 2027 GMT
        Subject: CN=10BB608C08EB0787EA0442B78D43363852AF68FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:48:50:32:2a:a4:dc:86:33:06:0f:36:ed:
                    2a:57:3c:0b:04:ba:83:2d:e4:cd:4b:f1:d5:11:f6:
                    76:cb:a5:26:59:06:05:1d:4f:ce:66:ed:02:64:51:
                    37:2a:67:70:d0:ae:c5:08:44:d2:54:39:0f:eb:23:
                    d0:20:41:41:eb:ee:be:89:f4:ba:11:5d:b4:13:0e:
                    f1:6e:ad:7f:f9:3b:f7:65:ff:2f:7b:3a:d3:f8:cf:
                    df:5e:0a:1d:4d:43:d3:12:8c:1a:1a:15:b9:f8:11:
                    11:93:0b:4a:4d:9d:9b:21:a4:b5:10:aa:0e:d9:55:
                    cf:59:7a:58:d6:bd:a7:d2:8c:1c:f2:ed:8d:b7:bd:
                    41:97:7d:1f:c4:b6:3a:88:76:04:3b:c3:99:76:a5:
                    2e:ba:49:8f:72:04:1d:f9:97:da:85:38:cc:0c:aa:
                    3e:2b:5d:97:d3:68:b1:92:89:4c:58:51:02:b4:aa:
                    26:1c:c1:34:22:de:57:fb:df:fd:27:b5:7c:bc:06:
                    2d:05:19:bb:b4:3d:63:6c:17:c5:36:98:08:a9:8a:
                    43:f7:e1:b8:b2:17:05:6b:ab:c2:89:df:f5:e6:5a:
                    75:34:97:82:e7:2a:cf:83:a9:c2:7a:7a:af:5f:89:
                    c5:37:81:4f:4d:03:25:d8:90:fe:07:8f:a3:ff:d8:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BB:60:8C:08:EB:07:87:EA:04:42:B7:8D:43:36:38:52:AF:68:FC
            X509v3 Authority Key Identifier:
                keyid:0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130332e302f32342d3234203d3e203435373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ec:e4:5f:28:55:c0:01:e0:28:ab:9c:42:b1:4f:71:b1:ef:
         38:35:4c:70:46:d2:e5:d2:69:ec:01:4e:62:a9:d3:ac:5f:48:
         25:b8:38:e8:4b:2c:5a:c6:6b:16:d2:21:c8:6a:72:ae:cd:33:
         0f:cb:06:3d:52:70:8a:35:0b:a9:8a:e1:34:59:37:7c:12:07:
         87:a6:af:40:ac:9c:a0:b7:55:d5:57:70:98:ba:9e:0b:9b:06:
         43:9d:af:dc:86:36:3f:60:51:38:f1:9a:42:04:8d:e0:b4:5b:
         e7:5d:ec:03:c4:b5:37:f7:24:f8:75:75:e2:ff:4d:53:99:d7:
         ff:2b:87:df:c7:8f:2c:47:ba:7a:f4:68:d4:0d:f4:f9:4f:53:
         63:30:1a:13:ff:82:dd:a8:a0:55:e9:57:e5:56:2f:c2:70:77:
         05:e8:f8:1f:fb:89:a2:99:3a:de:16:db:49:86:ed:8c:17:f2:
         cb:ba:3e:e1:dc:21:75:59:c9:52:31:8a:7f:8e:47:a7:72:b8:
         00:12:13:34:6c:67:56:0e:0f:06:f1:3a:b3:9b:09:88:f0:be:
         69:9c:e4:a6:d3:a5:81:ca:d6:60:df:10:e6:20:64:40:b7:15:
         b7:ec:d3:b9:39:a4:50:9c:82:74:74:88:c1:f5:7d:a1:fa:de:
         c7:4c:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:05 2026 by rpki-client