Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa
File:                     3130312e302e342e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier:          vO+Q8HZjgmJonBgHOxFWAnJzI9j2ku3exsOHuLSofhs=
Subject key identifier:   82:37:B8:3E:C9:02:CA:28:C6:62:09:EC:8F:01:40:C8:CD:49:78:B2
Certificate issuer:       /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Certificate serial:       4AD0A25BFD8FEFA176ABFF9C628AA303B2416D79
Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa
Signing time:             Sun 03 May 2026 02:45:46 +0000
ROA not before:           Sun 03 May 2026 02:40:46 +0000
ROA not after:            Sun 02 May 2027 02:45:46 +0000
asID:                     48465
IP address blocks:        101.0.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
                          rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 07:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d0:a2:5b:fd:8f:ef:a1:76:ab:ff:9c:62:8a:a3:03:b2:41:6d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
        Validity
            Not Before: May  3 02:40:46 2026 GMT
            Not After : May  2 02:45:46 2027 GMT
        Subject: CN=8237B83EC902CA28C66209EC8F0140C8CD4978B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:1e:cf:ed:88:60:0f:63:f9:fc:34:1b:5b:
                    c6:04:8d:4c:e8:9d:0a:42:48:b8:c6:30:4e:5b:61:
                    f2:66:c4:3a:35:9b:0c:db:bf:23:6c:8f:cc:49:ad:
                    f6:36:79:2f:89:c1:06:87:2d:96:be:d4:b7:3e:fe:
                    a8:80:ed:14:f6:31:bc:44:bc:86:7d:f5:87:99:e5:
                    8e:16:0e:38:e8:2e:93:f6:69:98:1e:6c:44:b8:ea:
                    39:81:7e:e2:9b:9a:cc:3d:62:29:1b:f7:8e:48:7f:
                    bc:7a:58:48:88:58:30:80:12:5c:fe:78:9e:8c:a1:
                    de:e6:ec:40:69:df:8a:29:6a:7c:bd:5a:78:3a:c8:
                    9f:ac:a9:ce:5d:9f:59:fe:e9:bf:74:25:3a:1c:78:
                    86:03:45:11:e5:aa:9d:3e:ad:26:af:58:b5:3e:8a:
                    48:31:b7:22:d3:f4:33:c8:95:db:d2:84:50:50:57:
                    dc:0c:e4:d0:18:34:22:3e:b1:ac:20:46:8b:b1:da:
                    75:85:68:86:72:75:c7:85:08:fa:08:0d:a2:5c:57:
                    6b:38:83:2f:1e:77:98:7e:fe:fc:76:74:61:09:56:
                    ac:03:1e:d6:b6:1e:d5:cb:4b:86:2b:94:a3:32:01:
                    b8:5b:33:5a:98:4b:b5:00:e5:a9:09:3f:8e:2c:38:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:37:B8:3E:C9:02:CA:28:C6:62:09:EC:8F:01:40:C8:CD:49:78:B2
            X509v3 Authority Key Identifier:
                keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:6f:04:77:47:4a:96:ea:11:4a:2f:00:04:bf:2f:05:87:c7:
         ca:35:f3:8c:71:e2:cf:f4:18:31:0d:a5:38:f9:4f:42:d5:6d:
         d4:e3:a6:ba:2b:a7:9e:d3:d1:e4:a0:f3:38:18:4e:30:00:50:
         67:86:a4:8f:2e:62:ac:85:5b:b0:c3:19:1e:93:cf:aa:07:a2:
         68:84:41:9f:e0:ec:bc:b8:e2:ab:d4:80:ef:b8:7d:e1:5b:0a:
         fc:8b:fa:22:e0:03:1a:50:52:f2:42:bb:64:e9:97:06:08:2b:
         1d:84:a8:a6:2d:b7:cf:35:09:41:0f:14:d0:db:a6:b7:ed:dc:
         dc:8a:95:91:79:df:de:ae:ad:0e:ea:12:4e:46:c0:ed:0f:a2:
         74:f2:57:c7:e5:da:d8:4a:a1:3a:8b:54:7c:5e:90:14:45:ad:
         b1:67:73:82:b0:ad:72:a5:4b:ef:ed:2c:83:ff:50:a2:7e:6b:
         29:f8:83:59:30:3f:34:43:5d:2b:c8:0d:d0:ff:61:fe:cf:96:
         76:8f:93:9b:a5:a2:10:3a:c4:4b:45:aa:14:88:53:1c:1c:5a:
         ed:2d:58:46:0f:ab:b7:6f:dd:41:82:ab:d5:0b:37:48:0c:b4:
         3f:ae:36:26:89:89:cf:21:4b:9a:56:2a:09:ed:5e:e5:25:a4:
         ac:ff:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:54:06 2026 by rpki-client