Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/34332e3232352e36342e302f32322d3234203d3e203538343935.roa
File:                     34332e3232352e36342e302f32322d3234203d3e203538343935.roa (raw, json)
Hash identifier:          C5UsLGGfAgaq8q5evl5/W2cQoo93LagzGB+x4F3dCCg=
Subject key identifier:   F3:7D:E4:71:98:83:3F:33:76:23:63:B8:2F:DD:ED:84:B9:D3:EB:38
Certificate issuer:       /CN=62DE2AF277EBF89C97513655B43DEF762311A799
Certificate serial:       4F252F677C1EC8950A896E596497390F2262E9F5
Authority key identifier: 62:DE:2A:F2:77:EB:F8:9C:97:51:36:55:B4:3D:EF:76:23:11:A7:99
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62DE2AF277EBF89C97513655B43DEF762311A799.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/34332e3232352e36342e302f32322d3234203d3e203538343935.roa
Signing time:             Sun 03 May 2026 03:09:54 +0000
ROA not before:           Sun 03 May 2026 03:04:54 +0000
ROA not after:            Sun 02 May 2027 03:09:54 +0000
asID:                     58495
IP address blocks:        43.225.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.crl
                          rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62DE2AF277EBF89C97513655B43DEF762311A799.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 10:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:25:2f:67:7c:1e:c8:95:0a:89:6e:59:64:97:39:0f:22:62:e9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DE2AF277EBF89C97513655B43DEF762311A799
        Validity
            Not Before: May  3 03:04:54 2026 GMT
            Not After : May  2 03:09:54 2027 GMT
        Subject: CN=F37DE47198833F33762363B82FDDED84B9D3EB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:46:c6:12:b6:6d:60:58:51:87:74:4c:de:
                    a3:b0:d0:55:c0:a7:5e:b2:db:51:9b:d7:22:83:6f:
                    80:5c:5c:2e:50:bc:d4:b7:d7:69:4a:f3:a9:57:00:
                    d0:13:2f:97:58:47:fb:90:f2:a9:b8:e5:9d:1a:81:
                    83:25:d5:39:3f:1d:ae:42:06:ec:a4:bd:32:81:ce:
                    5e:83:dc:03:3e:a0:b8:1e:b4:6e:19:22:c1:71:17:
                    ad:f1:1a:a0:5f:07:93:f0:4c:8e:96:4e:60:36:13:
                    61:2a:c3:e3:7b:b2:42:56:1e:bc:31:d4:31:12:50:
                    75:f2:00:2f:1f:0d:67:36:41:a7:4e:25:bb:08:b4:
                    76:24:59:6f:cd:4a:0a:c6:45:63:52:b8:a6:93:90:
                    30:ed:54:bb:fa:61:fe:62:3a:6e:67:71:54:bf:60:
                    fa:79:d9:76:74:8e:35:6b:28:6c:8d:40:f8:07:46:
                    eb:0b:c3:ac:7d:43:e1:23:84:82:7f:d3:4f:b1:3f:
                    61:cb:89:6d:8b:7d:2b:09:2b:60:6f:8a:66:6b:8f:
                    e2:d6:a0:27:ed:b7:8c:28:0f:9f:65:56:92:e7:22:
                    59:4d:df:17:50:a2:77:59:03:a0:6b:19:5f:4d:57:
                    0e:66:38:d5:f6:eb:26:70:d6:e0:49:87:47:9f:0c:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7D:E4:71:98:83:3F:33:76:23:63:B8:2F:DD:ED:84:B9:D3:EB:38
            X509v3 Authority Key Identifier:
                keyid:62:DE:2A:F2:77:EB:F8:9C:97:51:36:55:B4:3D:EF:76:23:11:A7:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62DE2AF277EBF89C97513655B43DEF762311A799.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/34332e3232352e36342e302f32322d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:b6:ed:38:57:af:95:82:d3:e4:3e:dc:b2:47:73:d7:87:88:
         96:af:14:8e:0f:36:7e:4b:87:5a:cf:49:fe:2d:20:37:d6:c9:
         f3:44:4c:e2:f3:10:4e:af:00:83:20:0d:88:9e:4d:f9:77:4e:
         48:e0:11:af:fd:3a:26:6e:26:de:d5:d7:cb:84:03:fc:2b:1e:
         a7:1d:d9:b6:aa:4b:ea:54:c4:b8:0f:32:5d:ed:01:b7:b1:19:
         21:78:63:c5:62:7c:92:c7:76:7d:ca:1b:4e:e4:80:11:b6:9c:
         ec:0d:3e:74:72:03:b3:c6:ce:9c:fb:be:08:40:a7:74:d1:fd:
         b0:6f:2b:f9:7e:04:81:0d:82:52:44:f4:01:48:24:a4:71:75:
         24:cf:5b:31:6e:6f:d0:50:10:c0:82:8f:e5:bf:b3:99:bf:95:
         a9:d7:ac:2c:e1:f8:59:c9:cc:d7:65:30:ce:02:e0:02:9b:98:
         20:68:bf:71:56:ff:ab:3c:70:8c:79:4b:37:88:1b:be:2a:23:
         02:8a:89:3a:70:6e:63:29:bd:3d:a7:1e:7e:92:26:35:8d:e5:
         e7:87:66:55:85:cc:3f:21:f5:4e:7b:7b:d4:be:63:d1:47:d0:
         a2:01:4e:35:a3:08:00:15:b1:9b:57:ef:b6:e5:7d:4f:a0:1d:
         8a:42:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:25 2026 by rpki-client