Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/33362e35302e3235332e302f32342d3234203d3e20313338383239.roa
File:                     33362e35302e3235332e302f32342d3234203d3e20313338383239.roa (raw, json)
Hash identifier:          K614n2L+d8fiCVgpbPYwtvyP0HHCDEIeDO9qqortOwg=
Subject key identifier:   1C:AB:88:1B:A6:B4:4D:A8:A6:A3:7E:28:0F:25:3E:84:2C:E7:01:D4
Certificate issuer:       /CN=37A94886A0E275DC8F922930328C955CC4307FF1
Certificate serial:       6339BC88C53823418B6442B5CCCE6E4CFF68CCA3
Authority key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/33362e35302e3235332e302f32342d3234203d3e20313338383239.roa
Signing time:             Sun 01 Feb 2026 05:00:00 +0000
ROA not before:           Sun 01 Feb 2026 04:55:00 +0000
ROA not after:            Sun 31 Jan 2027 05:00:00 +0000
asID:                     138829
IP address blocks:        36.50.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl
                          rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 15:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:39:bc:88:c5:38:23:41:8b:64:42:b5:cc:ce:6e:4c:ff:68:cc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37A94886A0E275DC8F922930328C955CC4307FF1
        Validity
            Not Before: Feb  1 04:55:00 2026 GMT
            Not After : Jan 31 05:00:00 2027 GMT
        Subject: CN=1CAB881BA6B44DA8A6A37E280F253E842CE701D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:dc:a5:b9:3b:c4:7f:bf:82:28:94:a5:36:
                    ac:47:97:d1:8c:95:c3:9d:84:f1:4c:46:40:11:26:
                    0f:5c:4a:ce:c6:fb:f5:75:ff:5b:c9:14:70:3e:26:
                    c3:cb:3d:f4:e9:f5:81:24:a9:85:d3:c4:36:67:27:
                    b2:f2:6f:a3:a8:ea:e7:d0:f3:d6:1e:05:12:dd:c4:
                    de:94:03:8d:15:3e:08:0d:b8:08:ca:3b:eb:0d:1f:
                    94:fc:e0:d2:a4:e0:b2:bc:51:e1:2d:0c:d9:d3:2b:
                    ef:37:85:01:fe:80:52:da:1b:fb:11:e1:bd:36:fe:
                    2e:04:56:bb:e3:a4:59:d5:34:fb:d7:ae:0c:1a:d7:
                    80:5c:89:92:25:20:2f:df:81:41:3e:40:ac:57:8e:
                    5c:2c:24:1e:ab:8e:38:e6:12:18:55:f3:d7:28:ee:
                    a9:cb:6d:6b:b5:75:3e:dc:88:0f:b0:9c:94:c8:5e:
                    84:d6:4d:d8:d3:d2:84:dd:24:b9:71:69:c4:78:17:
                    5f:89:9c:0b:62:d7:24:29:6e:0e:69:e3:e6:f0:1d:
                    83:59:c3:dd:96:5f:4d:29:60:c3:b8:3e:60:22:94:
                    e3:d6:1e:f3:2f:b3:aa:0b:ab:78:fc:13:f7:c9:43:
                    94:fa:37:5e:16:d5:14:65:51:b4:ea:da:f4:b9:3b:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AB:88:1B:A6:B4:4D:A8:A6:A3:7E:28:0F:25:3E:84:2C:E7:01:D4
            X509v3 Authority Key Identifier:
                keyid:37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/33362e35302e3235332e302f32342d3234203d3e20313338383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:59:ca:04:2d:69:35:18:4f:29:56:0a:42:d6:75:e9:32:fa:
         75:85:e8:14:17:56:2d:ee:4b:14:43:1c:8c:c0:eb:8c:85:9c:
         01:23:01:f0:82:98:69:a1:1f:cc:35:15:90:f8:13:c1:ee:84:
         4d:6a:71:43:53:52:b7:ed:06:27:96:f9:38:91:9d:9c:09:aa:
         02:fc:4c:87:36:cf:69:87:e4:99:48:5f:cc:c0:5d:7e:f8:28:
         a3:f2:5e:5f:45:4c:39:48:f5:fb:59:d0:11:65:08:40:49:60:
         b7:e7:d2:00:c1:69:44:ab:69:1f:6f:81:bf:e5:48:22:00:8f:
         35:6c:ee:b7:72:67:2d:ce:28:df:a5:33:5b:6d:37:24:96:8d:
         42:d7:40:a0:35:fa:be:3a:06:df:5b:5b:87:c3:60:bc:77:7e:
         93:ad:5e:30:e1:e3:d9:25:98:f6:f9:5c:ed:ab:57:e9:1d:0f:
         e2:b0:f4:ce:08:bc:5b:88:d0:2b:a5:d9:ed:7e:5b:59:e5:ac:
         24:b0:56:d0:26:0c:1f:02:63:d8:e3:63:cd:d9:fc:1c:23:56:
         1a:03:9c:f6:70:fc:67:f6:ac:cc:90:02:42:26:34:7a:cb:97:
         e5:aa:71:3e:8e:d2:ad:08:10:ac:b1:c8:c1:e1:6d:07:2c:9d:
         41:19:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:03 2026 by rpki-client