Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32342d3234203d3e203338373533.roa
File:                     34352e3131352e36342e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          MkpL/U3lqQQsQ2MTbFGkYCPNYbXjaK+98TmakrFP81M=
Subject key identifier:   33:E4:42:9F:49:36:48:5C:5D:C3:2F:A8:7E:D9:3C:33:59:58:E8:2F
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       1EF8151A4A2744B63E2C17FDF2515796560618C9
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32342d3234203d3e203338373533.roa
Signing time:             Fri 03 Apr 2026 07:00:01 +0000
ROA not before:           Fri 03 Apr 2026 06:55:01 +0000
ROA not after:            Fri 02 Apr 2027 07:00:01 +0000
asID:                     38753
IP address blocks:        45.115.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 12:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f8:15:1a:4a:27:44:b6:3e:2c:17:fd:f2:51:57:96:56:06:18:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Apr  3 06:55:01 2026 GMT
            Not After : Apr  2 07:00:01 2027 GMT
        Subject: CN=33E4429F4936485C5DC32FA87ED93C335958E82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:3a:83:c2:8f:d4:2a:62:1e:df:19:63:ce:
                    fe:41:dd:7f:75:80:aa:86:0f:36:ce:07:9a:fe:80:
                    cc:ba:1a:a1:a2:0f:28:7b:49:c1:03:83:97:bf:58:
                    81:a0:ca:c8:74:d7:ce:48:0f:f4:6d:63:20:32:6e:
                    a3:e9:22:0c:8b:45:82:9b:6f:b7:e9:43:c2:62:59:
                    e9:c0:b8:57:b2:2b:e9:1b:29:e8:af:2a:97:bf:cf:
                    87:30:1a:db:a8:84:1b:bd:d5:85:ba:32:eb:e8:65:
                    00:5f:44:28:df:28:f6:d4:1d:4d:6c:06:1f:75:36:
                    30:ac:fd:96:1b:b2:27:26:06:da:f0:1a:9e:cf:a9:
                    a4:c4:d4:be:57:5c:2e:cb:de:3a:d8:69:21:9b:36:
                    09:f0:c9:60:a4:4f:30:ed:a0:60:00:89:99:51:b7:
                    4c:ff:7d:d8:64:3f:97:03:f0:0b:3a:60:7c:f9:6f:
                    aa:fd:c8:97:67:2a:52:e8:ae:cc:47:12:98:5b:6f:
                    9a:5e:19:f8:a4:41:bb:d8:e9:e6:16:bc:8b:f9:30:
                    8b:2d:ac:44:6d:48:94:6e:48:48:13:b3:81:8a:90:
                    f8:42:a4:d7:04:1c:27:78:89:57:81:55:21:6f:22:
                    da:97:7d:ff:37:b0:c7:6b:64:cb:0a:94:ce:4d:1d:
                    ab:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:42:9F:49:36:48:5C:5D:C3:2F:A8:7E:D9:3C:33:59:58:E8:2F
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:50:b7:28:57:a4:57:9c:65:d8:5d:66:ca:9d:ba:ea:7f:3e:
         f5:19:a6:d6:5c:52:68:d5:63:1f:bb:4e:d2:e0:b3:eb:40:d2:
         f7:0f:ba:f7:9e:bf:b8:e9:5b:12:80:62:13:a8:0a:c8:4a:16:
         9d:eb:4c:8c:e1:ad:26:10:b7:49:5e:56:52:f7:64:01:cf:9e:
         d3:3b:93:41:77:75:ec:af:bc:45:28:86:35:ab:73:a1:87:24:
         f1:31:87:12:73:aa:c8:a9:fd:c4:27:85:5c:c9:bf:1c:32:e5:
         84:6a:15:0e:59:64:da:59:6a:07:2e:7d:d0:34:0e:78:de:99:
         33:52:a3:5e:d9:3b:31:ea:be:5b:0f:2b:e4:9d:da:cd:34:44:
         db:10:40:30:fc:63:aa:c1:da:7d:33:be:a4:73:d1:2b:02:10:
         8d:d2:e1:ec:90:4a:69:f5:82:31:bd:4b:49:d0:97:af:5a:a5:
         79:66:85:b6:1d:47:b3:93:0e:b9:82:bc:50:20:01:18:09:77:
         64:4e:ea:59:d2:37:b4:eb:ad:89:cc:11:07:f2:11:2f:1f:ea:
         8c:dc:5d:0f:f8:0d:a8:3e:5d:a7:fe:c3:37:da:e7:40:f5:64:
         4f:17:85:ea:7f:d9:6b:da:63:df:25:cd:33:6e:86:82:b0:1a:
         ba:97:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:54:14 2026 by rpki-client