Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32342d3234203d3e203338373533.roa
File:                     34352e3131352e36362e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          vVKZsNPwqsQVmAkRpYwBt0YUaIp9A2FAwH8nJ0kfSd0=
Subject key identifier:   71:59:0E:38:F6:02:4B:2D:B3:07:07:34:26:9D:1B:C1:57:7B:34:42
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       6555E0311A51C60D74FFDE4B5928AAD48F5525DE
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32342d3234203d3e203338373533.roa
Signing time:             Fri 03 Apr 2026 07:00:01 +0000
ROA not before:           Fri 03 Apr 2026 06:55:01 +0000
ROA not after:            Fri 02 Apr 2027 07:00:01 +0000
asID:                     38753
IP address blocks:        45.115.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 12:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:55:e0:31:1a:51:c6:0d:74:ff:de:4b:59:28:aa:d4:8f:55:25:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Apr  3 06:55:01 2026 GMT
            Not After : Apr  2 07:00:01 2027 GMT
        Subject: CN=71590E38F6024B2DB3070734269D1BC1577B3442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3a:bd:c9:ae:09:9e:f5:21:c5:71:47:c6:51:
                    be:e4:ab:7c:c4:a4:7a:81:4d:5d:3e:1b:c5:4a:90:
                    09:f4:ab:63:d7:12:3d:d1:f7:80:96:f2:75:88:aa:
                    20:7b:a2:7c:1f:1d:c1:52:48:ae:89:08:5d:f6:3b:
                    b4:30:ef:02:6f:03:b4:9b:39:21:52:34:79:f3:8d:
                    63:33:cb:27:ed:e2:db:a5:03:00:36:da:87:ec:29:
                    2c:6e:43:fa:78:5b:62:0f:3d:14:46:c6:33:01:f4:
                    f8:b0:b6:85:23:d2:f9:43:a7:d2:1c:39:8b:24:15:
                    1e:b7:37:63:f5:9d:4f:24:f7:2d:0f:95:aa:ac:28:
                    b3:79:9a:91:70:b1:e7:f4:7a:3f:2e:e5:ff:51:db:
                    34:cf:c1:09:a4:1c:7f:43:48:e4:92:6f:21:f1:5c:
                    5c:ee:64:db:0e:83:7d:65:5c:28:6f:f5:fb:ac:97:
                    aa:9a:80:46:90:d6:fa:ac:29:25:bd:60:95:dc:95:
                    96:5f:4d:d4:2f:e7:13:f9:8f:c1:ca:ac:c3:f4:ef:
                    7b:20:87:91:11:4f:23:6e:f8:ea:5e:8c:69:54:62:
                    6c:53:e1:2c:55:d6:93:df:4d:7a:e4:d7:9a:1d:cf:
                    ff:a7:61:61:1d:ce:aa:12:31:1e:96:b7:25:3b:e8:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:59:0E:38:F6:02:4B:2D:B3:07:07:34:26:9D:1B:C1:57:7B:34:42
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8d:e8:3a:85:b7:c5:aa:47:8b:19:f0:da:bc:c7:67:70:77:
         10:b7:99:6e:54:fb:8c:69:3a:2a:ed:9b:65:21:ce:63:8a:cf:
         8e:d9:52:7c:e2:68:74:19:39:92:a2:d2:06:c5:a7:0c:e8:2c:
         ef:a8:39:57:dd:4b:58:39:4d:06:92:68:34:41:0d:ce:cb:b9:
         9b:4e:d3:4e:b7:68:d4:a7:1b:48:c6:71:7b:84:65:39:08:0c:
         c4:a5:94:dd:53:92:f0:d3:ca:d0:c9:33:cd:ef:3d:4d:ef:7b:
         5c:ea:70:8f:79:c9:68:04:7f:3f:53:61:ba:f5:ae:15:51:bb:
         b4:5a:c5:36:1a:72:cb:27:bd:df:2a:54:41:18:8b:fe:13:45:
         77:98:85:f9:c1:7c:e0:8a:01:24:a5:17:ab:89:9e:cf:56:18:
         03:87:db:c8:ba:5d:e0:fc:0c:26:be:9e:a5:11:38:7b:a0:c4:
         8e:c7:f4:b0:0c:9e:b4:9d:a4:04:09:d7:c6:93:c4:35:c7:85:
         97:f4:91:46:cf:e8:e6:d7:32:9a:a9:66:99:d9:9c:7b:0e:ef:
         0e:3b:1d:45:01:60:b5:85:d5:d2:8e:e5:62:3b:51:a9:cc:22:
         9a:c2:94:11:87:f7:ad:2f:3e:3d:42:4f:05:15:be:08:1d:9c:
         18:06:ad:58
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUZVXgMRpRxg10/95LWSiq1I9VJd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2
OERGNkUxNDAeFw0yNjA0MDMwNjU1MDFaFw0yNzA0MDIwNzAwMDFaMDMxMTAvBgNV
BAMTKDcxNTkwRTM4RjYwMjRCMkRCMzA3MDczNDI2OUQxQkMxNTc3QjM0NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmOr3Jrgme9SHFcUfGUb7kq3zE
pHqBTV0+G8VKkAn0q2PXEj3R94CW8nWIqiB7onwfHcFSSK6JCF32O7Qw7wJvA7Sb
OSFSNHnzjWMzyyft4tulAwA22ofsKSxuQ/p4W2IPPRRGxjMB9PiwtoUj0vlDp9Ic
OYskFR63N2P1nU8k9y0PlaqsKLN5mpFwsef0ej8u5f9R2zTPwQmkHH9DSOSSbyHx
XFzuZNsOg31lXChv9fusl6qagEaQ1vqsKSW9YJXclZZfTdQv5xP5j8HKrMP073sg
h5ERTyNu+OpejGlUYmxT4SxV1pPfTXrk15odz/+nYWEdzqoSMR6WtyU76DbnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUcVkOOPYCSy2zBwc0Jp0bwVd7NEIwHwYDVR0j
BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz
NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG
NkUxNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i
NmMyLTQyYWI4YjQ3NjI0OS8wLzM0MzUyZTMxMzEzNTJlMzYzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtc0IwDQYJKoZIhvcN
AQELBQADggEBABqN6DqFt8WqR4sZ8Nq8x2dwdxC3mW5U+4xpOirtm2UhzmOKz47Z
UnziaHQZOZKi0gbFpwzoLO+oOVfdS1g5TQaSaDRBDc7LuZtO0063aNSnG0jGcXuE
ZTkIDMSllN1TkvDTytDJM83vPU3ve1zqcI95yWgEfz9TYbr1rhVRu7RaxTYacssn
vd8qVEEYi/4TRXeYhfnBfOCKASSlF6uJns9WGAOH28i6XeD8DCa+nqUROHugxI7H
9LAMnrSdpAQJ18aTxDXHhZf0kUbP6ObXMpqpZpnZnHsO7w47HUUBYLWF1dKO5WI7
UanMIprClBGH960vPj1CTwUVvggdnBgGrVg=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:54:50 2026 by rpki-client