Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa
File:                     323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (raw, json)
Hash identifier:          MSu/P2Pnm50BIePknSByUVVfzvx6tKgrZyKAlarEWQ8=
Subject key identifier:   74:D5:E5:86:C2:AA:0C:64:E5:C5:6C:E1:D4:15:72:7A:81:CD:55:4A
Certificate issuer:       /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial:       458DF532E3C17891A543FA80481C6CF5795FA908
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa
Signing time:             Sun 03 May 2026 02:11:38 +0000
ROA not before:           Sun 03 May 2026 02:06:38 +0000
ROA not after:            Sun 02 May 2027 02:11:38 +0000
asID:                     24534
IP address blocks:        2404:9580:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
                          rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8d:f5:32:e3:c1:78:91:a5:43:fa:80:48:1c:6c:f5:79:5f:a9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
        Validity
            Not Before: May  3 02:06:38 2026 GMT
            Not After : May  2 02:11:38 2027 GMT
        Subject: CN=74D5E586C2AA0C64E5C56CE1D415727A81CD554A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a7:88:3d:5e:eb:04:f0:62:7f:5a:e9:81:72:
                    94:67:78:c7:44:ab:70:18:13:12:0f:55:73:7f:2a:
                    d4:25:7c:73:8c:d9:95:0b:a5:44:30:65:fb:32:b7:
                    81:5c:f1:97:e8:bd:4f:dd:35:e7:ed:09:4f:9d:a0:
                    f0:29:66:28:ac:fb:37:68:54:81:12:cf:85:69:28:
                    1d:c3:89:4b:87:73:bf:0e:45:4d:3f:61:59:24:1e:
                    df:bf:ab:c1:cd:95:8a:fb:9c:09:40:66:36:bf:79:
                    d4:12:fc:cf:d8:1d:c1:a0:23:f8:10:8c:25:fd:94:
                    07:9c:ad:75:50:83:7d:a7:9a:36:57:ba:33:26:89:
                    91:31:d4:bd:30:a3:95:aa:c2:d3:53:7c:01:7f:7c:
                    08:8e:b6:ff:8f:3e:ce:ab:4f:28:88:6f:35:50:b2:
                    5b:36:49:88:d9:31:4f:ca:df:05:2b:ee:2a:2b:7b:
                    36:27:e4:e5:03:f4:2e:3c:91:1d:06:3b:0a:d3:ec:
                    81:0e:c9:66:be:e9:d9:a8:cf:60:e5:f5:dd:a1:38:
                    12:ff:4b:60:48:31:6f:0a:0b:5e:ee:fb:b9:3f:a6:
                    c5:80:52:1c:cb:8e:60:ed:85:4d:c5:59:62:dd:54:
                    a1:7d:1f:c5:a0:e0:7d:5c:f8:e1:53:2b:96:4d:ea:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D5:E5:86:C2:AA:0C:64:E5:C5:6C:E1:D4:15:72:7A:81:CD:55:4A
            X509v3 Authority Key Identifier:
                keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9580:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:86:02:db:ac:d2:c3:b9:dd:73:b4:b4:8d:b0:0b:47:a6:1a:
         05:07:a5:b5:a5:a6:11:2e:20:51:45:e1:89:5e:6c:34:41:d7:
         f0:a3:a4:df:40:02:d8:d3:93:d6:f8:d3:0d:31:50:bc:1f:89:
         06:0e:83:d0:cd:97:e0:3e:9d:38:fe:0b:03:a7:eb:e3:e4:e8:
         d8:25:60:12:61:33:2e:5b:99:81:a4:62:c2:49:7d:39:c0:cb:
         fd:b6:10:06:09:7a:d8:fb:63:f8:02:30:51:97:fc:34:6e:26:
         78:f3:27:1c:9d:89:22:61:a9:ae:5a:9d:d6:ce:36:f2:df:97:
         07:bc:f1:4d:ad:39:4a:86:dc:de:11:a5:42:ad:a3:27:5d:9d:
         5c:62:e4:55:f0:c7:08:72:47:ce:c3:5a:72:c8:17:60:fc:84:
         29:35:8e:61:be:91:b4:b3:22:9c:ab:61:55:df:10:1c:f6:e5:
         fe:3c:fc:cb:32:e6:c0:f5:b5:4f:f8:72:30:77:61:2e:7d:d3:
         99:7e:cd:76:17:75:b7:ef:08:f0:83:e5:fa:26:1d:c3:43:1c:
         05:6c:3f:5d:c0:4e:22:c5:85:59:4d:e9:32:5e:61:d2:43:9d:
         d0:6f:88:29:16:d3:f9:de:89:67:74:bf:c1:9d:b3:de:62:10:
         ca:04:6c:44
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURY31MuPBeJGlQ/qASBxs9XlfqQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBOUFBNENGMTRDN0NGMkVEMjg2NDg0MjE4ODU3QTE1
QUU5MUU5QTAeFw0yNjA1MDMwMjA2MzhaFw0yNzA1MDIwMjExMzhaMDMxMTAvBgNV
BAMTKDc0RDVFNTg2QzJBQTBDNjRFNUM1NkNFMUQ0MTU3MjdBODFDRDU1NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDep4g9XusE8GJ/WumBcpRneMdE
q3AYExIPVXN/KtQlfHOM2ZULpUQwZfsyt4Fc8ZfovU/dNeftCU+doPApZiis+zdo
VIESz4VpKB3DiUuHc78ORU0/YVkkHt+/q8HNlYr7nAlAZja/edQS/M/YHcGgI/gQ
jCX9lAecrXVQg32nmjZXujMmiZEx1L0wo5WqwtNTfAF/fAiOtv+PPs6rTyiIbzVQ
sls2SYjZMU/K3wUr7iorezYn5OUD9C48kR0GOwrT7IEOyWa+6dmoz2Dl9d2hOBL/
S2BIMW8KC17u+7k/psWAUhzLjmDthU3FWWLdVKF9H8Wg4H1c+OFTK5ZN6i7fAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUdNXlhsKqDGTlxWzh1BVyeoHNVUowHwYDVR0j
BBgwFoAUVKmqTPFMfPLtKGSEIYhXoVrpHpowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDYyNDA1MmUtMjIwNS00OGYzLWEzY2ItY2U4YjMyNmI4ZjcxLzAvNTRBOUFBNENG
MTRDN0NGMkVEMjg2NDg0MjE4ODU3QTE1QUU5MUU5QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NEE5QUE0Q0YxNEM3Q0YyRUQyODY0ODQyMTg4NTdBMTVBRTkx
RTlBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h
M2NiLWNlOGIzMjZiOGY3MS8wLzMyMzQzMDM0M2EzOTM1MzgzMDNhMzMzMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQzNTMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBJWAADAw
DQYJKoZIhvcNAQELBQADggEBACKGAtus0sO53XO0tI2wC0emGgUHpbWlphEuIFFF
4YlebDRB1/CjpN9AAtjTk9b40w0xULwfiQYOg9DNl+A+nTj+CwOn6+Pk6NglYBJh
My5bmYGkYsJJfTnAy/22EAYJetj7Y/gCMFGX/DRuJnjzJxydiSJhqa5andbONvLf
lwe88U2tOUqG3N4RpUKtoyddnVxi5FXwxwhyR87DWnLIF2D8hCk1jmG+kbSzIpyr
YVXfEBz25f48/Msy5sD1tU/4cjB3YS5905l+zXYXdbfvCPCD5fomHcNDHAVsP13A
TiLFhVlN6TJeYdJDndBviCkW0/neiWd0v8Gds95iEMoEbEQ=
-----END CERTIFICATE-----
Generated at Wed May 13 13:00:19 2026 by rpki-client