Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa
File:                     323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa (raw, json)
Hash identifier:          EDPtJPyVtYnWSioxvGUPqbPBpLVnJzFlpR0LUhqhryg=
Subject key identifier:   2A:58:54:77:A6:B1:4D:50:AF:6A:E0:99:19:B4:B9:CA:67:8D:65:9C
Certificate issuer:       /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial:       6940EE42C3F8C00D8DBE481E9B27EC33C52B0785
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa
Signing time:             Sun 03 May 2026 02:11:38 +0000
ROA not before:           Sun 03 May 2026 02:06:38 +0000
ROA not after:            Sun 02 May 2027 02:11:38 +0000
asID:                     63516
IP address blocks:        2404:9580:31::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
                          rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:40:ee:42:c3:f8:c0:0d:8d:be:48:1e:9b:27:ec:33:c5:2b:07:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
        Validity
            Not Before: May  3 02:06:38 2026 GMT
            Not After : May  2 02:11:38 2027 GMT
        Subject: CN=2A585477A6B14D50AF6AE09919B4B9CA678D659C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:10:fa:33:6f:5e:6b:6b:9e:b6:e6:d4:4b:
                    93:ed:95:b0:17:fa:3b:b1:87:77:b2:78:bc:7b:5e:
                    5e:de:54:9e:23:af:e7:90:c8:53:05:dd:10:e3:e6:
                    80:60:22:91:8a:bf:7b:3a:50:8e:3a:d1:47:96:2e:
                    3c:39:b3:13:d9:e3:e2:9d:81:e4:51:b7:28:e0:f2:
                    9b:58:d6:cb:85:0a:96:34:eb:e8:7f:15:e0:9c:55:
                    65:09:7a:4c:62:56:14:10:f6:9e:ac:0f:70:56:16:
                    90:13:af:26:6b:cc:e8:bd:c0:ec:fa:f3:2a:8d:c6:
                    4d:ca:80:6d:8d:17:aa:06:46:52:80:b7:a2:f1:b7:
                    69:6b:40:9e:04:7f:c2:a5:fb:35:d5:8c:44:ab:93:
                    4c:17:d5:41:6a:3d:ff:b9:2b:7c:e1:ec:51:98:b5:
                    ca:06:06:9a:6c:8e:65:ff:87:b3:17:95:06:9c:b4:
                    8f:df:58:a4:a2:8c:e5:8a:85:bc:d2:ef:be:21:7d:
                    ef:b8:2c:04:bd:86:e9:ca:b9:b9:2b:ef:0c:b5:7d:
                    54:b3:64:b4:11:17:1f:50:fa:f0:e4:df:e9:13:d4:
                    99:69:74:a9:8e:09:64:c7:cc:5d:7f:96:0e:66:ed:
                    ad:f1:24:38:8f:fc:ff:0e:72:c5:b1:a1:74:18:8b:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:58:54:77:A6:B1:4D:50:AF:6A:E0:99:19:B4:B9:CA:67:8D:65:9C
            X509v3 Authority Key Identifier:
                keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9580:31::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:9e:56:3b:3b:2a:84:5e:24:0e:19:91:99:21:b0:14:87:f0:
         f1:db:05:cd:73:a1:7b:9d:83:8c:05:f8:81:b9:bf:d3:ca:c4:
         7f:5e:c3:e3:52:88:95:16:87:32:67:59:ba:ad:9d:90:d9:d9:
         78:64:41:21:36:2c:a1:fc:9e:7c:f9:de:81:45:1a:7b:79:10:
         b0:75:bd:a3:c6:a1:60:1b:3d:ee:22:13:a9:30:72:05:eb:5d:
         90:50:d3:a6:9b:98:0e:43:c0:99:db:b8:6a:e0:01:83:2d:52:
         a2:8a:c0:7a:44:05:95:8d:9c:53:6e:3e:65:8b:07:59:60:24:
         96:93:f7:8a:7f:85:88:ca:fb:36:d4:9b:9d:07:e6:25:0a:74:
         50:f0:df:19:03:2f:b3:de:c2:6a:b1:48:b7:e4:af:5c:16:f9:
         4b:81:27:de:32:36:28:9d:5a:24:d1:7d:46:88:51:a4:4a:6a:
         8c:9a:f4:9b:4a:1e:12:60:3b:b9:e1:67:e2:7b:46:da:4e:a2:
         6f:77:e7:3f:6a:f8:4f:97:62:e5:dc:5e:43:a5:b5:d0:cb:6e:
         ad:27:12:df:bc:97:6b:0b:af:de:66:fc:c6:88:53:78:65:43:
         60:39:d0:a0:9f:d2:d5:9b:e7:4d:7a:98:aa:eb:bc:c8:ce:54:
         dc:7a:ad:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:48 2026 by rpki-client