Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3332203d3e203538333639.roa
File:                     323430333a666438303a3a2f33322d3332203d3e203538333639.roa (raw, json)
Hash identifier:          Ro9aT4dmBOiXcQWO8IxUX57TL20J5JZ03/mzDUApqPI=
Subject key identifier:   82:F7:C4:AF:28:1C:CB:9D:2C:EA:0C:3F:E5:4A:87:37:82:A5:06:4B
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       56741C327B3BEC00811E9FDB19584A6079E9754E
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3332203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:33 +0000
ROA not before:           Sun 03 May 2026 02:10:33 +0000
ROA not after:            Sun 02 May 2027 02:15:33 +0000
asID:                     58369
IP address blocks:        2403:fd80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:74:1c:32:7b:3b:ec:00:81:1e:9f:db:19:58:4a:60:79:e9:75:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:33 2026 GMT
            Not After : May  2 02:15:33 2027 GMT
        Subject: CN=82F7C4AF281CCB9D2CEA0C3FE54A873782A5064B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:c2:42:2b:e0:5d:a8:12:9f:20:ce:a5:9e:
                    76:4b:e5:87:dc:4d:ca:ca:ba:e6:9d:49:e5:1a:f9:
                    9e:ef:7a:d1:bc:0f:e4:36:db:7c:de:9a:c1:1e:e1:
                    68:47:a7:7f:fa:04:a6:3f:1b:12:53:40:be:ca:64:
                    83:37:0d:aa:8b:a0:db:ab:30:20:ea:a8:6e:65:5d:
                    87:98:89:e7:21:26:ff:09:39:61:e4:a9:57:d3:f9:
                    41:ae:c8:15:dc:57:b2:26:14:7d:f2:40:cf:1d:fa:
                    4c:5c:af:77:1d:85:50:27:13:66:32:26:34:dc:3e:
                    18:3f:9d:e8:7a:24:95:84:dd:4c:0f:0e:3a:58:60:
                    13:4b:ae:71:36:9d:a8:4d:35:70:db:c7:be:0f:da:
                    c6:4e:a2:3a:07:b9:66:d3:81:1f:06:f0:2a:9f:85:
                    85:9e:94:f3:8c:c4:2e:1c:5b:e7:ca:c2:bb:63:e6:
                    37:02:40:c9:98:5e:7b:69:bd:9a:b2:2c:70:56:e1:
                    b8:64:49:3c:ac:c0:35:0b:a4:e5:4c:7b:13:9b:c8:
                    c8:84:52:bb:aa:68:ce:d6:20:50:63:00:f0:11:d0:
                    26:45:dd:7d:5d:64:a3:57:9a:14:36:a5:f8:0c:e7:
                    c3:a2:b9:f6:a7:9f:4c:30:3f:71:e0:72:88:77:62:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F7:C4:AF:28:1C:CB:9D:2C:EA:0C:3F:E5:4A:87:37:82:A5:06:4B
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3332203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:ee:f1:7d:6f:0b:2a:7a:3a:4d:b7:6d:d0:b5:fe:fe:0f:7b:
         7b:04:f6:c9:c9:72:b2:1a:c8:85:2b:e1:ac:9e:61:b3:1d:c2:
         b0:48:7f:97:13:a5:cc:73:10:86:37:c5:d1:3e:f2:a5:e8:37:
         f4:b8:ae:9e:a0:4b:57:4d:b3:d3:77:d8:d2:f9:89:6e:4c:48:
         aa:52:97:e5:e9:68:fc:93:a0:92:67:ea:a0:61:ae:a0:26:1e:
         d8:b0:71:1e:67:e4:a4:95:2a:bc:20:18:96:94:74:ea:d6:38:
         c1:17:10:c7:2d:70:56:61:d4:8e:ed:e3:5c:1d:a5:19:cb:f1:
         dd:6f:1f:e3:d9:9f:c2:06:5e:32:3f:3d:98:a6:40:99:6f:1c:
         11:25:27:e8:b4:86:98:1b:d8:7f:f9:5d:b3:0b:d7:8c:bf:c7:
         13:e6:16:7d:1c:e6:f9:b9:ff:67:2c:70:61:18:50:94:e9:8d:
         5a:eb:29:ce:f8:f7:08:24:d0:cd:21:44:1f:59:82:c5:f9:4c:
         83:2f:04:cb:d3:fb:32:4f:7c:46:9e:e9:da:97:bd:ec:56:a5:
         1d:6d:e6:31:78:da:83:5d:2b:41:2d:2c:42:34:c6:15:62:7b:
         00:9e:8b:ec:94:2f:63:a9:b1:a1:29:70:67:8d:f6:92:ce:98:
         85:de:a4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:49 2026 by rpki-client