Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
File:                     323430333a666438303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier:          dbCsmaSulaCClKYEywNT9MsalAWEg2Sso6sAFb6+LZc=
Subject key identifier:   57:8C:8A:BB:52:38:89:EB:52:44:9B:A1:21:D6:0F:B8:D5:84:17:E5
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       60B67B218B4419F927B39AE1445CE597CDAABA1D
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:29 +0000
ROA not before:           Sun 03 May 2026 02:10:29 +0000
ROA not after:            Sun 02 May 2027 02:15:29 +0000
asID:                     58369
IP address blocks:        2403:fd80::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b6:7b:21:8b:44:19:f9:27:b3:9a:e1:44:5c:e5:97:cd:aa:ba:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:29 2026 GMT
            Not After : May  2 02:15:29 2027 GMT
        Subject: CN=578C8ABB523889EB52449BA121D60FB8D58417E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:49:d4:f4:00:9d:6c:fc:f0:10:be:af:0b:
                    09:28:67:1d:c9:e0:05:e1:7f:29:bb:b6:7d:65:64:
                    0b:99:e8:79:46:33:0b:4a:d0:69:31:1c:e1:87:ca:
                    63:c4:fa:60:5b:39:ec:2a:73:ae:b0:fa:47:8a:d5:
                    f1:81:c1:32:9d:6d:56:7e:01:5f:9e:ef:f6:1c:23:
                    f8:00:57:b4:6a:28:6b:4e:fb:70:cc:70:41:54:e7:
                    be:cb:b2:62:50:ee:e3:3e:ae:89:80:21:cd:70:f7:
                    67:ef:7c:f4:70:7f:e4:fc:80:52:95:b4:21:0f:67:
                    d7:e6:63:eb:3c:57:bc:bd:b0:c2:a9:58:cc:46:c6:
                    d5:c7:ae:63:07:28:8a:13:d9:07:e8:6d:fd:0c:b8:
                    af:c1:9e:f0:8f:30:38:08:ad:75:c2:d5:b5:3d:82:
                    5f:c4:ca:fc:f5:f1:a7:03:6d:fd:e4:ca:a2:68:fa:
                    5e:64:2b:cd:49:93:51:41:fc:74:7a:6e:d7:16:e9:
                    0e:fa:47:6e:7a:0c:db:3f:a9:70:da:f3:80:47:3f:
                    04:79:9a:87:73:25:63:b5:b6:8c:c3:da:a4:1f:09:
                    30:02:db:03:81:3e:6c:b8:68:fb:3c:ac:3f:a0:63:
                    82:0a:bd:68:8e:14:0e:b5:74:b1:79:e7:33:a5:4f:
                    54:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8C:8A:BB:52:38:89:EB:52:44:9B:A1:21:D6:0F:B8:D5:84:17:E5
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80::/36

    Signature Algorithm: sha256WithRSAEncryption
         d7:50:a2:b3:41:b7:6d:bc:5c:68:b5:d2:e4:f9:3f:2d:80:21:
         4c:e1:9c:87:4a:33:27:d3:3c:cb:fa:67:4d:92:f4:83:19:24:
         d1:f2:66:a4:fe:e4:71:cf:b6:73:83:1c:80:49:36:14:7d:72:
         4c:47:9f:ec:78:f3:dc:2c:b5:be:4a:c3:d8:d6:21:4e:32:e4:
         e8:24:a1:3d:92:c5:99:93:d3:a9:4e:ba:d2:29:93:4a:3a:69:
         f7:18:d0:34:89:58:aa:3a:b3:ec:b5:f5:bc:65:61:8a:ec:ea:
         97:d9:13:dc:4a:8e:a1:f5:da:35:dd:77:e9:32:37:ca:fe:93:
         af:41:2a:c6:48:4e:db:c2:39:20:80:78:f3:48:30:cf:ba:c8:
         e2:e8:dd:c6:99:e4:bf:66:74:03:3a:e8:c2:94:21:7e:ca:95:
         28:66:fd:d0:53:ea:a5:e8:62:ab:19:cf:24:35:56:cf:57:35:
         74:e1:93:cc:7b:7d:36:71:6d:79:35:ba:07:66:4c:46:61:02:
         e2:65:9d:91:eb:c2:8d:c3:aa:a9:e9:45:11:97:36:39:23:ca:
         d3:da:b9:79:30:ab:c6:6e:69:4a:3e:2d:25:2b:5d:f5:6c:39:
         73:48:49:b2:a8:96:28:80:f0:62:43:5e:24:32:e1:17:f2:b4:
         1e:84:1d:d2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYLZ7IYtEGfkns5rhRFzll82quh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0
MkY5RDUzNzAeFw0yNjA1MDMwMjEwMjlaFw0yNzA1MDIwMjE1MjlaMDMxMTAvBgNV
BAMTKDU3OEM4QUJCNTIzODg5RUI1MjQ0OUJBMTIxRDYwRkI4RDU4NDE3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHknU9ACdbPzwEL6vCwkoZx3J
4AXhfym7tn1lZAuZ6HlGMwtK0GkxHOGHymPE+mBbOewqc66w+keK1fGBwTKdbVZ+
AV+e7/YcI/gAV7RqKGtO+3DMcEFU577LsmJQ7uM+romAIc1w92fvfPRwf+T8gFKV
tCEPZ9fmY+s8V7y9sMKpWMxGxtXHrmMHKIoT2Qfobf0MuK/BnvCPMDgIrXXC1bU9
gl/Eyvz18acDbf3kyqJo+l5kK81Jk1FB/HR6btcW6Q76R256DNs/qXDa84BHPwR5
modzJWO1tozD2qQfCTAC2wOBPmy4aPs8rD+gY4IKvWiOFA61dLF55zOlT1S5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUV4yKu1I4ietSRJuhIdYPuNWEF+UwHwYDVR0j
BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5
NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE
NTM3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMyMzQzMDMzM2E2NjY0MzgzMDNhM2EyZjMzMzYy
ZDMzMzYyMDNkM2UyMDM1MzgzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkA/2AADANBgkqhkiG
9w0BAQsFAAOCAQEA11Cis0G3bbxcaLXS5Pk/LYAhTOGch0ozJ9M8y/pnTZL0gxkk
0fJmpP7kcc+2c4McgEk2FH1yTEef7Hjz3Cy1vkrD2NYhTjLk6CShPZLFmZPTqU66
0imTSjpp9xjQNIlYqjqz7LX1vGVhiuzql9kT3EqOofXaNd136TI3yv6Tr0EqxkhO
28I5IIB480gwz7rI4ujdxpnkv2Z0AzrowpQhfsqVKGb90FPqpehiqxnPJDVWz1c1
dOGTzHt9NnFteTW6B2ZMRmEC4mWdkevCjcOqqelFEZc2OSPK09q5eTCrxm5pSj4t
JStd9Ww5c0hJsqiWKIDwYkNeJDLhF/K0HoQd0g==
-----END CERTIFICATE-----
Generated at Wed May 13 06:37:32 2026 by rpki-client