Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a653030303a3a2f33362d3336203d3e203538333639.roa
File:                     323430333a666438303a653030303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier:          jLcNBobYy1PN13HO2JW1Qm4nOh0I1+y5PrfyRq3Isqo=
Subject key identifier:   53:3C:90:9D:FD:A1:C2:BF:25:07:16:D5:91:A7:12:14:DB:49:7C:84
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       700CF400B89E4F9F5B712DC92A7D884FC2CDD2FC
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a653030303a3a2f33362d3336203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:23 +0000
ROA not before:           Sun 03 May 2026 02:10:23 +0000
ROA not after:            Sun 02 May 2027 02:15:23 +0000
asID:                     58369
IP address blocks:        2403:fd80:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0c:f4:00:b8:9e:4f:9f:5b:71:2d:c9:2a:7d:88:4f:c2:cd:d2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:23 2026 GMT
            Not After : May  2 02:15:23 2027 GMT
        Subject: CN=533C909DFDA1C2BF250716D591A71214DB497C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:b0:b0:62:a3:56:3a:b4:a1:cf:4d:63:d9:
                    4c:d3:d9:02:28:82:e2:96:e7:a1:8c:ba:cf:05:7a:
                    8a:d0:02:a0:68:df:d5:f7:57:b6:b6:a3:ee:fb:16:
                    ef:89:c5:00:38:db:1f:92:92:a3:ae:0e:9f:11:dc:
                    ea:01:a7:98:85:cb:8a:1b:b3:2e:ef:09:ca:98:1c:
                    15:00:bc:1f:21:2e:fd:55:77:71:ab:f9:47:4a:14:
                    44:f6:6d:74:87:f4:7e:35:d7:a2:69:59:ea:df:44:
                    3c:9b:8f:c8:69:60:14:fb:2c:19:e4:51:4b:c6:da:
                    c1:d3:32:a6:57:b7:9e:65:c0:25:4e:d4:a6:47:c7:
                    63:49:24:5e:c1:90:33:07:82:df:5b:58:24:27:dc:
                    50:7b:99:b1:a9:1e:4e:18:21:9c:a9:52:47:eb:25:
                    98:4b:7d:3f:bd:3c:1d:18:fa:60:44:55:73:f9:45:
                    9c:e5:09:45:b3:d3:69:65:be:75:c6:77:ab:89:6f:
                    94:c3:fa:d4:10:09:4a:98:cd:f1:86:24:12:28:06:
                    f4:81:f5:1b:8a:4f:62:65:63:01:0a:dd:c9:f3:c1:
                    b9:c9:4e:19:80:6c:48:7a:c7:bd:a7:65:e5:e6:c6:
                    00:ef:0e:4f:52:c3:dd:2f:34:38:af:82:45:91:3a:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3C:90:9D:FD:A1:C2:BF:25:07:16:D5:91:A7:12:14:DB:49:7C:84
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a653030303a3a2f33362d3336203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:5c:d7:11:fa:5c:fa:86:9e:f0:51:60:b4:83:2b:4f:48:
         94:56:6a:53:f8:73:29:0e:95:6b:83:5d:7c:15:f8:6d:31:88:
         1c:5c:9b:77:ea:88:2f:04:c9:07:af:76:1b:7f:5f:82:be:26:
         b1:0d:82:ad:d4:c5:b2:63:72:24:31:32:fd:3d:27:17:b0:93:
         bd:86:17:dd:d9:c6:fb:2f:95:7b:ce:83:70:11:a3:30:08:f3:
         3f:fa:9a:95:18:7f:34:de:d0:0f:9f:61:43:8d:8a:92:1c:c5:
         ef:a0:56:39:da:bd:29:f3:1a:0e:76:58:1e:7d:30:9b:da:4c:
         cc:fc:e2:5b:30:14:10:ec:66:2f:97:91:fb:3c:8a:58:83:9b:
         1d:3e:ed:a3:39:1f:c0:14:0d:8b:bd:f0:a1:40:9e:c1:fb:9a:
         6f:4d:f7:df:0d:7a:71:29:31:61:34:99:8f:37:b8:ed:0e:44:
         77:18:61:30:f2:62:e3:1c:72:de:b5:02:cb:c8:3a:92:ef:87:
         39:32:91:3e:3c:f4:f2:cd:bd:77:ab:a1:ec:fb:aa:a5:d8:1f:
         c2:b6:3d:ac:c5:a3:ce:8f:7a:ef:b3:30:60:aa:81:5a:62:64:
         9e:b9:2e:a7:bb:ae:3f:97:c2:7c:3c:35:a0:7e:2f:bd:cf:29:
         79:32:66:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:25 2026 by rpki-client