Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33352d3438203d3e20313430343233.roa
File:                     323430363a323063303a633030303a3a2f33352d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          zJID4VrLvSmsXC10H7Jvv0iurKDtvflqhWXxcqX2uc4=
Subject key identifier:   EC:AA:2C:C0:0A:37:F6:5D:43:ED:DE:BF:FA:10:AB:8B:EB:D2:6B:78
Certificate issuer:       /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
Certificate serial:       7CCE0E00FD3A1068AD940F0D01625431A18134D0
Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33352d3438203d3e20313430343233.roa
Signing time:             Sun 03 May 2026 02:16:35 +0000
ROA not before:           Sun 03 May 2026 02:11:35 +0000
ROA not after:            Sun 02 May 2027 02:16:35 +0000
asID:                     140423
IP address blocks:        2406:20c0:c000::/35 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl
                          rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ce:0e:00:fd:3a:10:68:ad:94:0f:0d:01:62:54:31:a1:81:34:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
        Validity
            Not Before: May  3 02:11:35 2026 GMT
            Not After : May  2 02:16:35 2027 GMT
        Subject: CN=ECAA2CC00A37F65D43EDDEBFFA10AB8BEBD26B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:58:d0:06:a0:19:fa:97:45:0b:2e:5f:25:a0:
                    f1:30:e7:7f:3b:52:61:34:ea:86:cd:b5:d6:75:e2:
                    2c:dd:2e:0e:58:03:b4:10:e0:73:78:04:6b:3a:0a:
                    05:81:eb:8c:24:41:78:f3:3e:03:0e:c5:8e:40:2f:
                    c2:bf:31:e5:c1:32:a1:fc:b2:bc:48:0f:01:7d:9a:
                    e2:81:22:73:e9:13:fc:17:3e:3c:5e:9f:0e:6c:bf:
                    69:83:ea:2b:a0:67:ba:70:4f:14:40:69:5f:74:af:
                    6f:85:07:52:cc:48:bb:a8:f7:ca:4e:e3:26:d7:e6:
                    44:8c:30:e5:e4:8e:b6:50:32:81:3a:05:7d:9e:04:
                    06:80:0d:95:2c:c2:b3:33:97:f1:4c:15:06:81:22:
                    4e:1d:7b:6a:2b:6e:1e:f6:0d:d8:bd:a3:95:ea:21:
                    57:e3:5d:fb:93:90:c8:21:5a:7b:4e:bb:d9:32:f2:
                    73:3f:9c:76:84:9a:5e:8b:e0:45:42:54:8f:9e:cd:
                    d6:0d:a5:54:44:9a:26:ad:94:32:81:de:63:cf:a5:
                    90:0d:98:38:06:a3:ba:a6:bc:2f:18:f1:de:18:16:
                    a1:f6:05:dc:04:1a:f3:da:93:d0:c9:15:e8:45:ae:
                    95:57:71:b9:cc:15:59:e7:24:01:8a:2c:a1:a5:70:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AA:2C:C0:0A:37:F6:5D:43:ED:DE:BF:FA:10:AB:8B:EB:D2:6B:78
            X509v3 Authority Key Identifier:
                keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33352d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:1d:3e:b1:c2:38:2e:b9:d3:ce:e6:12:28:f8:df:47:f9:
         e5:77:ef:99:91:6c:85:cf:6f:d0:f2:47:90:27:cd:ce:d9:1f:
         f0:3b:f9:cb:49:c5:22:09:d7:6a:2d:fd:66:98:70:0e:4e:fc:
         c0:7c:32:b3:23:71:95:83:35:01:55:2e:b8:b2:1a:60:b0:9a:
         13:79:8c:34:d2:74:39:4a:6b:0a:e1:ce:bd:fb:48:71:37:e7:
         78:de:a4:1c:2f:01:b4:1c:e6:e1:f8:0c:f9:3a:26:78:58:36:
         84:35:b8:38:5e:a9:c0:37:06:34:e1:98:e0:84:c6:ba:f5:1a:
         6c:b9:89:f1:eb:f2:84:41:bf:34:f5:3e:3c:54:c2:bc:e0:28:
         e9:a4:d3:67:5c:5f:7e:d4:6d:be:95:29:b1:45:9e:52:62:6e:
         e1:8d:05:a3:aa:1d:21:cd:5d:a0:5b:bb:5b:0d:24:a3:f9:35:
         6d:27:88:56:d6:94:e3:2e:31:f8:44:89:9f:4d:e2:91:15:78:
         e3:1c:11:d9:69:91:1e:2f:a8:52:45:89:ff:73:3d:71:ff:1d:
         18:b5:e4:41:70:17:20:26:79:bb:5a:f7:d2:70:80:51:97:48:
         aa:e3:03:60:37:06:9e:06:fc:6b:f1:2b:59:71:5c:dd:bc:31:
         d3:39:bf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:58:30 2026 by rpki-client