Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33362d3438203d3e20313430343233.roa
File:                     323430363a323063303a653030303a3a2f33362d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          EN3kqHyGZ29LkAaZy7fUIE4yDrcDxDLll5F/VFmNzLY=
Subject key identifier:   E9:CA:28:98:47:BA:A7:BB:AD:88:3D:EB:DE:37:AC:9F:12:1C:D7:4D
Certificate issuer:       /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
Certificate serial:       615E80AB9AE91C3C4B19742A201AD53E980AF638
Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33362d3438203d3e20313430343233.roa
Signing time:             Sun 03 May 2026 02:16:45 +0000
ROA not before:           Sun 03 May 2026 02:11:45 +0000
ROA not after:            Sun 02 May 2027 02:16:45 +0000
asID:                     140423
IP address blocks:        2406:20c0:e000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl
                          rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5e:80:ab:9a:e9:1c:3c:4b:19:74:2a:20:1a:d5:3e:98:0a:f6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
        Validity
            Not Before: May  3 02:11:45 2026 GMT
            Not After : May  2 02:16:45 2027 GMT
        Subject: CN=E9CA289847BAA7BBAD883DEBDE37AC9F121CD74D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:2d:eb:1b:b6:c0:61:9e:39:6a:ed:6b:92:
                    9f:75:01:e8:2d:35:79:7b:4c:ea:5c:bd:04:23:0c:
                    49:42:ea:9c:9b:a1:ab:d5:9b:dd:45:db:b2:c6:c9:
                    1e:9d:6a:d2:fa:1e:b7:11:f8:9e:26:0e:4d:a2:aa:
                    6d:6d:86:f6:43:89:82:80:00:c0:13:95:83:06:5d:
                    e0:59:8a:a4:85:d1:f1:f7:a5:dd:a5:39:fe:96:b6:
                    4e:ff:2d:88:62:cf:99:b8:60:fc:bb:e7:0a:f1:3b:
                    4b:58:6a:1b:d4:8b:71:9c:10:4b:dd:a6:8b:34:5a:
                    99:f8:53:b1:43:2b:1e:aa:b0:4e:b1:10:25:88:1d:
                    7e:76:75:26:5d:fc:db:f8:be:9b:78:95:4c:b8:b5:
                    b5:8d:c4:31:3f:55:3d:62:3c:a0:9c:8f:ea:20:c1:
                    ce:6b:b7:0d:ac:ac:78:37:6b:02:47:60:8b:f3:91:
                    84:01:8b:70:5d:24:ee:bf:26:c4:3c:42:af:b8:46:
                    7f:80:2a:7e:78:e4:9a:50:5b:b0:2d:d4:51:34:c2:
                    e4:f7:cb:3b:2c:c9:b3:d1:64:1f:92:1a:d0:70:a4:
                    a1:b9:5c:19:a0:4e:49:eb:d0:f9:f0:03:4b:bc:14:
                    23:24:c1:f8:a7:81:a1:b1:e0:f4:d4:bf:39:44:72:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CA:28:98:47:BA:A7:BB:AD:88:3D:EB:DE:37:AC:9F:12:1C:D7:4D
            X509v3 Authority Key Identifier:
                keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33362d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:77:42:14:45:ec:8a:6d:c5:8d:26:25:19:62:67:24:93:60:
         75:7d:f7:22:d9:66:d7:d2:76:81:3f:36:96:43:67:10:e0:69:
         eb:7a:bb:fe:63:c9:a3:a8:d7:b0:36:53:fd:8e:41:e7:a9:44:
         e0:ea:b3:65:6b:10:b5:69:16:1c:a8:96:90:5b:fa:e9:dd:5d:
         cc:69:7f:cc:c9:48:8b:e9:cc:0b:21:66:8b:68:6c:e5:c1:9a:
         c5:82:59:9c:b2:69:19:c2:30:1f:22:63:02:3f:1b:f7:52:d0:
         b4:cf:44:7a:5c:ff:79:39:82:14:6c:e7:59:7d:5c:39:71:67:
         9a:64:0a:43:6c:d0:07:97:52:da:e3:44:d1:de:16:1e:69:ff:
         ec:0e:ca:97:c9:c0:bc:fe:64:0f:63:2d:2b:72:ba:d9:ca:50:
         59:e2:c3:cc:5e:b9:94:0a:ed:08:66:0c:ec:2c:07:43:aa:20:
         9c:a6:d8:ba:ca:34:07:0b:33:76:27:ec:28:ce:70:44:37:a9:
         2c:6e:b6:71:9d:8d:94:26:01:d9:ae:50:c9:ef:67:94:9d:42:
         c3:22:bf:65:03:0c:46:d0:85:89:0c:1a:0f:e8:bd:46:63:98:
         73:3f:be:fb:b1:28:31:5d:d8:63:d9:ce:c8:6d:5f:3f:45:34:
         e6:30:2f:1b
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUYV6Aq5rpHDxLGXQqIBrVPpgK9jgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC
RjMyMkU3MzAeFw0yNjA1MDMwMjExNDVaFw0yNzA1MDIwMjE2NDVaMDMxMTAvBgNV
BAMTKEU5Q0EyODk4NDdCQUE3QkJBRDg4M0RFQkRFMzdBQzlGMTIxQ0Q3NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCani3rG7bAYZ45au1rkp91Aegt
NXl7TOpcvQQjDElC6pyboavVm91F27LGyR6datL6HrcR+J4mDk2iqm1thvZDiYKA
AMATlYMGXeBZiqSF0fH3pd2lOf6Wtk7/LYhiz5m4YPy75wrxO0tYahvUi3GcEEvd
pos0Wpn4U7FDKx6qsE6xECWIHX52dSZd/Nv4vpt4lUy4tbWNxDE/VT1iPKCcj+og
wc5rtw2srHg3awJHYIvzkYQBi3BdJO6/JsQ8Qq+4Rn+AKn545JpQW7At1FE0wuT3
yzssybPRZB+SGtBwpKG5XBmgTknr0PnwA0u8FCMkwfingaGx4PTUvzlEcivHAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQU6coomEe6p7utiD3r3jesnxIc100wHwYDVR0j
BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG
RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy
RTczLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04
OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjUzMDMwMzAz
YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
BiDA4DANBgkqhkiG9w0BAQsFAAOCAQEAY3dCFEXsim3FjSYlGWJnJJNgdX33Itlm
19J2gT82lkNnEOBp63q7/mPJo6jXsDZT/Y5B56lE4OqzZWsQtWkWHKiWkFv66d1d
zGl/zMlIi+nMCyFmi2hs5cGaxYJZnLJpGcIwHyJjAj8b91LQtM9Eelz/eTmCFGzn
WX1cOXFnmmQKQ2zQB5dS2uNE0d4WHmn/7A7Kl8nAvP5kD2MtK3K62cpQWeLDzF65
lArtCGYM7CwHQ6ognKbYuso0BwszdifsKM5wRDepLG62cZ2NlCYB2a5Qye9nlJ1C
wyK/ZQMMRtCFiQwaD+i9RmOYcz+++7EoMV3YY9nOyG1fP0U05jAvGw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:58:45 2026 by rpki-client