Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/323430313a656530303a3a2f33322d3438203d3e203233393531.roa
File:                     323430313a656530303a3a2f33322d3438203d3e203233393531.roa (raw, json)
Hash identifier:          gDi9lsZTgWpDsqBFFdEKjdwXfOikVjH6Fxotmc+Vgaw=
Subject key identifier:   C0:34:00:EA:C4:1E:8C:DD:DE:8D:32:C9:1A:D4:4F:75:EE:97:91:CD
Certificate issuer:       /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Certificate serial:       2D3EDCEF8501B606B714438945EC24E6DBDDABC0
Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/323430313a656530303a3a2f33322d3438203d3e203233393531.roa
Signing time:             Sun 03 May 2026 02:18:18 +0000
ROA not before:           Sun 03 May 2026 02:13:18 +0000
ROA not after:            Sun 02 May 2027 02:18:18 +0000
asID:                     23951
IP address blocks:        2401:ee00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
                          rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3e:dc:ef:85:01:b6:06:b7:14:43:89:45:ec:24:e6:db:dd:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
        Validity
            Not Before: May  3 02:13:18 2026 GMT
            Not After : May  2 02:18:18 2027 GMT
        Subject: CN=C03400EAC41E8CDDDE8D32C91AD44F75EE9791CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:46:6c:2a:f2:8a:2d:1b:40:c0:ec:56:b5:
                    f0:18:20:cc:98:fe:b1:1d:6f:ce:91:1d:3f:d9:66:
                    b9:a9:37:07:fc:35:08:17:fc:9a:87:11:ea:35:f4:
                    3c:09:e8:c2:1b:ab:a0:c2:81:34:fa:bb:06:71:05:
                    3e:3c:7d:b9:06:54:3c:fe:ef:c8:b7:ad:13:52:17:
                    3e:bf:1a:9e:2a:f9:c7:cd:1d:b7:93:25:05:2b:5b:
                    72:7c:e8:e6:52:a1:81:83:72:f2:c0:1a:2c:0b:3a:
                    90:64:e6:ac:37:67:4a:32:86:07:14:97:70:39:87:
                    ab:1c:dc:da:9c:11:b2:41:f9:31:64:1e:d9:4b:7d:
                    e6:0a:fe:8c:f9:88:9b:7a:1c:fa:14:f6:bb:08:34:
                    ef:2c:28:6d:92:62:6c:38:09:0f:77:24:d1:65:61:
                    8f:0e:23:94:c7:27:8d:3a:a9:bf:97:4f:ad:3d:de:
                    74:cb:ff:9f:3a:d2:69:e4:7e:c6:24:2e:e4:8f:60:
                    86:6c:c0:5f:6b:83:04:9d:a2:aa:3e:19:89:c0:25:
                    1e:48:f0:b2:e7:50:d5:3e:49:75:c3:ac:d9:75:2c:
                    24:76:e5:57:dc:1d:81:0e:53:e6:48:0e:94:fc:29:
                    8e:9e:6d:c6:6c:e9:d8:59:2c:b7:6a:47:68:b7:04:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:34:00:EA:C4:1E:8C:DD:DE:8D:32:C9:1A:D4:4F:75:EE:97:91:CD
            X509v3 Authority Key Identifier:
                keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/323430313a656530303a3a2f33322d3438203d3e203233393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:ee00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:4d:1c:08:fd:a6:b1:ad:4d:48:f3:0a:68:bb:96:46:0c:78:
         63:90:2c:3d:b3:8c:b8:c3:bf:62:90:3a:17:7e:41:8f:81:8c:
         45:49:d5:92:64:5a:5c:93:b0:ef:29:3c:48:49:f3:00:a9:d3:
         04:60:e3:30:65:62:43:45:4e:fb:25:2d:16:e1:25:15:4d:b8:
         f5:66:51:c5:73:a7:c2:0b:6e:63:3b:34:21:44:cb:86:2d:ee:
         b1:06:75:3c:c9:2e:d7:ae:4a:b5:fc:fa:f5:46:ea:97:2d:c7:
         b4:5f:d1:dd:f7:7b:a0:d6:2d:68:c5:93:de:5c:b5:75:99:64:
         ce:ef:fa:0e:01:5b:63:b6:ac:6d:08:a3:4a:7b:f9:3b:88:17:
         09:c6:40:17:49:73:e9:0a:39:10:09:13:53:6a:69:d7:d3:86:
         6e:e4:5d:a2:49:62:c0:51:6f:b9:0d:b6:21:65:57:d5:49:93:
         ef:d7:60:94:ee:99:05:c8:f1:f8:03:c2:c2:16:6e:3b:3e:ee:
         f1:0c:b0:53:12:4e:b3:5e:ff:e0:0d:d5:27:33:35:69:79:6b:
         30:e8:e1:8c:8a:cc:d8:a5:65:16:0b:9e:25:7a:7b:65:bc:bc:
         f2:01:89:74:63:23:3d:16:88:03:8c:1b:08:db:b0:5d:7b:28:
         d0:da:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:39 2026 by rpki-client