Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34302d3430203d3e203233363739.roa
File:                     323430313a323930303a3a2f34302d3430203d3e203233363739.roa (raw, json)
Hash identifier:          TrX27GUrlWHy4UmdNn0DOLuNoqu35JDk2aI6N2MNHwo=
Subject key identifier:   44:0E:40:3D:FB:5A:7B:AB:AD:D6:8A:C4:11:92:72:A0:4B:F1:BC:4B
Certificate issuer:       /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial:       7546F00691AA0E84A17F40F78AF4051B26AB87A5
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34302d3430203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:18:55 +0000
ROA not before:           Sun 03 May 2026 02:13:55 +0000
ROA not after:            Sun 02 May 2027 02:18:55 +0000
asID:                     23679
IP address blocks:        2401:2900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
                          rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:46:f0:06:91:aa:0e:84:a1:7f:40:f7:8a:f4:05:1b:26:ab:87:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
        Validity
            Not Before: May  3 02:13:55 2026 GMT
            Not After : May  2 02:18:55 2027 GMT
        Subject: CN=440E403DFB5A7BABADD68AC4119272A04BF1BC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:99:f3:40:3a:b1:a8:bf:04:f4:62:aa:12:
                    ff:9d:83:10:51:fe:24:9e:9b:e5:e0:df:35:08:dd:
                    b6:e5:b2:0e:48:24:2f:67:80:7c:52:db:2b:fc:15:
                    39:86:8a:b2:4c:1b:36:23:0b:5b:1f:ce:64:00:b4:
                    92:38:f7:b7:e7:7d:71:7d:52:4e:0b:13:8c:3f:4e:
                    3a:3f:84:6b:81:f6:8b:d7:80:34:0e:34:b7:a7:5e:
                    60:ec:52:48:47:ea:9c:a2:80:c5:e1:3f:20:55:42:
                    4e:b2:0d:83:0e:3b:d6:25:37:d8:1c:12:f6:f2:83:
                    99:58:82:0a:ba:c9:8b:0f:f2:c9:e3:be:7b:10:cb:
                    c4:5d:3c:55:f6:d3:db:e9:e3:2e:56:49:9a:1d:be:
                    ca:5f:0f:0f:5b:ac:84:91:c2:2c:3b:77:4c:d0:ae:
                    d6:64:7a:49:f1:a9:bd:57:51:68:5d:04:62:b8:db:
                    13:b7:30:10:10:04:f8:29:44:a5:8e:70:51:db:e4:
                    8a:b1:13:3a:71:0f:03:4a:66:74:e7:81:17:60:bb:
                    ea:a4:dd:69:1c:e3:7d:cd:62:47:70:e0:be:3f:96:
                    dc:c5:e6:02:73:db:79:5a:ea:02:00:3f:05:96:15:
                    6d:ce:ee:f4:3e:2e:46:5b:50:0b:8f:70:d4:97:67:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0E:40:3D:FB:5A:7B:AB:AD:D6:8A:C4:11:92:72:A0:4B:F1:BC:4B
            X509v3 Authority Key Identifier:
                keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34302d3430203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2900::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:4e:3a:78:f2:ee:f7:2d:22:29:14:ca:44:bd:d1:10:a9:e8:
         d8:51:08:60:44:93:4e:16:9a:6e:b4:b0:50:bf:b8:ed:84:9a:
         e6:21:6a:7f:8e:17:9b:f4:dc:1c:94:29:55:4d:60:7d:a7:7d:
         ec:12:59:74:6c:a2:b1:ef:f6:a2:7c:6c:26:71:6f:78:14:70:
         db:e4:35:37:bf:5d:b6:40:26:e8:81:0a:9b:4e:d0:17:dc:c5:
         7e:3e:21:7e:b2:35:46:05:a7:a7:3a:31:87:eb:aa:10:e7:9f:
         5c:cf:a2:39:39:68:e4:c5:42:d9:25:19:2b:33:d2:59:42:6f:
         45:b9:d3:2d:22:df:96:d0:11:93:7e:75:3f:ae:33:88:86:6c:
         4e:6f:ed:07:49:77:34:b3:55:1d:8b:7c:bf:d8:96:8a:02:e8:
         8b:46:a5:cb:8f:6c:b3:d8:63:05:7d:aa:1d:c5:d2:8a:4d:e6:
         06:50:21:bf:d8:ca:e7:b9:a4:5f:53:e3:3b:50:d9:64:99:b5:
         23:82:92:4d:99:13:78:7f:14:7b:b8:8a:2b:2b:63:8f:6d:36:
         30:99:71:69:fb:fc:6a:e1:ed:8a:7a:fb:bf:03:9c:d0:9f:16:
         86:b6:35:4c:67:f6:c4:63:8e:43:5f:c3:41:52:1a:dd:72:a5:
         25:8e:1c:6b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdUbwBpGqDoShf0D3ivQFGyarh6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC
RDg5MEE4NzAeFw0yNjA1MDMwMjEzNTVaFw0yNzA1MDIwMjE4NTVaMDMxMTAvBgNV
BAMTKDQ0MEU0MDNERkI1QTdCQUJBREQ2OEFDNDExOTI3MkEwNEJGMUJDNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjJnzQDqxqL8E9GKqEv+dgxBR
/iSem+Xg3zUI3bblsg5IJC9ngHxS2yv8FTmGirJMGzYjC1sfzmQAtJI497fnfXF9
Uk4LE4w/Tjo/hGuB9ovXgDQONLenXmDsUkhH6pyigMXhPyBVQk6yDYMOO9YlN9gc
Evbyg5lYggq6yYsP8snjvnsQy8RdPFX209vp4y5WSZodvspfDw9brISRwiw7d0zQ
rtZkeknxqb1XUWhdBGK42xO3MBAQBPgpRKWOcFHb5IqxEzpxDwNKZnTngRdgu+qk
3Wkc433NYkdw4L4/ltzF5gJz23la6gIAPwWWFW3O7vQ+LkZbUAuPcNSXZ5RjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQURA5APftae6ut1orEEZJyoEvxvEswHwYDVR0j
BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG
MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw
QTg3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhM2EyZjM0MzAy
ZDM0MzAyMDNkM2UyMDMyMzMzNjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAkASkAADANBgkqhkiG
9w0BAQsFAAOCAQEAhE46ePLu9y0iKRTKRL3REKno2FEIYESTThaabrSwUL+47YSa
5iFqf44Xm/TcHJQpVU1gfad97BJZdGyise/2onxsJnFveBRw2+Q1N79dtkAm6IEK
m07QF9zFfj4hfrI1RgWnpzoxh+uqEOefXM+iOTlo5MVC2SUZKzPSWUJvRbnTLSLf
ltARk351P64ziIZsTm/tB0l3NLNVHYt8v9iWigLoi0aly49ss9hjBX2qHcXSik3m
BlAhv9jK57mkX1PjO1DZZJm1I4KSTZkTeH8Ue7iKKytjj202MJlxafv8auHtinr7
vwOc0J8WhrY1TGf2xGOOQ1/DQVIa3XKlJY4caw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:15:22 2026 by rpki-client