Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa
File:                     323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (raw, json)
Hash identifier:          bcguRSTNIvY7rQWdHUJuBPCFUG/a1bSosrWujs3HsG8=
Subject key identifier:   B4:01:67:30:D0:94:E1:3F:FD:F6:44:2D:CA:12:DA:9A:40:3F:EF:08
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       3E0E935030C57C47F8DEF90F495326130378A67F
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa
Signing time:             Sun 03 May 2026 02:19:47 +0000
ROA not before:           Sun 03 May 2026 02:14:47 +0000
ROA not after:            Sun 02 May 2027 02:19:47 +0000
asID:                     55695
IP address blocks:        2405:2d40:55::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0e:93:50:30:c5:7c:47:f8:de:f9:0f:49:53:26:13:03:78:a6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: May  3 02:14:47 2026 GMT
            Not After : May  2 02:19:47 2027 GMT
        Subject: CN=B4016730D094E13FFDF6442DCA12DA9A403FEF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:1c:72:8a:b8:db:48:b9:b8:f2:03:1f:66:
                    9d:5c:52:43:ea:dd:bb:2c:d3:51:51:fb:b3:10:6d:
                    8b:b7:a4:b0:65:a6:79:b4:6e:88:9b:98:33:6b:9a:
                    d4:08:35:10:8e:bd:11:9c:2e:42:1d:8e:6f:99:de:
                    54:4f:a1:78:ec:55:f9:ef:31:24:f8:a2:67:f7:61:
                    be:f3:6e:a0:fd:af:18:46:3a:37:7c:1e:38:6d:eb:
                    93:2e:05:71:99:52:94:ae:72:61:1e:bf:1a:84:30:
                    40:6a:5a:5b:1e:3e:d1:52:8e:77:1c:84:7a:41:8e:
                    ab:45:93:c1:f2:54:84:2b:bc:5f:fe:1c:ce:8a:98:
                    20:35:ea:3c:7c:be:24:51:67:8c:7a:2a:17:08:33:
                    eb:c5:e3:98:65:ae:93:9a:d2:55:9f:c1:ac:10:c2:
                    0f:10:65:25:b9:45:66:5f:fd:2c:9f:7e:dd:be:ff:
                    01:24:23:7e:a6:28:9a:98:9e:d7:3a:2d:bf:70:2a:
                    41:98:42:93:4f:c0:1a:07:d8:72:0d:4c:0b:06:27:
                    c0:4d:51:44:32:77:d0:49:8a:9c:ac:c6:4d:4c:d1:
                    88:82:fe:cb:ed:30:a3:b9:2e:d9:ba:52:56:41:0c:
                    2b:2f:54:2d:52:3c:ea:5a:14:8e:03:1c:b4:91:cf:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:01:67:30:D0:94:E1:3F:FD:F6:44:2D:CA:12:DA:9A:40:3F:EF:08
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2d40:55::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:c4:2c:d5:41:ef:3b:59:b3:fa:24:f3:1d:22:d5:e8:d1:5f:
         6c:40:1b:5f:ed:04:8d:98:e0:8e:80:e2:52:af:94:b2:5f:86:
         d6:63:71:fe:4d:fb:e0:c6:cb:fc:7b:af:9e:42:d4:45:e3:41:
         df:0e:49:e5:ce:b8:3a:8a:f1:4a:a6:7b:61:06:3c:c0:ce:59:
         fb:9d:51:6a:ee:b7:60:02:1b:05:b2:f6:a9:6b:a7:f4:43:8b:
         f3:9a:42:dc:8f:d1:6a:ec:37:6b:57:42:e4:58:5d:c7:65:1c:
         35:1e:4b:d9:fe:54:20:ad:91:b6:fd:4b:83:d7:86:2e:58:21:
         1f:7f:ce:58:58:3e:ac:f6:b0:8f:89:f2:23:00:57:07:74:b8:
         4f:ab:c6:23:f1:1d:db:0f:06:a6:b9:46:d6:77:5d:7e:42:c9:
         82:3b:cd:26:72:4e:94:32:54:74:18:b9:72:f9:b1:a2:3c:10:
         60:5c:80:20:78:92:11:81:43:1d:78:b7:99:2f:fb:0e:d3:9e:
         f1:ec:9d:7d:36:47:86:d9:74:9b:80:7f:a7:83:be:17:d2:d7:
         0f:03:fe:6f:cd:07:12:a3:ee:d6:a6:5d:e0:43:8b:c0:88:7e:
         ff:6d:83:cf:31:a7:5e:2c:c1:da:0e:53:0a:95:01:77:e5:3e:
         55:0d:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:27 2026 by rpki-client