Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa
File:                     323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (raw, json)
Hash identifier:          /xP/BGJ/T56GUz9rKdqDuLuvM0oUPcvbASLwBYqfNoc=
Subject key identifier:   E4:5F:5F:CE:8B:BB:81:22:51:1F:AB:10:4C:0B:10:AC:27:5E:59:47
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       42F4FD8144A6288411DE35E5DA1D799FB4FAC713
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa
Signing time:             Sun 03 May 2026 02:19:47 +0000
ROA not before:           Sun 03 May 2026 02:14:47 +0000
ROA not after:            Sun 02 May 2027 02:19:47 +0000
asID:                     55695
IP address blocks:        2405:2d40:65::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f4:fd:81:44:a6:28:84:11:de:35:e5:da:1d:79:9f:b4:fa:c7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: May  3 02:14:47 2026 GMT
            Not After : May  2 02:19:47 2027 GMT
        Subject: CN=E45F5FCE8BBB8122511FAB104C0B10AC275E5947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:44:c7:c7:af:c1:8d:73:a7:b5:99:c5:a5:
                    45:08:88:6a:0b:88:e8:fc:e2:a0:b3:3a:5c:5a:0f:
                    e4:8d:88:7a:f8:48:79:8c:8d:5f:1d:7f:09:5d:01:
                    a8:64:5f:a2:83:ec:4d:3b:df:12:ea:e3:00:c0:8d:
                    0b:80:0d:44:ea:e0:bb:18:c2:41:e6:be:ff:2a:c9:
                    d1:93:5c:36:ee:cb:db:f3:a4:3c:15:a3:1d:58:18:
                    6b:17:2a:ff:27:c3:0f:0e:ad:62:e8:f6:69:06:2d:
                    a8:61:21:49:9a:b8:63:1a:b9:47:1e:f9:06:37:dc:
                    84:71:e4:5e:d1:e0:6f:7c:62:36:5f:37:7b:32:ba:
                    73:de:92:c8:26:4d:6d:21:77:89:08:c2:d3:d1:4e:
                    3f:b4:d5:b1:95:fe:29:8e:88:34:38:d0:ed:de:53:
                    2c:bd:63:42:1c:b6:b1:d9:de:e6:6d:4a:71:c2:57:
                    6e:5f:85:d2:fb:5b:13:1c:6d:c6:83:7f:a2:53:2f:
                    32:ed:a2:62:c8:4e:d2:3d:ad:2e:97:d2:62:2d:a1:
                    7a:11:82:fe:e5:6a:31:fc:22:35:c9:da:3d:c4:e6:
                    98:6e:0c:77:f4:ba:5b:4a:0e:e8:fc:7d:32:76:e8:
                    1b:17:b9:3a:65:c3:32:50:c5:3b:58:cd:d9:87:e7:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5F:5F:CE:8B:BB:81:22:51:1F:AB:10:4C:0B:10:AC:27:5E:59:47
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2d40:65::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:dd:0a:58:74:bf:97:f5:86:8a:94:af:63:b3:5a:c6:1e:b2:
         a1:b4:f5:4a:76:fc:a2:9d:90:5c:4f:b8:9d:59:25:b6:69:45:
         03:76:d5:9c:2b:ee:0c:01:61:bf:85:84:a7:a0:ec:da:d9:09:
         4c:37:86:6b:82:3d:1c:d9:92:74:37:7f:6a:b8:1d:e3:b0:a3:
         77:53:39:05:38:8b:a1:c8:e9:0b:54:ec:11:2d:6b:c6:9b:fb:
         6a:ee:5c:00:25:30:4b:7e:08:18:1e:96:21:98:57:64:d0:e0:
         0a:00:cc:90:ab:95:02:ec:ec:ca:19:e5:bc:24:0c:72:24:8c:
         16:8e:91:25:22:5c:22:e9:7b:e5:25:69:8f:05:be:e8:24:6c:
         31:07:4f:79:78:e2:cc:07:84:a8:61:e9:5a:b4:58:36:5d:93:
         06:3f:f4:26:e2:c5:b6:f5:d3:38:26:a4:c2:62:92:9e:87:59:
         f6:ec:3c:a1:03:43:74:74:98:cb:00:bd:39:09:fa:9b:50:04:
         e4:49:ce:65:66:7f:5f:5d:36:c2:46:31:3c:bd:65:63:d2:15:
         88:1f:c2:84:f1:d3:96:51:de:db:29:6f:28:9e:00:f5:ca:02:
         89:e6:ac:3b:c1:2f:c2:8d:15:24:62:41:24:8a:bc:c0:8c:3d:
         4b:4e:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:40 2026 by rpki-client