Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa
File:                     323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (raw, json)
Hash identifier:          rudZyii7Lfn+6okPP2nCFidqxEenNHuTRiklT0/cCEo=
Subject key identifier:   03:D7:C5:18:78:B5:91:D6:22:5A:33:DF:46:99:46:7C:83:75:CB:9A
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       3405D3F938EDCA63EE3D60E64EAB63488D348D22
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa
Signing time:             Sun 03 May 2026 02:19:46 +0000
ROA not before:           Sun 03 May 2026 02:14:46 +0000
ROA not after:            Sun 02 May 2027 02:19:46 +0000
asID:                     55695
IP address blocks:        2405:2d40:92::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:05:d3:f9:38:ed:ca:63:ee:3d:60:e6:4e:ab:63:48:8d:34:8d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: May  3 02:14:46 2026 GMT
            Not After : May  2 02:19:46 2027 GMT
        Subject: CN=03D7C51878B591D6225A33DF4699467C8375CB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:15:90:92:ce:79:47:c0:e6:db:06:a8:36:
                    7c:fa:a2:c4:78:c1:72:f8:e4:92:c4:1f:12:c0:07:
                    8d:61:2c:4c:71:83:6d:e5:b3:a0:2b:eb:70:06:7f:
                    72:e6:ae:92:1c:f3:7f:a0:ce:67:72:9a:c3:96:e7:
                    5d:c6:49:e1:e3:5d:a4:5e:1d:2f:0a:dd:70:15:4a:
                    d0:26:b6:9e:4c:bf:68:c4:3d:2c:cd:64:12:01:d8:
                    79:a6:37:e6:15:f3:7b:2d:06:09:f8:91:6f:5b:6f:
                    1b:63:1b:ae:df:38:df:cd:f7:e0:09:77:a6:f3:61:
                    a3:ac:4a:02:68:68:08:dc:d5:94:30:72:cf:24:da:
                    78:e1:87:6f:93:af:57:ac:cf:71:d8:07:4c:e4:f3:
                    f5:d0:53:d6:1d:40:1b:8b:bf:1e:ba:1b:e1:0a:6e:
                    30:65:5a:05:85:ec:4e:c7:d3:5b:68:2f:84:50:62:
                    bc:48:fd:5e:a0:ee:13:76:5e:da:8c:52:ad:ed:05:
                    88:47:ca:55:5a:58:53:25:ce:64:37:68:c2:05:9c:
                    f2:9f:de:82:40:01:f4:dc:ef:13:da:62:0f:41:7c:
                    7b:16:36:14:ab:ae:fa:4a:c7:9c:be:0c:23:97:c5:
                    07:31:8a:d1:c8:2b:cf:bf:22:ac:fd:be:d2:ee:a0:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D7:C5:18:78:B5:91:D6:22:5A:33:DF:46:99:46:7C:83:75:CB:9A
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2d40:92::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:72:1c:a6:46:7b:e7:a2:ba:7f:27:a1:eb:e2:46:fa:f4:
         41:2b:96:10:d9:0c:5d:a1:3b:e7:12:c4:80:ea:85:e1:b8:3d:
         e4:c7:3b:07:08:cc:66:5e:e7:4c:fd:86:11:cc:73:06:3d:78:
         5a:5d:31:a5:7a:55:ae:f7:ea:bc:3b:77:97:2c:b7:5e:24:53:
         56:41:6b:00:90:32:bf:31:dc:49:ac:a9:de:4b:26:a5:1f:bc:
         59:eb:bf:c9:93:11:d2:81:48:45:c6:32:bd:18:43:2e:09:b4:
         4d:32:a0:91:67:c8:00:ed:09:70:8c:02:97:25:3e:87:21:39:
         69:fe:32:60:4f:87:83:73:05:40:fa:e0:08:87:cb:da:56:be:
         68:91:ef:fc:cb:b1:ae:19:50:50:cd:88:d7:5e:9e:ee:5a:f7:
         16:b0:92:d1:fd:95:8f:4d:58:ee:f6:61:2e:7e:9c:a2:5a:f2:
         e4:01:96:f1:46:bc:01:91:27:db:36:60:bf:12:26:49:25:3b:
         d2:a3:8a:99:07:15:36:46:b2:1b:fe:e4:53:cd:f5:a0:c6:94:
         ad:fe:b0:49:7c:c5:e4:2b:35:ee:de:4b:ec:c5:79:74:42:dc:
         ef:4d:94:5b:32:88:51:8a:da:4e:17:5e:08:97:37:f1:ff:68:
         12:59:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:18 2026 by rpki-client