Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          WknzV8Nu8IMTlOIi8o8zGv3PuOd24Q9LnQo6SQwKlsg=
Subject key identifier:   0B:35:F1:9C:54:DE:F4:F9:7F:85:15:C2:23:5C:0A:2E:9C:D2:68:15
Certificate issuer:       /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial:       5D34FEE843BC7B156F19261B4BC021228D1DCA1C
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 03 May 2026 02:20:46 +0000
ROA not before:           Sun 03 May 2026 02:15:46 +0000
ROA not after:            Sun 02 May 2027 02:20:46 +0000
asID:                     140413
IP address blocks:        2406:13c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
                          rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:34:fe:e8:43:bc:7b:15:6f:19:26:1b:4b:c0:21:22:8d:1d:ca:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
        Validity
            Not Before: May  3 02:15:46 2026 GMT
            Not After : May  2 02:20:46 2027 GMT
        Subject: CN=0B35F19C54DEF4F97F8515C2235C0A2E9CD26815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:35:bf:4e:43:ac:f8:52:1f:0e:a8:b9:90:
                    0a:86:2b:68:41:41:0c:23:db:82:be:ee:39:45:78:
                    73:8a:e1:e6:d1:ba:12:2d:24:5d:4f:bd:d2:51:a5:
                    65:b7:c9:9f:f0:67:25:c1:b1:4f:7d:84:f0:0a:3c:
                    7a:91:ae:c6:36:ee:02:85:4e:3b:a7:93:ae:4d:44:
                    1e:d8:30:27:f0:58:01:da:a7:df:41:0d:a4:19:51:
                    45:9b:1f:64:d0:10:8c:cd:84:9f:0b:15:47:3c:2f:
                    68:de:e8:c2:fd:26:c2:17:30:ba:57:9a:71:e9:5b:
                    73:97:db:81:68:d4:79:85:50:be:02:fe:48:9e:d1:
                    3b:8f:b4:82:90:10:93:7e:41:05:79:e5:31:da:5e:
                    cc:24:52:b1:50:f7:f1:54:71:9b:81:1b:7b:1a:ef:
                    79:87:14:fc:44:ac:46:a5:b2:9a:1e:00:4b:59:c8:
                    7c:c2:83:a7:77:d3:c6:8a:ca:eb:94:b8:22:b0:72:
                    b7:54:81:81:51:a4:60:d9:2c:c0:44:67:5c:a0:15:
                    df:12:b4:5b:ce:e0:15:35:28:b5:a8:e5:61:70:49:
                    8a:47:e8:4b:d9:53:48:37:c3:6a:ef:15:65:5b:e6:
                    36:9b:a0:c6:4f:36:4d:b4:d0:8c:3f:bc:34:b2:6d:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:35:F1:9C:54:DE:F4:F9:7F:85:15:C2:23:5C:0A:2E:9C:D2:68:15
            X509v3 Authority Key Identifier:
                keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:a8:2a:21:e9:03:01:f2:19:60:71:5c:ba:f3:d8:94:b8:b6:
         69:c4:c0:8e:c5:c6:f8:0b:86:e2:8b:99:e4:4d:83:58:7b:2e:
         40:0d:9d:2b:1c:81:a2:9c:54:2c:a9:38:c8:00:6c:b1:66:31:
         90:ad:fc:b2:fe:80:81:06:13:23:d0:38:08:23:a1:a3:4e:1a:
         51:0d:83:3a:92:37:95:6b:06:bc:6a:fd:e2:a4:1b:40:3a:04:
         99:fe:6e:8c:e2:d5:ee:e0:45:69:30:78:52:67:51:35:c2:72:
         72:ef:e8:1d:d7:75:85:4f:ad:42:7d:35:ad:1c:78:64:54:8a:
         ab:f4:1b:10:11:9b:91:89:05:e1:c3:9b:ac:ea:bd:17:45:d1:
         13:bb:36:55:a3:80:9f:b8:cc:71:a7:86:2c:34:60:88:39:38:
         fd:eb:f7:e2:33:9a:8b:29:01:5a:ba:c4:30:92:a1:cf:88:cc:
         01:37:dd:31:31:65:49:12:84:1a:fa:aa:a0:f6:2c:a2:4e:d2:
         ea:a5:f7:6c:8a:4b:42:2b:51:58:bb:d7:1c:a5:44:9e:99:fd:
         a0:ca:da:86:71:07:67:33:bc:1e:18:70:c5:26:b7:e7:1c:84:
         cb:6e:6d:98:15:12:16:6e:29:3c:3e:4e:5e:25:7b:a9:0e:8e:
         8c:97:83:40
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUXTT+6EO8exVvGSYbS8AhIo0dyhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERFRDcxMDMxMzk0QUExNjcxNUYzRDAzRjI2NTcxNTI4
RjFBNkI3ODAeFw0yNjA1MDMwMjE1NDZaFw0yNzA1MDIwMjIwNDZaMDMxMTAvBgNV
BAMTKDBCMzVGMTlDNTRERUY0Rjk3Rjg1MTVDMjIzNUMwQTJFOUNEMjY4MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlzW/TkOs+FIfDqi5kAqGK2hB
QQwj24K+7jlFeHOK4ebRuhItJF1PvdJRpWW3yZ/wZyXBsU99hPAKPHqRrsY27gKF
Tjunk65NRB7YMCfwWAHap99BDaQZUUWbH2TQEIzNhJ8LFUc8L2je6ML9JsIXMLpX
mnHpW3OX24Fo1HmFUL4C/kie0TuPtIKQEJN+QQV55THaXswkUrFQ9/FUcZuBG3sa
73mHFPxErEalspoeAEtZyHzCg6d308aKyuuUuCKwcrdUgYFRpGDZLMBEZ1ygFd8S
tFvO4BU1KLWo5WFwSYpH6EvZU0g3w2rvFWVb5jaboMZPNk200Iw/vDSybYCzAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUCzXxnFTe9Pl/hRXCI1wKLpzSaBUwHwYDVR0j
BBgwFoAUDe1xAxOUqhZxXz0D8mVxUo8aa3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjZkN2VkZTEtM2ZkMC00NjI0LWJlZjgtMGU3M2U4NDk5NGJjLzAvMERFRDcxMDMx
Mzk0QUExNjcxNUYzRDAzRjI2NTcxNTI4RjFBNkI3OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wREVENzEwMzEzOTRBQTE2NzE1RjNEMDNGMjY1NzE1MjhGMUE2
Qjc4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i
ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhMzEzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAEw
DQYJKoZIhvcNAQELBQADggEBAI+oKiHpAwHyGWBxXLrz2JS4tmnEwI7FxvgLhuKL
meRNg1h7LkANnSscgaKcVCypOMgAbLFmMZCt/LL+gIEGEyPQOAgjoaNOGlENgzqS
N5VrBrxq/eKkG0A6BJn+bozi1e7gRWkweFJnUTXCcnLv6B3XdYVPrUJ9Na0ceGRU
iqv0GxARm5GJBeHDm6zqvRdF0RO7NlWjgJ+4zHGnhiw0YIg5OP3r9+IzmospAVq6
xDCSoc+IzAE33TExZUkShBr6qqD2LKJO0uql92yKS0IrUVi71xylRJ6Z/aDK2oZx
B2czvB4YcMUmt+cchMtubZgVEhZuKTw+Tl4le6kOjoyXg0A=
-----END CERTIFICATE-----
Generated at Wed May 13 06:11:53 2026 by rpki-client