Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          +ZnAeFJoXHPh+xq3xuSvRbcR94NVVsIzNuYlIiCcSpQ=
Subject key identifier:   9F:1A:88:19:04:3B:3F:27:9E:87:36:30:55:8F:89:2B:E6:FA:E0:DE
Certificate issuer:       /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial:       5354B843DBC9E5C3B97681D7419B5C24FD4A136D
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 03 May 2026 02:20:47 +0000
ROA not before:           Sun 03 May 2026 02:15:47 +0000
ROA not after:            Sun 02 May 2027 02:20:47 +0000
asID:                     140413
IP address blocks:        2406:13c0:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
                          rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:54:b8:43:db:c9:e5:c3:b9:76:81:d7:41:9b:5c:24:fd:4a:13:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
        Validity
            Not Before: May  3 02:15:47 2026 GMT
            Not After : May  2 02:20:47 2027 GMT
        Subject: CN=9F1A8819043B3F279E873630558F892BE6FAE0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:60:70:3b:60:81:6f:53:bf:5e:8b:53:e5:46:
                    e3:0a:38:a2:85:76:26:82:b1:ca:9a:11:e0:e5:b3:
                    5b:68:b9:29:1f:f2:8f:0c:30:36:f1:02:b1:4c:23:
                    e7:00:c8:17:35:3a:5f:f3:da:ae:b6:0f:c9:ef:4b:
                    1e:b4:13:ce:58:e4:5f:fb:85:1c:af:a7:23:44:64:
                    1c:6b:ea:70:7b:26:ab:f7:b0:8d:62:4a:d6:b6:c0:
                    27:6b:53:6e:30:e9:58:54:f3:85:b7:fd:51:24:0d:
                    da:78:5d:cc:19:c3:a1:2d:e8:47:91:7c:1a:b7:2a:
                    21:d2:4b:3f:83:84:e2:91:58:2c:e0:48:3c:d6:fd:
                    33:90:db:76:57:95:23:a0:7c:df:b9:05:1f:4f:9f:
                    50:ff:79:3a:1a:c0:f4:fd:a2:a1:8d:46:17:e9:0f:
                    78:be:a2:d7:e9:fd:8f:89:c2:a6:22:64:26:8d:45:
                    bf:f7:60:47:83:47:14:55:7c:ab:9d:b0:a0:a9:92:
                    38:10:f9:75:73:3a:0d:67:ea:ca:f2:17:6a:82:fd:
                    8d:1e:aa:d1:cd:af:ed:4a:0c:26:0f:a7:ba:55:01:
                    10:f4:a3:07:86:e8:d6:26:b9:32:58:37:8d:14:0e:
                    7f:f6:88:3c:df:51:61:43:90:05:32:ba:0c:70:ae:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1A:88:19:04:3B:3F:27:9E:87:36:30:55:8F:89:2B:E6:FA:E0:DE
            X509v3 Authority Key Identifier:
                keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:e2:fc:24:b5:46:15:20:d9:35:ec:b0:91:41:1f:6a:db:58:
         b8:20:d2:f2:72:13:8a:a5:0d:82:d0:c6:d2:55:d5:76:19:8c:
         49:2c:0a:7b:de:78:ee:a0:3c:8d:df:6a:36:8c:e6:bf:db:43:
         e0:73:77:02:3c:39:19:71:4c:63:ab:84:d6:ca:b6:3f:7b:48:
         92:40:3b:6d:63:33:5c:51:ea:20:5c:1e:8d:d9:d8:f0:f0:80:
         7a:46:a9:46:c3:72:7b:46:8d:0a:40:f4:89:64:e9:02:e2:70:
         c7:56:0b:db:b3:a5:2b:8d:da:68:7e:db:64:50:d2:f8:0e:9f:
         7f:d8:19:04:22:d8:17:ff:91:aa:d8:3e:db:6c:b8:21:97:e8:
         fe:91:60:c1:07:eb:08:f1:7c:09:eb:55:ae:67:7e:e7:47:af:
         c7:9f:ce:0e:00:98:6c:89:75:d2:bf:43:c4:02:4b:60:95:3f:
         63:36:c8:df:08:0e:99:c9:ba:a2:b2:bb:6b:38:4e:82:73:33:
         19:bb:71:6a:e0:8d:cf:f6:d7:19:23:32:12:67:00:55:b4:c5:
         47:78:9e:5e:73:0d:11:c0:d5:42:c3:25:ef:8d:a9:7e:1a:4a:
         66:26:b0:ae:73:94:db:ad:d1:a8:6b:02:cd:78:ba:75:fb:6d:
         d2:c7:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:32 2026 by rpki-client