Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          GK7JrFFTMtRaVSiXERiAUwR8S0jPiNQeuHLwltAd/4o=
Subject key identifier:   DE:E9:F0:81:29:CA:4F:F3:34:D7:21:FE:C6:CA:58:E1:D9:7C:B5:AE
Certificate issuer:       /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial:       7FCB9FE3BC70999BFEABA78BAB492E38080C43B3
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 03 May 2026 02:20:45 +0000
ROA not before:           Sun 03 May 2026 02:15:45 +0000
ROA not after:            Sun 02 May 2027 02:20:45 +0000
asID:                     140413
IP address blocks:        2406:13c0:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
                          rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cb:9f:e3:bc:70:99:9b:fe:ab:a7:8b:ab:49:2e:38:08:0c:43:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
        Validity
            Not Before: May  3 02:15:45 2026 GMT
            Not After : May  2 02:20:45 2027 GMT
        Subject: CN=DEE9F08129CA4FF334D721FEC6CA58E1D97CB5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:70:c9:3b:e3:14:ae:b6:8b:77:1c:05:c3:
                    e3:cd:0f:6a:14:a8:56:c2:4d:a4:cf:f6:8b:40:db:
                    73:f8:3e:e6:64:e1:04:ae:f2:58:3b:5f:70:4d:23:
                    02:aa:f2:2b:9c:ad:d7:08:82:79:68:89:09:34:41:
                    94:dc:6c:e4:80:3a:9f:b2:8b:57:9d:e5:a4:24:61:
                    55:6b:53:ef:fb:9c:8c:0b:09:9a:ec:70:6f:1c:57:
                    8f:2d:56:10:57:fa:da:97:f9:52:ad:67:c5:80:e1:
                    80:49:e0:45:8f:8c:e6:c8:2a:57:55:7b:88:c4:4b:
                    5f:6c:85:af:15:44:f3:88:ee:91:2c:55:b0:35:3c:
                    b7:e5:61:c7:3b:ce:9a:6c:37:93:f3:d4:59:38:a7:
                    ff:9d:db:4e:b2:76:fc:6f:e5:39:81:c5:23:1f:c0:
                    b0:5a:81:74:90:b0:b5:51:71:09:46:82:2c:b5:2b:
                    5f:b8:2c:07:04:d1:47:35:26:90:27:94:1b:74:b2:
                    49:23:07:c2:46:2c:c9:a3:b3:1f:ab:d7:34:07:50:
                    9f:02:ed:05:df:f0:c9:18:98:79:8d:8e:bc:05:0d:
                    6e:7e:72:be:df:25:64:a4:c2:1f:0c:32:5f:20:9c:
                    cf:4f:8a:6a:53:87:a1:60:c2:6a:d1:01:2c:4f:6e:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E9:F0:81:29:CA:4F:F3:34:D7:21:FE:C6:CA:58:E1:D9:7C:B5:AE
            X509v3 Authority Key Identifier:
                keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:51:f2:34:bf:f5:32:4f:b8:4e:24:54:f6:70:27:14:b3:ea:
         fb:e5:d0:84:f6:7d:77:59:85:b0:75:b9:db:b0:c0:0d:fb:ee:
         93:10:c4:d6:02:71:a9:ea:4b:f7:3c:92:e8:e8:05:09:5e:a2:
         86:54:53:64:79:4c:bc:78:d5:aa:c9:98:77:6d:f1:74:fe:17:
         ed:ee:3e:b1:8f:88:43:2d:fa:14:73:2f:48:16:a9:9c:9d:ec:
         cf:fe:c9:d6:9f:8d:ea:38:1c:36:ef:70:00:a9:c5:2f:34:7f:
         e8:82:b0:89:7b:c3:98:5a:0d:78:a4:3d:8f:0e:d9:26:0d:7a:
         b3:d6:71:fe:45:0e:fc:c9:c9:d6:a7:36:e2:0c:c0:ce:36:7d:
         9f:5f:1f:12:a3:63:30:c5:4a:b4:a6:e2:db:8b:86:7b:c8:45:
         bf:8d:fe:9b:b7:00:b9:b2:7f:c4:b4:26:1f:f1:af:9b:f0:ac:
         66:10:4c:0a:d5:98:7c:29:2a:3e:14:6d:14:3c:8c:a7:d1:93:
         d8:ac:6e:37:d8:d4:38:f1:48:ec:55:0c:a1:e5:13:d4:b1:99:
         d3:fe:42:5e:11:70:e8:95:fb:ae:97:b9:3e:b6:d8:c7:0b:0e:
         fd:16:e2:35:98:16:62:c5:f7:d0:71:31:03:02:e4:6c:53:44:
         3b:d7:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:47 2026 by rpki-client