Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          pL+bPlRYYQGeiYZEexp0fc0F/PP7A+oMtImtipkVLIE=
Subject key identifier:   37:3A:B9:1B:CA:43:F6:C1:7B:2A:5D:8A:C2:B8:41:E8:B0:94:21:B8
Certificate issuer:       /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial:       2375334223FC01B40F58D422150CE856EE6324BC
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 03 May 2026 02:20:46 +0000
ROA not before:           Sun 03 May 2026 02:15:46 +0000
ROA not after:            Sun 02 May 2027 02:20:46 +0000
asID:                     140413
IP address blocks:        2406:13c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
                          rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:75:33:42:23:fc:01:b4:0f:58:d4:22:15:0c:e8:56:ee:63:24:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
        Validity
            Not Before: May  3 02:15:46 2026 GMT
            Not After : May  2 02:20:46 2027 GMT
        Subject: CN=373AB91BCA43F6C17B2A5D8AC2B841E8B09421B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:bb:95:2d:e6:5e:1d:ce:30:49:4e:b1:f3:
                    ca:54:dc:d9:a6:b2:6a:e4:f0:0e:59:dc:c4:aa:b5:
                    e1:4d:c2:73:33:da:06:d7:2d:9b:e6:5f:dd:d2:b7:
                    fd:8e:a8:10:80:3e:16:e4:3e:68:81:b7:cd:4f:fd:
                    0e:4d:78:62:0e:99:13:d0:42:3d:93:0f:83:f4:ff:
                    e1:f9:32:d7:01:91:da:f4:3e:cb:3d:6e:c4:69:87:
                    cc:8f:8b:a5:50:78:9d:14:2a:50:88:51:55:71:5e:
                    7c:71:2f:32:c8:ce:b0:44:d2:99:7c:37:70:18:aa:
                    14:68:0e:57:c6:32:96:3c:ae:6c:9e:a8:0b:3c:37:
                    12:53:fe:61:70:e1:0c:53:f2:14:9e:1b:71:4f:61:
                    8b:5c:46:5a:03:11:cc:fc:63:d7:37:14:7f:e8:4b:
                    23:a3:76:cd:2a:4e:67:06:b8:a3:02:32:55:32:72:
                    90:0a:e1:95:0e:ac:ba:6a:11:ad:e8:d8:15:e6:82:
                    14:75:c9:d7:6c:8e:29:9f:21:da:a9:9e:92:4a:8d:
                    cd:ac:0f:8d:3a:d1:1b:90:23:8b:e8:15:4e:4e:e3:
                    c5:a9:f9:d4:09:fa:f3:fe:a8:36:e3:2b:9a:05:21:
                    6c:69:4c:ca:9b:79:59:67:b2:44:0f:54:28:f3:17:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3A:B9:1B:CA:43:F6:C1:7B:2A:5D:8A:C2:B8:41:E8:B0:94:21:B8
            X509v3 Authority Key Identifier:
                keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:18:ce:af:ab:fb:12:42:63:e2:c8:ae:fe:5a:35:17:59:
         20:67:85:45:f6:6b:f6:5c:37:10:4f:f2:45:72:a6:81:51:de:
         09:69:c8:ff:d7:da:32:5a:b0:f7:a0:a2:3f:0f:93:d2:8d:3b:
         fc:af:b6:1f:86:b6:7a:65:4d:6c:6b:4a:c4:fa:48:6a:a3:3c:
         34:2f:31:58:9f:e7:25:04:ef:a2:04:13:53:35:a4:55:ec:0b:
         e9:07:f6:ae:75:85:cb:4d:af:d6:54:76:9f:c6:1d:0e:29:4b:
         f3:a1:c7:a5:43:28:cf:dc:33:b6:28:5e:38:6c:72:7e:36:3a:
         17:5a:cd:71:58:f6:0f:f2:12:a8:52:cf:7b:7e:02:c6:f3:3d:
         bf:2b:37:33:b2:0d:32:08:7d:a1:60:43:bf:c5:d9:d0:ce:40:
         a7:ff:b4:18:5b:4d:3a:fd:55:87:42:d0:b4:ff:c0:62:64:80:
         22:33:e5:17:9d:ca:ce:8d:08:f0:66:db:17:12:39:63:7a:92:
         9d:d9:5d:62:31:34:2d:24:86:57:42:6d:d5:c4:bb:3c:30:aa:
         0f:9b:d0:8f:af:ad:d3:01:29:dc:40:be:1e:3e:15:b2:00:3b:
         c5:e7:d5:3f:34:6e:fc:3a:79:d3:66:f9:ba:25:e1:82:8e:fd:
         e3:ef:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:49 2026 by rpki-client