Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          6MK3BTfSdOqMu7uDUlMlrcofKxmm7ND7Ppxbk9itFD8=
Subject key identifier:   D9:54:25:75:ED:F4:48:B1:62:4E:53:4C:85:8B:76:30:9E:57:20:3B
Certificate issuer:       /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial:       77597F6D18BADE25A44CED50C6759F2A39EE988D
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 03 May 2026 02:20:48 +0000
ROA not before:           Sun 03 May 2026 02:15:48 +0000
ROA not after:            Sun 02 May 2027 02:20:48 +0000
asID:                     140413
IP address blocks:        2406:13c0:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
                          rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:59:7f:6d:18:ba:de:25:a4:4c:ed:50:c6:75:9f:2a:39:ee:98:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
        Validity
            Not Before: May  3 02:15:48 2026 GMT
            Not After : May  2 02:20:48 2027 GMT
        Subject: CN=D9542575EDF448B1624E534C858B76309E57203B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:1e:37:d6:ce:75:f7:42:f6:fc:48:ee:b9:
                    7f:19:db:27:a0:91:e5:70:92:4e:90:cc:e0:ed:d6:
                    b8:e3:9b:ac:04:cf:df:55:d0:84:20:ea:e7:0f:14:
                    14:f9:e5:b5:28:78:29:2d:98:4d:08:48:a7:96:2d:
                    5f:c8:05:3a:ba:65:e5:1b:80:6f:84:3f:5a:6c:e6:
                    c5:ec:91:d4:24:a3:96:1c:5a:24:73:11:10:e0:b1:
                    54:ea:61:07:02:88:31:4b:ac:6d:5f:b3:aa:9d:b4:
                    c1:3c:a4:29:d1:5a:ba:31:8b:74:14:db:2e:83:42:
                    45:70:64:1a:0f:0b:89:55:20:7a:cf:1c:1a:f7:d7:
                    cf:6b:6a:cb:15:e2:0f:ee:79:51:d8:30:4c:cd:ee:
                    63:0e:7f:92:16:a0:fd:e2:fa:b2:e2:73:f0:3e:b6:
                    1c:e8:f2:1c:e6:44:f0:68:f4:74:a3:a0:e2:4d:42:
                    03:cf:8a:fc:d9:84:6e:cc:e1:a3:d2:fa:90:c1:e8:
                    ab:09:cd:e8:e3:84:ec:db:6b:e0:b7:9e:a8:dd:cf:
                    44:39:c6:28:ea:51:58:07:3d:b5:07:14:2e:7c:70:
                    ce:b9:5f:fb:e8:df:b2:db:33:ae:58:91:12:62:2b:
                    65:86:1e:d8:03:dd:b5:26:e3:4d:fe:3e:4d:99:89:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:54:25:75:ED:F4:48:B1:62:4E:53:4C:85:8B:76:30:9E:57:20:3B
            X509v3 Authority Key Identifier:
                keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:8a:57:00:cc:5c:0e:82:78:9e:17:05:96:19:6c:2b:63:
         26:b2:5f:67:92:33:ac:df:72:2c:30:a8:be:61:be:65:d1:9e:
         52:e9:f7:83:d1:ff:36:dc:e9:0c:6c:be:bc:8e:02:05:8e:46:
         6b:6f:c7:b4:d6:75:5f:b3:48:eb:52:02:18:ca:07:d4:b1:65:
         64:a7:b0:f0:87:cb:34:a9:9e:8f:97:61:0e:cf:1d:68:92:6d:
         94:96:ee:aa:a4:e2:bc:90:3b:fd:79:83:c4:5c:eb:ad:68:75:
         1b:3a:f8:5d:9d:e6:61:f2:e2:29:32:7e:c8:73:37:36:2f:56:
         3f:8d:7c:f9:45:4c:7b:44:9b:5e:d3:e3:94:92:b7:10:1f:d6:
         47:14:9f:71:d0:33:3c:6b:40:23:19:45:79:00:1b:99:35:2c:
         04:7d:5c:a0:95:a7:e3:9c:2b:41:47:6f:13:09:3b:bf:b4:54:
         de:7b:52:9d:2c:d2:92:ef:b5:f5:b7:3b:ad:bf:df:4f:84:f1:
         db:36:01:85:e3:0c:ce:8f:dd:58:3c:08:3e:c2:7b:6c:54:d6:
         d5:1a:a3:25:39:ad:51:9c:a5:e0:51:5f:40:22:72:c4:0c:de:
         2d:c3:0e:c4:8d:1c:78:85:30:c7:42:b8:99:2e:b6:b5:83:d4:
         8b:3b:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:14 2026 by rpki-client