Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/323430353a366134303a3a2f33322d3332203d3e20313339343235.roa
File:                     323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (raw, json)
Hash identifier:          eiHGmlk5Da29v1+JFkHNmGCFNi5qVnXuS1BVyS7zdCk=
Subject key identifier:   E2:63:32:44:B9:B9:FB:0B:05:C2:CA:6F:80:0E:FC:28:18:93:E2:C8
Certificate issuer:       /CN=9FD513B00492057DD702CBFFF2619D407373BD86
Certificate serial:       72C0A0AE5E1CB6B89C8CBBAED31899F2708841E5
Authority key identifier: 9F:D5:13:B0:04:92:05:7D:D7:02:CB:FF:F2:61:9D:40:73:73:BD:86
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD513B00492057DD702CBFFF2619D407373BD86.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/323430353a366134303a3a2f33322d3332203d3e20313339343235.roa
Signing time:             Sun 03 May 2026 02:20:50 +0000
ROA not before:           Sun 03 May 2026 02:15:50 +0000
ROA not after:            Sun 02 May 2027 02:20:50 +0000
asID:                     139425
IP address blocks:        2405:6a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.crl
                          rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD513B00492057DD702CBFFF2619D407373BD86.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c0:a0:ae:5e:1c:b6:b8:9c:8c:bb:ae:d3:18:99:f2:70:88:41:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FD513B00492057DD702CBFFF2619D407373BD86
        Validity
            Not Before: May  3 02:15:50 2026 GMT
            Not After : May  2 02:20:50 2027 GMT
        Subject: CN=E2633244B9B9FB0B05C2CA6F800EFC281893E2C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:7a:1e:eb:de:9b:df:2c:d3:e1:b5:82:9a:
                    23:58:7d:a6:e5:cf:55:94:60:4e:a0:ae:b2:80:c5:
                    e9:76:86:6f:de:bc:32:8d:0c:b6:30:fd:27:ae:db:
                    15:d6:2d:8c:6b:da:d7:3f:f7:f5:f2:5a:2d:ea:90:
                    a3:f3:8d:c2:ca:e7:60:9d:0a:dd:87:20:bb:10:93:
                    8e:50:52:bb:7f:b9:3b:b4:b8:38:0a:37:7a:7e:ae:
                    3f:d5:21:ce:3d:1b:47:5e:e2:c7:e1:eb:60:a3:aa:
                    89:92:48:47:95:6e:4f:43:d6:4c:46:15:ae:c6:3d:
                    bd:85:01:96:15:f9:47:48:b6:49:b4:eb:64:9f:4d:
                    f3:aa:a9:e4:99:cc:37:25:9e:a8:ff:c7:35:df:a5:
                    94:16:66:3e:e2:64:b3:c6:f8:f4:8d:96:b3:a1:a0:
                    79:69:fd:48:55:03:5d:c5:59:ea:2c:c6:12:9a:58:
                    61:e4:e9:2c:90:95:c4:ea:38:9d:17:14:de:08:91:
                    23:b8:4f:4b:5d:be:4d:12:35:b3:34:26:d6:a6:91:
                    63:93:31:b9:b4:a0:53:62:b1:d7:57:01:08:06:82:
                    b3:44:81:b5:66:ad:52:b0:59:2b:2d:38:d5:a2:64:
                    dc:46:3b:db:2c:5e:19:10:d4:8b:b3:b4:51:a0:9d:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:63:32:44:B9:B9:FB:0B:05:C2:CA:6F:80:0E:FC:28:18:93:E2:C8
            X509v3 Authority Key Identifier:
                keyid:9F:D5:13:B0:04:92:05:7D:D7:02:CB:FF:F2:61:9D:40:73:73:BD:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD513B00492057DD702CBFFF2619D407373BD86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/323430353a366134303a3a2f33322d3332203d3e20313339343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:68:a9:f2:73:47:95:e3:f6:d7:0c:ce:e9:20:59:3b:57:3e:
         72:db:d2:24:be:39:84:47:bd:54:15:aa:c4:92:a5:f9:bb:c0:
         2f:a9:56:0a:14:69:94:c8:75:2c:b5:a8:2f:9f:2c:5a:a8:76:
         bc:d8:d1:08:a5:83:37:97:9c:ba:89:c0:fe:60:2c:03:2e:16:
         73:e4:c4:ba:d6:01:f7:00:80:ef:40:7c:4a:db:8c:b5:7f:ba:
         d7:48:a3:ca:56:e2:26:ca:12:8d:51:da:3c:10:03:f3:36:33:
         64:ab:ec:d0:80:c4:6a:0b:94:4d:8d:b0:ed:c3:5f:9b:a8:8e:
         77:3a:51:4f:63:d5:47:b8:d6:f9:77:2f:58:f3:74:d1:03:56:
         54:c5:00:44:90:36:89:52:a3:83:5c:69:d8:41:af:1e:c8:53:
         8f:35:f3:31:d5:dd:3d:3f:71:91:9e:f4:51:6e:ad:37:10:ff:
         e1:ba:54:17:13:16:ea:ce:fc:bc:a3:27:60:e7:28:a2:c0:7b:
         ac:ea:58:82:1e:88:6c:1f:a5:05:d4:6c:80:a3:78:4e:fa:59:
         09:bb:99:ec:91:58:83:76:bd:62:89:a2:0b:bf:dc:88:5c:98:
         d0:f6:0b:e1:6a:a8:36:12:82:28:3f:54:c2:61:c1:09:e4:01:
         ce:1c:46:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:15 2026 by rpki-client