Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/323430353a396363303a3a2f33322d3438203d3e20313339393637.roa
File:                     323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (raw, json)
Hash identifier:          aOlWVzlvXbOa4KHfHqYRVq472gGuD+dyeTRVu2qUTbc=
Subject key identifier:   2D:DA:B1:C1:2F:5E:E8:04:7C:3D:64:75:EE:24:99:8D:A6:59:4F:15
Certificate issuer:       /CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED
Certificate serial:       69A5656F5E5B5848ED6F4F4CDA8C4C619AB6691C
Authority key identifier: 5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/323430353a396363303a3a2f33322d3438203d3e20313339393637.roa
Signing time:             Sun 03 May 2026 02:21:41 +0000
ROA not before:           Sun 03 May 2026 02:16:41 +0000
ROA not after:            Sun 02 May 2027 02:21:41 +0000
asID:                     139967
IP address blocks:        2405:9cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl
                          rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a5:65:6f:5e:5b:58:48:ed:6f:4f:4c:da:8c:4c:61:9a:b6:69:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED
        Validity
            Not Before: May  3 02:16:41 2026 GMT
            Not After : May  2 02:21:41 2027 GMT
        Subject: CN=2DDAB1C12F5EE8047C3D6475EE24998DA6594F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:08:f3:ce:ea:de:6a:be:e8:d2:48:83:ce:
                    e1:0c:71:16:fe:5c:b2:f1:57:be:b0:43:ae:2c:51:
                    f6:57:db:cc:a6:e0:1e:3f:f0:4d:26:99:88:86:43:
                    79:6d:b4:aa:a8:a5:8d:ed:6f:ee:62:cd:af:e5:7b:
                    d0:17:26:56:93:8e:ac:43:e7:54:28:f5:ea:51:b2:
                    5a:27:95:1f:a4:94:d2:6d:b7:54:23:02:67:94:95:
                    04:50:bb:30:b4:6d:28:3d:0a:78:d5:6b:44:ce:18:
                    35:b2:2b:38:22:8e:14:71:75:8d:a7:ac:73:2d:e5:
                    6a:21:8c:7d:4b:1c:b7:4e:40:0c:34:f8:29:15:b0:
                    66:88:12:a6:b8:97:9e:a3:b1:0a:53:e3:72:13:6a:
                    f1:29:99:1c:26:a4:25:3c:bd:0e:bd:90:20:e0:69:
                    d9:f6:8b:7a:06:73:51:76:db:2b:ac:88:5d:4c:75:
                    e6:2c:d3:1f:94:88:da:b8:33:3d:f8:12:c6:e9:0d:
                    9d:23:3a:60:80:0f:46:34:ea:2f:3a:9c:2c:1a:53:
                    f0:38:f1:08:9d:95:4c:ef:1a:54:18:ea:cd:b2:fd:
                    d9:5d:b3:24:74:f8:e9:e0:cc:e7:93:65:90:28:82:
                    b9:a5:0a:77:29:9e:4e:58:8a:37:55:b8:e0:18:d8:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DA:B1:C1:2F:5E:E8:04:7C:3D:64:75:EE:24:99:8D:A6:59:4F:15
            X509v3 Authority Key Identifier:
                keyid:5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/323430353a396363303a3a2f33322d3438203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:c7:ce:99:7d:16:9c:6e:83:36:87:9e:77:4f:1b:41:85:0f:
         2b:c0:43:b9:f3:4f:77:29:f9:9a:01:f8:0b:46:50:3e:1e:0b:
         3b:40:de:b0:c8:5f:26:f3:51:f2:a3:e5:41:46:20:68:b8:b0:
         71:6f:51:92:89:a5:64:39:6e:08:da:3d:34:11:b0:4a:1a:95:
         74:8b:1b:05:31:aa:fb:b7:ee:3d:26:95:5b:c6:6c:f8:d0:dd:
         8c:5a:d4:c3:dc:a0:a1:dd:95:2e:c1:0b:39:0a:3e:97:00:42:
         e5:c5:9a:2a:07:8d:64:67:99:ff:54:46:13:41:18:45:f3:cd:
         a4:ca:1c:f2:4f:5a:21:75:64:7d:30:30:f8:42:1e:48:05:15:
         b5:db:b4:ed:cb:98:a1:08:df:21:ee:63:6e:ec:d8:22:90:8f:
         07:4b:e2:be:d1:47:2c:2e:53:c7:7e:63:00:8c:f1:de:9d:9f:
         d1:96:72:b4:c2:33:8c:4f:1a:d4:7c:09:95:60:d5:6d:7b:a2:
         53:d7:27:d8:eb:84:25:74:f7:c1:b5:a7:32:87:c6:c7:34:ad:
         fb:5e:d3:8b:f1:86:72:48:e4:0d:61:b9:be:c1:7e:d4:9e:19:
         6d:9e:63:a6:2e:f5:7b:58:e4:dc:8f:62:33:02:4a:02:34:8d:
         b4:e4:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:14 2026 by rpki-client