Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/323430333a353763303a3a2f33322d3438203d3e20313333383135.roa
File:                     323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (raw, json)
Hash identifier:          3BwTC01USPfsaxqOFoR8OqcTiLHcsXU9wo2BTdmt5ZU=
Subject key identifier:   EB:FC:36:52:7F:BF:39:DA:9B:93:28:AD:8F:F1:0B:AF:5F:86:39:74
Certificate issuer:       /CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479
Certificate serial:       2614D43A1DAB953A74A498433517C3C5BC93D082
Authority key identifier: EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/323430333a353763303a3a2f33322d3438203d3e20313333383135.roa
Signing time:             Sun 03 May 2026 02:21:44 +0000
ROA not before:           Sun 03 May 2026 02:16:44 +0000
ROA not after:            Sun 02 May 2027 02:21:44 +0000
asID:                     133815
IP address blocks:        2403:57c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl
                          rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:14:d4:3a:1d:ab:95:3a:74:a4:98:43:35:17:c3:c5:bc:93:d0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479
        Validity
            Not Before: May  3 02:16:44 2026 GMT
            Not After : May  2 02:21:44 2027 GMT
        Subject: CN=EBFC36527FBF39DA9B9328AD8FF10BAF5F863974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d4:d2:6c:23:4d:ed:9f:55:90:13:69:4b:27:
                    f0:f6:a1:9c:40:d7:36:6b:be:2d:ac:9b:cc:16:2d:
                    72:39:4e:be:0b:ec:eb:19:f9:52:5c:ad:7d:92:8f:
                    7b:68:92:4e:10:8f:19:a7:86:1f:7c:a9:65:1f:b2:
                    2b:c7:7d:1e:61:5b:a1:e8:98:f8:5e:e9:51:f3:dc:
                    64:37:2e:98:57:17:50:c0:63:b9:f9:0e:93:06:25:
                    6e:44:31:ab:a9:c7:b0:7d:3e:09:f0:0b:9f:9e:94:
                    ee:19:fd:a3:0f:38:59:92:d9:9e:89:dd:6d:e7:6d:
                    2e:75:76:97:ac:a8:f5:f3:29:8e:52:da:65:96:48:
                    78:30:7f:7d:bc:64:6e:87:9b:01:a9:9d:6d:84:72:
                    74:0e:ce:32:c6:4b:2a:f2:81:4a:ba:f5:67:c2:7b:
                    4c:02:84:cb:e1:23:70:1f:26:a0:29:db:b9:0f:90:
                    fe:57:d9:43:c7:c4:49:7f:c4:4f:c6:fb:03:f8:ca:
                    f8:02:4c:ca:a5:84:1b:2e:b1:ad:ce:ae:4b:79:ea:
                    1b:d8:b7:d4:40:7d:8d:9b:5a:ed:a1:71:cd:fa:87:
                    ef:aa:88:66:de:f4:2b:e8:2d:4b:ee:be:13:37:26:
                    25:b1:4e:b7:2a:40:11:58:5c:3a:7d:00:ba:16:43:
                    23:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FC:36:52:7F:BF:39:DA:9B:93:28:AD:8F:F1:0B:AF:5F:86:39:74
            X509v3 Authority Key Identifier:
                keyid:EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/323430333a353763303a3a2f33322d3438203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:57c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:12:60:5b:c6:b4:12:fa:22:2c:4d:d2:db:a0:36:50:71:f1:
         29:02:44:21:b5:07:44:2b:2f:b4:79:86:65:fb:b1:14:48:6c:
         78:8e:26:ff:6f:0d:20:b4:c6:c7:05:00:b0:7c:c5:85:c6:38:
         3d:7e:f8:a3:9c:66:93:3d:81:0f:5f:9d:57:28:67:1c:bb:a8:
         96:a0:13:4d:75:82:85:85:b8:1c:97:c4:7e:b1:a2:1a:86:3d:
         9a:c5:c2:95:b2:03:d6:55:0c:ad:14:5e:91:e2:41:39:45:ae:
         59:9b:9d:ce:28:95:2a:ea:f9:c6:96:95:eb:a6:fc:1c:c8:74:
         67:be:17:cd:15:e3:a3:1b:cd:81:fd:fc:db:27:09:eb:f3:1a:
         ae:89:3b:21:1d:97:ee:ab:ba:5e:f2:c2:71:0e:86:78:f6:68:
         ef:ff:00:41:2c:13:8c:a0:62:97:91:26:7d:e3:20:6a:78:10:
         43:0a:ae:e8:ff:51:ec:5c:ce:f2:06:c1:37:52:d8:20:be:63:
         d5:88:40:f1:af:cd:5e:91:1a:00:58:e0:c5:8d:53:88:15:e0:
         e2:c6:5b:bb:0b:5e:69:b2:40:98:5f:17:e1:be:33:ca:7f:b6:
         f6:36:74:a7:5c:f8:77:03:15:94:79:f9:7d:68:28:82:fc:a6:
         06:0f:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:07 2026 by rpki-client