Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/323430303a393134303a3a2f33322d3332203d3e203535363632.roa
File:                     323430303a393134303a3a2f33322d3332203d3e203535363632.roa (raw, json)
Hash identifier:          QKq/ZGAbqKpUm7CoKZ+QT0ihf4BxzPyawZc6Ixihqm0=
Subject key identifier:   4F:AD:A7:FE:74:5E:B2:9C:1A:63:76:BF:8D:9E:A2:49:F9:9C:58:E9
Certificate issuer:       /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Certificate serial:       05459D3F0E768CC3662DCD88392A08E034520FCA
Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/323430303a393134303a3a2f33322d3332203d3e203535363632.roa
Signing time:             Sun 03 May 2026 02:21:46 +0000
ROA not before:           Sun 03 May 2026 02:16:46 +0000
ROA not after:            Sun 02 May 2027 02:21:46 +0000
asID:                     55662
IP address blocks:        2400:9140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
                          rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:45:9d:3f:0e:76:8c:c3:66:2d:cd:88:39:2a:08:e0:34:52:0f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
        Validity
            Not Before: May  3 02:16:46 2026 GMT
            Not After : May  2 02:21:46 2027 GMT
        Subject: CN=4FADA7FE745EB29C1A6376BF8D9EA249F99C58E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:32:da:72:97:4c:54:71:c2:0a:3b:c7:8f:
                    0b:97:ee:d2:0c:f9:bf:c7:df:26:11:34:6c:0f:6b:
                    d3:64:d1:43:cc:f5:dc:93:ac:6a:73:a7:b5:13:6b:
                    d4:28:42:8c:26:0c:ba:9f:75:39:49:a6:fe:3e:70:
                    c1:fe:d4:0c:1d:94:ae:42:78:6a:63:b3:ea:1d:bb:
                    9a:44:ff:6f:59:aa:41:64:67:51:5d:2b:0c:c8:61:
                    80:07:dc:69:47:88:6c:56:34:4d:4f:b4:f7:43:87:
                    99:53:36:ba:33:e1:c4:c0:4c:44:51:fb:7f:15:ee:
                    91:ab:31:c0:e0:96:55:71:c5:f6:8a:65:c8:97:5b:
                    f8:da:6a:5e:23:59:47:0b:67:c1:2f:9f:b0:d8:ce:
                    43:9c:5a:3d:47:6b:25:6e:22:d6:e5:4a:ef:b5:d6:
                    7f:4b:89:1e:23:0d:04:aa:28:05:c9:7e:3a:d7:4a:
                    e3:97:f0:4f:7a:ab:6e:ce:f2:1c:49:40:dd:f2:9e:
                    66:34:f6:37:48:d2:01:d5:c2:bb:f5:22:dd:7c:d6:
                    fd:c0:ed:e1:45:b5:bc:60:74:2c:85:4b:a4:30:66:
                    65:2a:58:f4:20:a0:e8:2f:5c:11:2d:76:e5:1e:21:
                    4e:ad:28:67:9a:5c:24:24:08:1b:a7:df:3d:af:59:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AD:A7:FE:74:5E:B2:9C:1A:63:76:BF:8D:9E:A2:49:F9:9C:58:E9
            X509v3 Authority Key Identifier:
                keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/323430303a393134303a3a2f33322d3332203d3e203535363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9140::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:bd:97:9f:ad:83:c9:cb:c1:6f:ed:8e:44:d8:58:ff:2c:59:
         54:d8:8b:43:fb:a7:72:86:fe:14:5f:9e:de:7e:c8:2b:67:28:
         01:76:46:a2:d8:a6:7c:cf:17:88:a5:8a:fc:eb:36:f4:1d:78:
         02:22:44:4a:34:ea:6f:a4:10:50:2d:14:c4:52:76:c2:7a:3c:
         61:7d:ed:35:cb:dd:7c:87:96:dd:6a:0a:19:0d:27:45:90:e2:
         56:ad:2f:68:34:81:94:22:1d:64:bf:fb:8d:8f:89:c5:ac:38:
         17:f6:0e:8a:c6:98:92:cd:60:92:bf:90:62:87:89:e3:74:3d:
         fc:c9:a9:48:e2:00:33:a6:9b:ce:dc:30:bb:a1:d0:d4:10:44:
         e5:54:cc:91:69:63:18:cc:39:a2:08:25:73:58:e6:ce:bd:e8:
         36:92:aa:60:00:f1:df:31:d4:b2:21:8b:b2:47:92:61:41:99:
         bc:79:c3:c4:f2:30:f9:75:67:01:f0:a6:8d:6d:ab:87:51:a2:
         f7:32:68:1e:70:af:90:d8:1e:91:02:28:cb:21:de:99:43:d4:
         7f:80:7a:05:4e:78:37:ce:24:56:c8:52:9a:4a:ee:5d:48:20:
         c3:38:6a:8c:5d:7f:2c:53:27:39:47:e2:5a:f7:f0:b0:1e:e9:
         fc:24:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:24 2026 by rpki-client