Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/323430313a653438303a3a2f33322d3438203d3e203233393439.roa
File:                     323430313a653438303a3a2f33322d3438203d3e203233393439.roa (raw, json)
Hash identifier:          Tj1GCuxVuIwoJv3jzrY6G2gcMOfZzcLibiYAvCSsF9Y=
Subject key identifier:   5E:98:5C:64:10:4D:EE:14:40:D4:F2:E4:7C:74:31:8E:0A:AF:C5:B2
Certificate issuer:       /CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Certificate serial:       60796138718719E7552960B3DBF33DDDBEDB581C
Authority key identifier: 05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/323430313a653438303a3a2f33322d3438203d3e203233393439.roa
Signing time:             Sun 03 May 2026 02:22:00 +0000
ROA not before:           Sun 03 May 2026 02:17:00 +0000
ROA not after:            Sun 02 May 2027 02:22:00 +0000
asID:                     23949
IP address blocks:        2401:e480::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
                          rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:79:61:38:71:87:19:e7:55:29:60:b3:db:f3:3d:dd:be:db:58:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
        Validity
            Not Before: May  3 02:17:00 2026 GMT
            Not After : May  2 02:22:00 2027 GMT
        Subject: CN=5E985C64104DEE1440D4F2E47C74318E0AAFC5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:38:96:59:5a:4f:aa:6c:3c:b4:fe:9c:93:38:
                    71:5c:50:09:22:5c:83:22:c5:eb:42:22:6d:d8:ab:
                    0c:c2:af:de:80:4f:07:56:de:52:14:37:5a:7f:78:
                    a7:19:7f:ac:7d:7e:d3:4b:3e:5c:3b:30:1b:e8:74:
                    2e:bb:d9:06:ca:72:da:b8:ec:32:63:fc:2c:bf:1a:
                    06:3b:a0:0f:e2:88:51:1d:98:60:40:a2:f5:5a:a8:
                    c1:75:0e:65:ab:5f:e9:ad:b1:a4:f9:ed:24:73:02:
                    ed:45:79:d0:14:ed:41:37:2d:34:26:0a:ef:39:e2:
                    73:41:1e:a9:35:7d:37:88:bd:81:e7:f8:5d:e2:11:
                    37:5e:01:dc:92:7e:25:cb:54:d3:6a:87:3c:cc:cf:
                    ba:56:3e:c6:15:ed:38:65:ac:23:31:bb:74:03:28:
                    d7:de:06:6c:ac:34:c9:55:78:ec:67:97:a1:7f:17:
                    ae:b1:94:1b:5f:db:33:81:f4:5b:69:a2:0e:da:64:
                    31:a6:64:62:b4:1a:b6:96:43:a2:76:5f:57:5d:8b:
                    d3:f0:63:3b:52:44:96:7f:8b:7d:6a:b7:6d:05:a5:
                    c9:80:b3:dc:d0:3e:7c:66:5b:e4:a2:3a:b5:60:a9:
                    fa:d3:1b:5f:49:c8:18:c6:77:93:79:4b:ed:d2:5a:
                    c3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:98:5C:64:10:4D:EE:14:40:D4:F2:E4:7C:74:31:8E:0A:AF:C5:B2
            X509v3 Authority Key Identifier:
                keyid:05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/323430313a653438303a3a2f33322d3438203d3e203233393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e480::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:96:be:98:ff:c5:8f:fb:71:78:b8:11:d9:65:cd:d7:e2:8c:
         7d:ae:0a:88:1b:22:e5:d9:5a:4c:cb:6c:b2:38:bf:74:50:a9:
         00:ef:d2:19:2c:9b:4e:99:96:b8:ca:8d:67:65:b0:1d:00:92:
         68:2a:c0:90:5b:a9:91:4c:5a:35:0e:25:7b:0b:14:d6:b1:84:
         8b:99:7d:b0:67:f6:70:2f:04:8e:50:84:92:49:6b:23:f2:67:
         c1:c6:82:bc:44:36:8e:50:f5:f9:73:e7:e8:a0:a9:7d:51:2d:
         5f:54:6d:cc:f0:46:b8:33:2f:ac:72:c8:27:11:46:3f:8c:38:
         46:54:d0:1d:25:50:7f:bc:07:15:1e:5d:c7:91:11:9e:76:82:
         d7:3e:83:6d:30:04:eb:e7:5d:a9:3b:d5:5f:b7:58:e1:d4:38:
         9b:8c:1d:14:40:f3:21:e7:b4:aa:3a:2d:51:e2:7d:d5:f8:93:
         7c:0a:7b:53:99:5e:f9:73:a7:e0:6d:02:9c:d8:82:20:89:02:
         a5:31:3f:f6:07:5c:11:be:24:34:7a:fb:c5:fe:5f:c1:74:44:
         0f:64:55:6e:e0:95:fd:d1:6c:15:f8:2b:4c:fd:7e:44:de:97:
         04:69:3a:09:a6:8a:74:08:50:84:31:2a:48:c0:e5:a5:58:b1:
         b8:f6:da:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:43 2026 by rpki-client