Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/323430303a656134303a3a2f33322d3332203d3e203436303631.roa
File:                     323430303a656134303a3a2f33322d3332203d3e203436303631.roa (raw, json)
Hash identifier:          /Mgyo9ff3zy6arAcZsb+8DNgEw9iCUEDLwcPq3vZVTM=
Subject key identifier:   5A:74:7C:D5:5D:96:C8:59:AF:D3:2B:F8:AA:6F:C3:1F:47:08:E5:A0
Certificate issuer:       /CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Certificate serial:       0F6EC1959C11590C2B8121B74C64059FC9E340E4
Authority key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/323430303a656134303a3a2f33322d3332203d3e203436303631.roa
Signing time:             Sun 03 May 2026 02:22:20 +0000
ROA not before:           Sun 03 May 2026 02:17:20 +0000
ROA not after:            Sun 02 May 2027 02:22:20 +0000
asID:                     46061
IP address blocks:        2400:ea40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
                          rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6e:c1:95:9c:11:59:0c:2b:81:21:b7:4c:64:05:9f:c9:e3:40:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
        Validity
            Not Before: May  3 02:17:20 2026 GMT
            Not After : May  2 02:22:20 2027 GMT
        Subject: CN=5A747CD55D96C859AFD32BF8AA6FC31F4708E5A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:c7:59:42:de:5c:fe:49:09:fd:2c:13:70:
                    03:05:13:1a:95:a3:bb:2d:ca:6a:f2:2f:8e:72:28:
                    ad:d2:83:94:d7:6a:d4:35:1c:f6:94:cc:4f:07:1b:
                    74:44:5b:95:d5:7f:99:51:a5:d5:d8:16:b2:9c:01:
                    eb:0d:30:10:62:f9:73:41:7e:1b:50:8c:e9:b2:fa:
                    30:ae:a8:dc:5a:af:9b:3c:d5:6f:2a:41:fc:4f:33:
                    f4:03:97:bd:87:b6:0e:e8:ed:71:4b:bc:ea:eb:b1:
                    28:77:17:84:58:16:93:a1:04:cb:97:de:95:82:ae:
                    ea:2a:1f:73:2a:53:d1:3d:ce:c1:4b:99:ca:31:2c:
                    a1:60:d9:f4:a8:8b:f8:80:39:b7:c6:82:5c:dc:fe:
                    4a:fd:f5:fe:8b:69:01:16:52:1c:10:bf:79:89:78:
                    48:94:47:20:e2:22:c8:5a:31:28:3c:16:9c:f2:e1:
                    98:be:c9:19:75:4a:d9:67:10:05:5f:3f:cf:88:00:
                    1e:e2:77:03:f3:9f:ab:e6:84:87:13:56:6a:3e:02:
                    4c:fb:df:eb:ee:83:5d:e8:0c:1e:c9:de:6a:49:2e:
                    a4:5f:f9:af:29:3e:09:07:89:bc:71:36:44:a8:09:
                    90:77:02:90:6c:c8:a6:b3:a0:f1:d2:d1:4e:fe:23:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:74:7C:D5:5D:96:C8:59:AF:D3:2B:F8:AA:6F:C3:1F:47:08:E5:A0
            X509v3 Authority Key Identifier:
                keyid:0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/323430303a656134303a3a2f33322d3332203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:ea40::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:12:90:95:5d:92:fc:05:96:06:82:0c:db:1d:05:e8:90:69:
         17:81:1d:c9:4f:0d:1a:56:5e:89:2c:d4:ce:6c:03:fe:35:0d:
         1e:3c:b9:63:d4:b1:a4:ea:7a:da:f0:ab:09:a6:2f:70:c3:a9:
         02:08:ad:b9:14:36:41:f2:11:85:b5:0b:09:c0:99:a1:22:ed:
         f4:85:82:c1:b6:b1:d0:70:cd:34:8d:9f:af:ed:39:23:65:b7:
         9d:25:c8:32:28:4f:28:01:af:27:ff:92:2d:e7:3a:bf:a6:c0:
         50:7d:a5:8f:f2:73:66:86:1b:53:28:77:98:1e:ef:f0:c0:a5:
         4b:ef:73:6b:17:a7:68:28:db:f8:c3:f1:83:dc:14:4b:ff:b7:
         14:7f:69:04:23:b8:90:9d:66:1d:a0:65:bd:51:6e:8f:0d:ba:
         c6:cd:90:1f:1c:1e:fb:39:50:20:db:26:71:f4:e4:2e:44:64:
         b6:45:75:e6:de:29:5c:d7:49:b5:df:d2:89:cf:db:2b:d0:3e:
         99:06:28:3b:70:df:27:b9:36:de:ee:fe:90:ec:7a:c0:fa:32:
         cf:4e:09:31:bf:3e:4c:51:d2:2e:94:8d:11:d7:10:e5:79:dc:
         dc:ff:f5:20:fa:57:ec:5b:13:9a:d4:24:d0:e7:42:48:69:2e:
         38:e5:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:33 2026 by rpki-client