Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa
File:                     323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (raw, json)
Hash identifier:          Di5sToIdYtfOw42F6tH8eEgf1Tlo/6HAUCPyhJe7z9s=
Subject key identifier:   97:85:F4:4F:C2:4E:DD:FA:69:2F:59:6B:DA:47:0B:4C:18:FC:8B:E6
Certificate issuer:       /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial:       0E2E7A262DFE7195429C6B0D1B1C6C40CBD7573C
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa
Signing time:             Sun 03 May 2026 02:23:19 +0000
ROA not before:           Sun 03 May 2026 02:18:19 +0000
ROA not after:            Sun 02 May 2027 02:23:19 +0000
asID:                     58485
IP address blocks:        2402:e100:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
                          rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2e:7a:26:2d:fe:71:95:42:9c:6b:0d:1b:1c:6c:40:cb:d7:57:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
        Validity
            Not Before: May  3 02:18:19 2026 GMT
            Not After : May  2 02:23:19 2027 GMT
        Subject: CN=9785F44FC24EDDFA692F596BDA470B4C18FC8BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:62:38:ef:00:1e:64:01:a7:e0:1a:d4:02:
                    34:80:5c:f4:d8:ae:65:9a:6c:74:ea:ee:48:2f:6e:
                    a7:53:93:79:b1:f8:74:81:44:b0:c4:bb:bd:33:cd:
                    26:ef:bf:46:f8:b9:8d:13:cb:94:ba:f1:82:11:65:
                    b0:ca:d4:3a:27:78:2a:3f:69:0f:4a:c7:cd:fb:9e:
                    98:80:23:43:94:5c:00:44:b0:cb:5e:eb:76:7b:83:
                    39:e6:96:9f:d2:12:d1:35:2d:37:21:11:7e:a9:5e:
                    0c:d2:84:d2:af:4b:6a:7a:30:cd:5b:31:66:64:7f:
                    ac:3c:d2:45:fb:d8:52:47:ea:e8:1d:2c:fa:68:56:
                    58:e2:fc:52:38:19:30:2f:92:01:ad:92:9b:e2:dd:
                    90:56:ea:a5:86:34:84:02:3c:01:94:0a:6a:d9:f2:
                    ff:e0:3b:48:17:0f:75:bb:d3:83:e2:af:e2:e9:c7:
                    c9:a2:d6:f9:c8:66:ff:15:e1:69:d6:93:79:19:cf:
                    e5:12:93:cb:75:0b:4a:fa:dc:53:c0:e0:a2:69:02:
                    a7:65:3d:6c:e3:b3:8b:b7:bd:bd:e3:ac:a1:48:7d:
                    db:f8:66:01:d7:d5:d7:6f:eb:a3:1d:0a:4a:7e:56:
                    ff:e9:68:0a:f6:12:c7:eb:67:84:26:b4:fa:08:55:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:85:F4:4F:C2:4E:DD:FA:69:2F:59:6B:DA:47:0B:4C:18:FC:8B:E6
            X509v3 Authority Key Identifier:
                keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e100:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:5e:27:45:18:87:61:f6:02:a7:8a:93:1e:66:f1:7d:be:
         c4:6f:cf:e1:0f:3b:48:1a:f5:e5:3d:b4:ce:84:4a:bf:e3:05:
         dd:a5:82:48:5d:49:ce:f1:0d:d5:04:ef:7f:2a:64:4e:1a:f8:
         2f:cc:fc:d2:09:34:87:9a:5d:35:7a:f1:2f:2f:81:fd:45:17:
         f0:70:e8:15:9d:4b:6b:23:9b:31:42:6f:de:0c:f9:37:45:12:
         74:8a:af:5d:bc:e2:87:a1:26:05:59:15:7f:de:00:11:8a:68:
         17:ba:c4:4d:cb:ec:ce:ad:15:9e:0b:da:cd:00:a7:26:9c:9f:
         fd:a8:3c:43:3f:b1:70:8a:72:6e:92:e5:41:87:02:18:30:a0:
         c4:ce:63:47:42:b5:ec:04:8c:32:7a:a9:8c:d0:68:18:5e:78:
         51:31:e5:ac:e2:70:23:e7:31:0e:8e:f5:61:6f:7f:d1:d7:9e:
         23:85:13:b6:a9:c7:bc:a0:dd:79:09:a5:b5:99:07:e9:11:55:
         66:a3:73:ed:d1:75:18:6a:57:1b:56:96:f4:54:30:f4:fb:9e:
         51:db:d3:4b:cb:4d:63:4f:54:a6:5b:5c:b4:dd:54:f4:a3:c1:
         b6:3c:08:c0:02:7f:b1:22:a9:e8:17:31:83:1f:ed:a7:9c:d2:
         d9:15:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:28 2026 by rpki-client