Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa
File:                     323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (raw, json)
Hash identifier:          EPaxFk59J+mAhJJZI0UXN15r/MDP8erRFtwyeOK2Jyc=
Subject key identifier:   56:E4:9C:7A:41:8B:38:7B:B5:53:FF:E4:B0:12:38:6D:AC:22:9F:FC
Certificate issuer:       /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial:       4A0160475DE4FE08CD20D2781BF278F78A66EC3D
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa
Signing time:             Sun 03 May 2026 02:23:19 +0000
ROA not before:           Sun 03 May 2026 02:18:19 +0000
ROA not after:            Sun 02 May 2027 02:23:19 +0000
asID:                     58485
IP address blocks:        2402:e100:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
                          rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:01:60:47:5d:e4:fe:08:cd:20:d2:78:1b:f2:78:f7:8a:66:ec:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
        Validity
            Not Before: May  3 02:18:19 2026 GMT
            Not After : May  2 02:23:19 2027 GMT
        Subject: CN=56E49C7A418B387BB553FFE4B012386DAC229FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fe:ed:64:f8:b7:e0:ce:3e:2b:1b:08:dc:58:
                    1f:02:67:6a:b1:8c:7f:48:d2:c0:7a:36:04:15:04:
                    84:42:97:a9:53:9e:f9:7c:f4:cc:7a:74:e8:01:c0:
                    c5:12:a5:5d:64:f0:b6:9a:bb:3c:78:16:32:33:61:
                    3c:60:83:97:09:78:7f:a4:c3:f0:8f:2b:d9:28:0f:
                    a0:3a:e7:1d:29:d3:59:84:f7:2f:2a:c0:b6:9d:3c:
                    24:3f:f4:ac:92:fb:8c:17:43:5d:2c:27:50:c4:b8:
                    f8:47:9e:ca:9c:8f:04:bc:0c:a0:0a:4b:e9:57:9d:
                    24:f3:dd:4f:b9:13:2f:f5:4d:4c:2f:16:9a:a1:4f:
                    25:6b:25:4e:ed:b1:46:80:dc:3e:ea:8b:d1:f7:76:
                    ba:62:15:e3:6c:e7:27:f4:0c:a0:ea:95:a5:bc:1d:
                    07:6e:02:d7:78:44:f7:c3:e7:2d:88:00:02:42:66:
                    ec:c7:03:6c:0a:94:68:b4:f7:f1:5b:5b:f6:a4:85:
                    86:60:20:a0:ca:3a:ff:71:45:3e:c5:d4:8a:8e:a2:
                    aa:55:d7:99:83:0b:67:82:1b:ef:d3:c9:1e:4f:88:
                    c4:94:72:71:b9:41:62:b1:90:20:b1:0d:a3:f5:f5:
                    18:6e:2f:1c:e5:3a:cb:31:63:58:0c:48:30:e6:c9:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:9C:7A:41:8B:38:7B:B5:53:FF:E4:B0:12:38:6D:AC:22:9F:FC
            X509v3 Authority Key Identifier:
                keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e100:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:15:16:7d:87:7d:5f:79:7f:0e:85:d2:62:85:c5:ef:31:8c:
         86:12:f6:6e:34:ef:d0:16:38:08:c7:52:f7:3b:48:2e:41:79:
         f3:d3:7d:26:7c:9f:23:01:1f:5d:bd:46:91:52:22:95:43:3a:
         eb:44:a8:91:7d:15:c9:60:57:01:24:0a:5b:6b:5c:9f:62:e3:
         63:06:37:35:09:e6:90:2b:41:ad:b8:10:53:5e:c7:96:1b:c3:
         85:ec:23:02:0c:69:f0:5b:db:a2:a3:c4:92:27:9f:ac:fc:3f:
         d7:24:dd:6b:be:ad:18:d7:50:4f:bf:85:24:21:5c:28:c4:bf:
         11:08:40:2d:e3:8f:b7:7d:5e:6c:f3:5c:b0:84:4c:d9:40:17:
         58:a7:13:80:6f:3d:e0:51:b6:36:19:dd:4c:d9:d9:3f:6c:3a:
         ba:c0:a7:70:b1:6d:56:98:b3:3e:ff:f2:0e:66:ab:a4:8d:68:
         e8:8b:00:da:d1:f9:ac:41:3b:24:c2:4c:33:76:ac:51:46:9c:
         3f:19:a8:33:49:84:d1:0d:bb:cb:36:d9:3f:6f:12:23:94:40:
         57:f6:7d:c4:b0:90:c6:c0:3a:40:f7:13:61:63:8a:0d:fe:d9:
         62:d0:ec:51:af:e3:9f:b3:2a:bd:4b:eb:ab:39:1b:1e:ea:8a:
         ae:d9:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:25 2026 by rpki-client