Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa
File:                     323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (raw, json)
Hash identifier:          8VioNKBine3nnTO3lIrgZ5P0mwfqaztVY9eBTGZLZpY=
Subject key identifier:   6F:2F:AD:32:F5:FB:B3:8A:5D:D6:A4:64:98:CB:17:5F:0B:81:2E:C2
Certificate issuer:       /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial:       49D6C187E6C0CE2FC79212C14425DD2DEB79C2BF
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa
Signing time:             Sun 03 May 2026 02:23:16 +0000
ROA not before:           Sun 03 May 2026 02:18:16 +0000
ROA not after:            Sun 02 May 2027 02:23:16 +0000
asID:                     58485
IP address blocks:        2402:e100:38::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
                          rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d6:c1:87:e6:c0:ce:2f:c7:92:12:c1:44:25:dd:2d:eb:79:c2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
        Validity
            Not Before: May  3 02:18:16 2026 GMT
            Not After : May  2 02:23:16 2027 GMT
        Subject: CN=6F2FAD32F5FBB38A5DD6A46498CB175F0B812EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:c7:8d:6a:30:26:b8:4f:fe:ee:de:48:1d:
                    4a:0e:e9:51:2e:aa:f3:0f:f7:74:a3:61:a7:2f:99:
                    f3:ff:6e:33:94:87:e0:01:7f:f1:9a:5b:20:d1:94:
                    56:b5:8a:ce:b4:28:45:a9:6e:b5:45:90:23:29:90:
                    3c:c5:bd:1a:77:f5:6b:22:43:3e:99:c6:e4:9b:aa:
                    db:3a:7a:dd:3f:d1:da:ff:d0:65:b0:d4:8b:7b:c0:
                    b2:a9:38:20:d1:6b:22:f3:e3:c7:98:62:97:39:ae:
                    2d:30:60:fd:0c:72:44:ab:01:0d:f2:81:53:73:9a:
                    23:b7:b1:4e:aa:95:1e:5f:0a:9b:f3:14:c6:fb:65:
                    12:1e:98:6a:e1:45:b8:37:d4:fb:6c:43:54:0b:11:
                    84:76:bd:e9:cb:93:64:0a:eb:1b:f7:31:a6:f3:33:
                    64:78:c7:32:92:09:b6:29:aa:a4:aa:c1:b1:88:c4:
                    79:82:9c:8e:e4:45:df:f8:d5:94:34:24:f6:0b:cd:
                    e5:4a:bd:ba:fb:c3:fe:d1:a1:d1:51:6f:5e:ec:aa:
                    6c:26:ae:93:9a:2d:d6:ba:77:69:4d:64:9a:42:ec:
                    76:c8:59:1a:3f:9a:00:33:98:64:4e:95:40:21:4a:
                    79:08:65:ca:15:92:ad:4c:f8:25:24:bc:6c:b7:73:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2F:AD:32:F5:FB:B3:8A:5D:D6:A4:64:98:CB:17:5F:0B:81:2E:C2
            X509v3 Authority Key Identifier:
                keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e100:38::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:19:e3:4d:7b:34:7f:a5:df:e5:eb:8a:13:4b:ce:68:5a:29:
         40:ba:1c:03:ab:3f:f9:2c:a5:24:04:cd:63:7a:86:c5:35:a2:
         64:75:96:a9:3a:05:b5:bc:e6:46:39:0d:6d:db:5f:b2:d3:5f:
         e9:7b:38:36:79:0e:cb:a1:df:a8:9a:e0:02:8f:40:35:78:71:
         3b:44:75:05:5d:fc:e9:9d:63:6e:97:eb:bb:d7:0a:d3:4f:47:
         09:c5:61:5e:33:e4:e9:b7:c2:e3:21:77:78:3c:f6:67:0b:c6:
         6a:ad:90:f7:35:77:6c:bc:9e:88:2e:35:cc:66:af:f6:5d:7d:
         71:55:28:c6:8d:31:a8:2a:77:7b:de:64:35:dd:f8:c1:c7:7c:
         72:fe:6c:ab:dc:d1:86:3e:0e:a9:86:32:4c:de:e7:fc:d7:2e:
         a6:2d:cb:da:5d:61:28:a9:51:6c:77:2c:cb:93:44:04:7f:cc:
         d0:5e:c5:31:b5:54:b8:6c:57:c6:d6:af:2f:54:41:9f:b5:3f:
         b4:59:d5:ee:75:25:d1:7a:0b:32:0b:95:b7:83:68:7d:0e:15:
         a9:69:f2:52:ba:6e:67:df:8b:af:02:66:56:75:d8:48:b0:54:
         7a:7e:5f:b7:d2:4d:e3:1c:48:2f:c1:c2:dc:b0:7a:86:3d:b0:
         0d:66:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:00 2026 by rpki-client