Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa
File:                     323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (raw, json)
Hash identifier:          cq5fJGcOxUi8WO0+4dKMsKLXIWSZjZoNabBBMuQjlGY=
Subject key identifier:   3C:2B:81:C6:D6:93:42:B5:1D:69:04:98:4F:EB:DC:BD:CF:9D:0A:91
Certificate issuer:       /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial:       394E91D3FB3F2AE998AC94372D6DB7FF1092D8A5
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa
Signing time:             Sun 03 May 2026 02:23:20 +0000
ROA not before:           Sun 03 May 2026 02:18:20 +0000
ROA not after:            Sun 02 May 2027 02:23:20 +0000
asID:                     58485
IP address blocks:        2402:e100:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
                          rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4e:91:d3:fb:3f:2a:e9:98:ac:94:37:2d:6d:b7:ff:10:92:d8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
        Validity
            Not Before: May  3 02:18:20 2026 GMT
            Not After : May  2 02:23:20 2027 GMT
        Subject: CN=3C2B81C6D69342B51D6904984FEBDCBDCF9D0A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:89:cd:3f:e7:cd:75:95:59:c8:a7:fd:67:
                    fc:ee:25:97:aa:fa:7c:fa:5a:f7:ae:96:a7:c2:bd:
                    85:20:9e:7d:00:6b:70:94:98:ae:34:dd:7f:d0:07:
                    5f:52:53:f1:fe:2e:fe:77:14:2b:ac:0c:fa:cf:c2:
                    5f:81:cc:8c:36:27:5c:4a:ad:9c:a1:32:d7:76:bc:
                    5a:af:7b:25:1d:67:23:d8:69:ef:49:3f:eb:75:8f:
                    2e:2b:ef:88:3c:85:62:55:cf:94:e3:d1:e2:f6:4c:
                    0d:84:a0:c5:25:a7:99:9e:6a:5e:18:58:af:8c:25:
                    15:03:ac:fa:3b:05:86:d0:be:cf:4c:83:fd:4b:bd:
                    5d:42:14:5c:77:4b:46:1e:67:1a:01:b6:f8:b7:6b:
                    a8:9c:3e:02:0b:10:4c:98:fb:33:b0:96:71:2d:38:
                    a8:25:c5:26:1b:83:c2:3a:61:38:7d:e1:9c:66:c7:
                    f9:14:a3:41:5e:97:d3:05:37:19:8a:0c:b6:3a:f7:
                    ba:92:35:39:29:60:95:73:36:a4:19:a0:30:02:e4:
                    b2:96:6e:25:3e:e5:5b:38:53:fb:08:44:26:e1:32:
                    92:37:18:8e:eb:d2:6e:2c:24:8b:7e:3d:74:e0:24:
                    3e:1c:eb:73:40:fc:58:6e:7a:58:63:8f:74:d3:58:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2B:81:C6:D6:93:42:B5:1D:69:04:98:4F:EB:DC:BD:CF:9D:0A:91
            X509v3 Authority Key Identifier:
                keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e100:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:84:05:6c:00:c8:0c:7b:f9:3a:2f:12:3c:fc:00:2c:6e:9c:
         fc:91:fa:d4:78:be:12:c6:dc:f0:17:2f:55:04:dd:3a:8c:71:
         d8:fb:bb:40:6f:90:77:4f:93:4b:70:6c:af:5e:8d:9d:53:55:
         c2:36:36:4a:cb:fe:ad:97:8d:d3:cf:2c:e4:e1:9d:3c:c4:ad:
         af:f4:ef:fb:21:1a:d0:8c:d7:99:94:fa:cc:58:23:13:ee:07:
         f5:01:95:41:e7:42:92:0c:d1:5e:29:6a:f9:36:61:0d:e2:e4:
         f5:8e:fc:1c:99:6d:2b:4c:49:17:d6:21:9f:12:a1:fc:6e:2c:
         6b:6e:ac:44:87:5d:1c:03:ae:11:2a:a8:71:f9:da:3a:84:15:
         c3:0f:24:65:5c:8e:14:f2:be:64:24:f3:5b:f0:ca:8b:d6:fb:
         fe:1e:ff:e9:f3:f7:36:bd:a3:46:de:c7:fe:5a:a1:40:52:bd:
         34:d0:36:2e:e1:dc:72:f4:27:0d:46:70:8e:57:0a:c2:03:1e:
         75:31:17:0d:2a:d6:d7:73:17:67:29:4a:18:ea:1a:fb:fd:de:
         87:d6:7e:5b:cc:0f:78:97:c1:d9:2e:d2:1d:61:d3:81:2c:53:
         9a:e8:12:cf:fa:51:d9:71:ce:98:47:29:4a:6f:d6:37:3b:8d:
         0b:7e:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:21 2026 by rpki-client