Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a3a2f33322d3438203d3e203538343835.roa
File:                     323430323a653130303a3a2f33322d3438203d3e203538343835.roa (raw, json)
Hash identifier:          kNgOuGZXLAFUYxR2TmnqvvHmRiKcIBei3j7WTSaZzZ4=
Subject key identifier:   C7:4F:03:FC:81:13:92:C4:68:A0:56:30:98:BC:6E:E7:4F:54:2B:F0
Certificate issuer:       /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial:       2B5EDB0A1831CCB446A836BB180A252B9D09C6EB
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a3a2f33322d3438203d3e203538343835.roa
Signing time:             Sun 03 May 2026 02:23:16 +0000
ROA not before:           Sun 03 May 2026 02:18:16 +0000
ROA not after:            Sun 02 May 2027 02:23:16 +0000
asID:                     58485
IP address blocks:        2402:e100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
                          rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5e:db:0a:18:31:cc:b4:46:a8:36:bb:18:0a:25:2b:9d:09:c6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
        Validity
            Not Before: May  3 02:18:16 2026 GMT
            Not After : May  2 02:23:16 2027 GMT
        Subject: CN=C74F03FC811392C468A0563098BC6EE74F542BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:f2:01:4d:08:32:25:a0:e1:dc:42:14:ff:
                    16:00:42:f0:74:95:c4:cb:87:78:72:8c:29:44:c3:
                    a0:f3:03:88:cc:f6:9b:da:86:5b:85:43:a0:67:d0:
                    c5:80:ed:88:e0:eb:5e:85:df:33:70:5a:67:59:14:
                    4f:a8:b4:26:cc:d3:5e:b1:59:f8:7c:b5:0c:3b:51:
                    98:b7:4b:52:be:d7:ab:92:24:5e:4d:ed:60:e9:cd:
                    17:f2:26:78:c8:91:28:1b:da:29:6f:cf:11:fa:19:
                    e7:a5:67:6b:bc:97:ec:7b:b3:99:5a:c6:97:94:34:
                    bc:cf:75:32:7e:ca:86:5b:ee:b1:b6:fd:40:94:e2:
                    6c:7c:89:9f:b5:c3:37:46:7b:b7:61:f3:87:20:94:
                    40:4f:2a:8c:94:60:75:40:d5:75:7a:1c:7e:95:d6:
                    70:1f:53:8e:d3:39:2a:81:25:9f:c2:61:06:27:70:
                    26:85:ba:59:e6:8f:53:a9:ac:cb:42:e8:f0:ba:6a:
                    f0:d2:7f:95:4e:48:1e:b9:a8:4b:d9:61:8c:da:32:
                    4c:99:0a:00:4a:8f:f3:94:cc:66:e4:16:34:b8:43:
                    19:a0:46:aa:02:cd:c2:4b:69:04:53:8e:31:32:41:
                    90:48:6f:8b:c6:4e:46:d3:b4:29:98:dd:fc:44:94:
                    33:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4F:03:FC:81:13:92:C4:68:A0:56:30:98:BC:6E:E7:4F:54:2B:F0
            X509v3 Authority Key Identifier:
                keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a3a2f33322d3438203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e100::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:8e:a2:46:f4:f4:84:2c:5b:e2:43:3d:c8:ba:c7:34:2a:90:
         75:15:d4:e9:4e:c2:3d:29:06:08:27:02:97:d0:7b:ce:0b:41:
         a2:b9:84:f4:a3:88:71:6e:d3:6f:75:73:ba:86:8b:e4:7f:fd:
         e4:09:7d:13:8a:eb:45:4e:2f:9d:e1:87:bb:57:77:f3:25:a5:
         2a:0b:9b:12:af:fb:6b:e4:2b:ae:7c:de:ee:37:04:e9:9e:b4:
         22:85:84:b9:fa:6d:e3:af:f3:32:47:38:db:f7:78:cc:98:bc:
         0f:c2:e9:a9:8e:6e:08:19:89:b4:87:b4:5e:90:14:7e:23:93:
         a4:a4:52:20:37:fa:56:4b:0a:63:83:5d:f0:96:a1:bd:03:cb:
         38:cb:03:21:99:ff:7d:73:25:68:43:93:77:62:49:98:b4:fd:
         36:31:17:98:a2:a0:60:c3:af:96:02:6c:12:da:de:8a:1a:f7:
         9c:6b:e3:0f:2d:0e:28:b5:f5:2e:e9:9c:3a:e7:62:f7:d8:93:
         b3:0f:4a:a3:31:e1:e4:70:66:2d:a1:0f:7a:a3:2d:4a:1a:8e:
         3f:49:a4:34:32:fe:8a:90:e4:a7:32:d1:e1:90:e2:8a:eb:ef:
         db:fd:de:ef:8a:6e:3b:06:87:6f:39:ca:ae:ee:16:dd:89:f4:
         54:f4:75:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:29 2026 by rpki-client