Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa
File:                     323430353a326334303a3a2f33322d3438203d3e203435373035.roa (raw, json)
Hash identifier:          Q/80xzITob9EDyGUauN9lSkFfskt31UxgEkyUCmZLOE=
Subject key identifier:   1E:96:CC:C1:A0:04:74:DB:FF:3D:4A:2F:3B:64:62:2E:8D:3A:48:85
Certificate issuer:       /CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8
Certificate serial:       4FC0A994BD5B328E00BC3B0A1A78C6CBA4C28A48
Authority key identifier: 00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa
Signing time:             Sun 03 May 2026 02:24:42 +0000
ROA not before:           Sun 03 May 2026 02:19:42 +0000
ROA not after:            Sun 02 May 2027 02:24:42 +0000
asID:                     45705
IP address blocks:        2405:2c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl
                          rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c0:a9:94:bd:5b:32:8e:00:bc:3b:0a:1a:78:c6:cb:a4:c2:8a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8
        Validity
            Not Before: May  3 02:19:42 2026 GMT
            Not After : May  2 02:24:42 2027 GMT
        Subject: CN=1E96CCC1A00474DBFF3D4A2F3B64622E8D3A4885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:ae:a0:3a:0e:db:11:9a:10:b8:72:22:6c:
                    f0:40:35:77:57:67:99:33:e3:02:6f:6c:72:7a:75:
                    74:cb:6b:de:59:59:f6:aa:71:80:fb:e0:96:be:2a:
                    91:b0:6b:61:f7:69:a6:2b:d2:3b:57:a0:7c:17:ae:
                    c8:82:82:ce:b6:87:67:a0:6a:85:66:c2:cd:bd:a7:
                    ea:aa:14:01:4a:ca:f8:b8:5e:4f:43:1f:cd:87:59:
                    24:e3:40:c5:08:50:a6:29:d6:2f:c4:d3:0b:5b:c6:
                    84:df:d9:d1:f9:6e:ed:43:f4:a8:d9:f7:86:62:49:
                    82:c6:b2:0c:fd:e2:3e:2a:b5:91:c5:d6:0a:08:df:
                    0c:af:f1:26:46:dc:e4:6b:67:45:87:7b:1e:7d:fb:
                    ee:a5:bd:15:70:ca:52:19:82:14:f1:12:e0:a0:24:
                    0e:6f:e2:d8:fa:b4:96:46:1a:69:a0:7c:cd:88:38:
                    e6:30:51:41:93:f5:a6:92:18:8a:5b:71:f2:9d:5b:
                    41:5a:aa:8b:2d:bf:6b:8f:2c:fa:a9:83:e8:e3:f0:
                    22:e7:59:37:6f:b6:67:04:4d:36:44:fb:4d:39:eb:
                    c3:b9:00:29:cd:0e:ad:5b:11:32:83:72:87:d5:35:
                    15:56:89:05:5b:63:d5:65:7c:85:04:dc:cb:f7:d1:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:96:CC:C1:A0:04:74:DB:FF:3D:4A:2F:3B:64:62:2E:8D:3A:48:85
            X509v3 Authority Key Identifier:
                keyid:00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:56:4e:36:63:9c:27:6a:37:23:68:12:bb:06:f1:4d:f2:38:
         6e:e6:28:bf:2c:61:eb:a4:6d:b8:ad:da:ec:a1:c5:0e:dc:b1:
         f1:ee:9b:17:a6:3a:84:ab:0b:13:52:a8:a8:fe:3c:a0:56:85:
         c4:8a:fc:fb:2f:96:bc:b4:e0:b4:4f:8f:67:03:fc:bc:08:89:
         cf:63:41:86:cc:e9:8c:e6:41:fd:98:9d:1b:95:e1:fd:ca:e6:
         af:13:00:1c:cb:b0:18:30:9c:c1:2d:01:b3:57:29:ab:b8:a9:
         18:ca:a8:b3:90:c0:30:a8:27:4e:4a:fb:2d:08:61:3a:2e:6e:
         12:36:b8:7a:b7:9c:4e:89:61:63:45:bf:2d:eb:22:8b:8e:1a:
         2c:f0:4c:fa:3f:3d:4e:c3:c1:ee:9c:d6:ee:66:12:41:64:a3:
         3d:a8:a3:89:fc:64:1d:9e:43:3d:6e:ad:aa:d2:bc:f3:bf:79:
         39:2d:67:46:ac:b6:bd:47:21:a8:35:04:69:ea:df:51:46:63:
         60:44:45:e1:d3:58:3a:e8:cf:d3:93:de:a3:13:e3:e3:8e:3a:
         77:67:b9:46:71:4a:19:37:96:33:2a:4f:9d:69:cf:b8:50:9c:
         37:b5:01:1c:03:a4:42:e3:73:ea:27:2c:32:1d:ea:bf:6b:c9:
         25:33:18:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:11 2026 by rpki-client