Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          u0O5vTBofznHSsZnXIqEqyWifadBtav5TUAMlqeY8Jg=
Subject key identifier:   72:A9:0C:9F:B4:5F:58:1C:C8:CB:74:35:60:F5:F2:F0:C0:49:F7:04
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       6D7F966BBAF9AAB147CCBDEF94216663A7AA7CE6
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:15 +0000
ROA not before:           Sun 03 May 2026 02:23:15 +0000
ROA not after:            Sun 02 May 2027 02:28:15 +0000
asID:                     139949
IP address blocks:        2405:aac0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7f:96:6b:ba:f9:aa:b1:47:cc:bd:ef:94:21:66:63:a7:aa:7c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:15 2026 GMT
            Not After : May  2 02:28:15 2027 GMT
        Subject: CN=72A90C9FB45F581CC8CB743560F5F2F0C049F704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:bf:3c:c3:ba:69:21:53:6a:ca:76:0b:a4:
                    90:97:ee:ab:10:4a:48:3c:88:4e:b9:73:42:e9:61:
                    4d:b9:6d:6d:f5:ae:1b:42:9e:25:66:8e:6b:7b:d1:
                    df:00:bd:a7:93:bc:ca:0f:74:5a:dd:de:a7:c3:26:
                    cc:d7:ed:10:b2:1a:cf:1b:42:c0:7a:a7:ad:39:29:
                    3a:1a:07:01:45:b2:1e:b5:df:cb:b3:73:02:7a:69:
                    4e:b9:f8:1d:05:72:c9:00:ac:2a:ef:c4:6f:1f:5b:
                    d5:f0:9d:91:56:ff:ae:89:99:f8:8f:3f:54:16:23:
                    30:be:ad:89:75:dd:0e:e0:df:6c:9e:d9:bc:d2:e0:
                    e6:27:61:8e:a5:97:f3:11:bc:16:c7:9a:1c:1b:f8:
                    c6:16:26:a5:c9:3d:02:3e:a1:d8:fe:4d:46:04:ea:
                    64:ff:63:02:8e:a5:bf:1f:69:a0:ee:0d:77:7e:ca:
                    8f:23:02:3e:25:cd:67:b9:1b:8e:ef:ce:5c:8d:f5:
                    4e:73:b2:0c:6f:03:f6:e2:1b:5b:3a:a0:56:44:29:
                    86:18:aa:8b:b0:dd:e2:fa:d7:7c:fa:c2:2d:a1:1e:
                    c8:7d:da:c3:36:e9:6a:67:aa:46:94:e3:1f:be:98:
                    09:29:b9:ae:00:a6:0d:a0:eb:89:0c:a5:a5:2f:a8:
                    e2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A9:0C:9F:B4:5F:58:1C:C8:CB:74:35:60:F5:F2:F0:C0:49:F7:04
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:2f:35:52:45:a7:dc:b4:7d:bd:21:a6:3c:3e:03:eb:bf:9a:
         fa:e4:3c:7b:5b:8c:b7:54:18:9c:f5:87:f7:9c:6f:2a:40:47:
         79:bf:1f:c4:45:b6:59:01:b8:36:7d:c0:78:37:2a:df:b2:73:
         7e:52:b4:8d:55:9e:8c:d1:7b:6d:a6:df:7e:2c:7e:66:16:cf:
         bc:22:ac:35:d2:cb:88:6c:42:1e:0f:4d:d9:db:b9:b4:ca:27:
         4d:7d:01:da:c4:d1:b2:0f:fb:87:ae:28:68:9e:a8:c8:21:2a:
         e6:2c:75:7d:d3:12:9a:6e:18:80:42:70:c6:4f:e4:22:91:fe:
         c2:2a:ab:9c:90:df:5b:63:76:74:59:f8:55:76:a2:b4:f1:2a:
         db:12:f9:62:7e:81:33:01:8b:89:e6:5f:3c:2a:28:8e:2f:8d:
         da:e2:7c:3a:38:03:6e:69:12:56:f2:08:fc:d8:3b:29:df:a7:
         c3:38:ac:5b:a8:ef:56:cf:5b:69:bf:b0:ac:a0:00:a4:86:38:
         c4:1e:03:98:35:3e:64:1b:29:99:04:a2:ba:35:4f:a3:89:10:
         73:ad:a3:61:5c:c5:2e:b6:25:25:51:09:c1:9c:cc:82:06:5a:
         06:0c:ec:0b:fe:c1:a8:e5:c1:ea:a3:8e:c5:dd:6e:a4:25:fe:
         e9:85:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:00 2026 by rpki-client