Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          wmKU9Cpua2Cm0JXd2dDsC2D66awUL0rL5rPGt0jpS0k=
Subject key identifier:   61:32:8E:A6:EB:06:89:C9:F7:AA:61:3A:A5:86:B5:C7:2D:6D:73:77
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       6FE2B30F6A76C739C64813FBF1E12289BB354F5D
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:12 +0000
ROA not before:           Sun 03 May 2026 02:23:12 +0000
ROA not after:            Sun 02 May 2027 02:28:12 +0000
asID:                     139949
IP address blocks:        2405:aac0:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e2:b3:0f:6a:76:c7:39:c6:48:13:fb:f1:e1:22:89:bb:35:4f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:12 2026 GMT
            Not After : May  2 02:28:12 2027 GMT
        Subject: CN=61328EA6EB0689C9F7AA613AA586B5C72D6D7377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:36:96:e1:cd:21:5f:54:48:f6:c3:f8:3d:
                    7e:70:e9:cc:06:16:db:21:cf:15:a8:e8:f4:e8:6c:
                    d1:67:12:ae:02:d7:68:8d:62:89:76:5a:64:02:68:
                    59:a1:cd:1c:c4:06:3a:eb:ca:66:d1:86:90:e2:5a:
                    c9:b8:4a:ce:d0:d1:33:f3:56:4f:e2:a8:e4:7c:92:
                    12:a7:4b:70:ef:fd:4b:41:7c:16:2b:7f:36:b9:8d:
                    a9:ea:c9:8c:59:ff:78:c8:27:aa:0d:16:be:64:46:
                    9e:d9:06:46:cd:ed:fe:3b:84:a1:0d:9c:b1:d1:24:
                    f4:55:98:18:4e:8a:e3:1b:1c:d5:49:66:37:23:54:
                    c1:c7:01:98:33:d7:06:0a:ef:00:f5:18:86:fe:0d:
                    b5:83:a9:5f:1b:1f:c7:4d:1f:13:0d:a3:f3:11:0a:
                    a5:c3:d1:72:1e:ba:5f:8a:fa:fb:fa:6a:d4:6b:d5:
                    ba:b7:ba:86:ff:61:7d:4f:56:04:35:0e:24:13:57:
                    27:80:76:99:49:f6:cc:24:e3:71:99:1d:22:d3:a1:
                    6b:f0:cc:fc:6b:d8:91:7b:da:91:d2:5c:40:49:c1:
                    bf:d6:92:07:ae:af:f6:1a:de:28:b4:eb:1f:c5:18:
                    6e:b1:78:90:ce:f0:e3:6f:92:83:72:46:40:6b:bc:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:32:8E:A6:EB:06:89:C9:F7:AA:61:3A:A5:86:B5:C7:2D:6D:73:77
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:84:99:a6:e6:92:0c:2e:dd:dd:be:29:e7:03:0f:7c:50:50:
         be:85:fd:6c:1e:6e:86:70:72:0e:bc:e2:fd:e0:03:ce:b2:99:
         98:54:ed:9c:74:7d:e9:3c:20:9e:85:fc:96:d3:79:30:4b:f4:
         fc:b2:26:e7:9b:7b:5d:4d:4b:5b:ff:62:90:62:b2:b4:0b:17:
         c2:84:32:e7:ee:b5:e2:77:7d:e7:cd:3a:ed:da:1d:31:fb:5f:
         ae:13:15:ac:cb:b8:d6:4c:52:c5:93:71:18:2e:f6:db:19:60:
         5e:07:45:ef:8d:4d:a8:98:ac:d4:af:b3:b1:10:3b:81:e7:bb:
         0c:d0:65:69:f6:9e:ca:e9:1c:13:d7:45:76:c5:cc:0b:70:19:
         36:ef:36:24:ef:85:6a:6b:b7:7e:dc:9d:23:7e:63:11:a5:fd:
         28:d7:5f:6a:23:6d:c1:89:4c:52:e3:c5:cf:6d:59:81:25:0a:
         c0:43:3c:6b:2a:05:1a:36:ea:a8:6e:d2:c0:e4:75:2b:b4:6b:
         06:d9:d6:75:08:ef:82:82:4f:05:5c:d7:d9:e1:be:16:76:b3:
         02:61:2a:54:28:b8:1d:d7:1a:6e:87:f5:a3:9d:78:6e:92:10:
         f5:5f:6e:38:25:40:20:56:dd:e5:e6:d3:8a:d3:1e:ba:67:c8:
         27:c6:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:56 2026 by rpki-client