Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          2uItblLkmHUtUXNvF9T75S0Y41mhc0tiaoJz8UwHxqo=
Subject key identifier:   75:2E:5E:AF:CF:D8:6E:80:0D:70:40:A7:1B:B5:C7:CC:09:97:BC:19
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       2734D5FA290E023E08F2DCB5225C95C3E5221FA2
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:19 +0000
ROA not before:           Sun 03 May 2026 02:23:19 +0000
ROA not after:            Sun 02 May 2027 02:28:19 +0000
asID:                     139949
IP address blocks:        2405:aac0:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:34:d5:fa:29:0e:02:3e:08:f2:dc:b5:22:5c:95:c3:e5:22:1f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:19 2026 GMT
            Not After : May  2 02:28:19 2027 GMT
        Subject: CN=752E5EAFCFD86E800D7040A71BB5C7CC0997BC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:47:4a:cf:9e:74:b6:d6:54:a7:53:59:14:
                    a3:46:ee:b1:cd:30:1d:bc:ea:2a:26:29:a2:a8:f4:
                    7f:78:5d:13:c1:b4:aa:4c:44:6b:85:3c:17:a1:0b:
                    ce:8a:9d:e4:bd:4c:d1:b2:31:34:7e:b5:e6:f7:10:
                    11:8e:ca:6d:51:b1:a8:8b:d9:a5:ae:9e:4a:6b:45:
                    f8:54:99:ed:a0:8a:6a:0a:25:9d:31:88:01:68:da:
                    85:60:ab:1a:3b:af:1c:da:88:b7:e4:13:a1:e4:22:
                    ca:e2:87:cd:68:ac:ee:cd:9a:aa:d8:05:bd:ac:0b:
                    63:1f:ec:ca:ee:7b:8b:e1:18:c0:ae:77:1d:8f:89:
                    14:c8:30:25:1d:34:50:7b:20:ee:d1:6f:13:c0:b4:
                    62:a3:54:00:70:84:05:48:88:c5:2b:21:29:1a:87:
                    dc:48:ca:31:23:73:55:b9:09:c9:d6:b9:11:8c:e9:
                    e0:86:fa:f7:a4:b3:5d:14:9e:e7:68:9d:60:a0:91:
                    be:e9:68:de:c3:7a:27:d8:ef:95:8f:91:cc:f2:3a:
                    42:cf:04:00:c0:ae:39:4e:3c:f0:3f:2a:0f:c7:4b:
                    ea:e1:d4:ec:60:99:ba:68:c1:10:13:e0:70:db:82:
                    2b:59:cb:99:bb:9d:09:4f:82:30:df:7a:da:f8:d6:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2E:5E:AF:CF:D8:6E:80:0D:70:40:A7:1B:B5:C7:CC:09:97:BC:19
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:89:96:58:d4:59:7b:ee:5b:28:99:e7:69:19:7f:a6:54:87:
         5c:fe:12:81:51:2a:a5:7b:08:49:3d:cc:19:df:b1:a8:09:da:
         a5:b4:1c:3f:70:20:f6:90:a8:97:4f:88:16:e1:75:2d:fe:96:
         03:c1:44:78:c9:ae:19:3c:b1:14:82:f0:fa:ba:57:7b:08:91:
         44:c3:6e:15:50:7e:c3:6c:b9:7c:75:fb:97:35:f8:4c:c4:fb:
         37:8d:3f:d8:16:d1:95:00:2a:32:b9:85:2b:db:59:41:b1:64:
         c0:4f:61:be:b8:53:fd:7b:23:6c:3d:1b:d4:3c:63:99:69:61:
         b1:1f:10:25:31:ff:a1:5d:4b:bd:62:56:c2:8d:f9:69:c6:4a:
         d5:f9:e7:a6:44:ae:31:e3:21:ba:9d:cf:72:71:3d:0f:eb:c0:
         63:0e:38:21:aa:88:05:90:55:87:6a:ae:6a:34:54:7a:16:ab:
         8a:d9:8f:f0:c0:ef:fd:7b:5d:ba:f4:9c:20:be:e8:8b:4c:4b:
         44:eb:16:47:e0:1b:b4:65:59:5f:6b:3a:24:1c:00:c3:7a:85:
         74:39:1a:04:97:54:39:e7:06:ca:b9:ff:1a:fd:38:7e:2a:1d:
         b4:ca:bd:c9:ba:76:4b:17:db:10:6c:9c:93:6b:df:44:2b:95:
         3e:61:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:25 2026 by rpki-client