Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          ByNHObLn5iawwqUssg4fznvmFNVGWZf3GbNxjGk0nAU=
Subject key identifier:   72:E9:02:C3:6B:FD:87:DF:BD:77:CF:C4:4A:3E:FC:9F:39:DE:ED:E5
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       2DC914457D99DD9475881AF9384A47DE3AD6CBA8
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:11 +0000
ROA not before:           Sun 03 May 2026 02:23:11 +0000
ROA not after:            Sun 02 May 2027 02:28:11 +0000
asID:                     139949
IP address blocks:        2405:aac0:224::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c9:14:45:7d:99:dd:94:75:88:1a:f9:38:4a:47:de:3a:d6:cb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:11 2026 GMT
            Not After : May  2 02:28:11 2027 GMT
        Subject: CN=72E902C36BFD87DFBD77CFC44A3EFC9F39DEEDE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:19:91:0e:0f:58:fa:c0:cb:3b:6f:b1:b4:
                    84:31:44:12:43:f5:f4:9e:59:bd:0c:30:0d:e6:1c:
                    16:b7:7b:f0:fc:d7:9c:aa:90:21:cf:27:f6:04:10:
                    2b:80:a4:71:a4:82:8a:d5:29:b6:ce:a2:71:4c:7a:
                    a7:74:b4:27:4d:ff:3e:74:91:c5:8d:7f:16:d4:10:
                    a7:b2:29:1d:38:dd:8a:64:d3:3d:83:00:d4:51:fe:
                    14:84:90:84:7c:dc:99:5d:a7:d0:37:07:ff:97:52:
                    13:94:40:bb:68:4a:46:46:52:11:99:93:de:fa:b2:
                    f9:7e:43:c1:a1:cf:76:6a:b2:5f:d3:33:05:48:31:
                    c7:a1:fa:f3:1b:94:6d:8e:a3:b4:a1:42:b0:ea:37:
                    dd:48:75:8c:34:d5:a3:01:71:dc:ff:94:47:4c:04:
                    f2:e8:19:50:7b:c6:f0:57:1e:12:77:a3:da:0b:d3:
                    d0:70:4c:ab:e3:59:55:9a:9b:68:19:a4:57:ab:e8:
                    94:58:88:62:92:72:43:ae:a4:6a:c4:1d:aa:e3:54:
                    bb:1b:e6:43:24:8e:f6:77:52:0b:43:3f:86:31:f0:
                    8d:cb:cc:44:5e:dd:3b:8d:c0:40:e5:ba:49:06:e7:
                    2f:9f:89:73:99:7b:9b:dc:20:2e:28:e6:2d:ba:7b:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E9:02:C3:6B:FD:87:DF:BD:77:CF:C4:4A:3E:FC:9F:39:DE:ED:E5
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:224::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:21:79:08:82:f6:d2:be:ec:18:78:77:a9:79:7c:c5:b1:f1:
         f5:f8:af:2f:75:db:c2:0b:72:86:bc:59:c6:bf:21:6c:4c:b0:
         a0:74:70:a1:84:33:ff:47:26:ed:71:1b:d2:8c:06:c7:08:1f:
         16:a6:19:89:59:bf:a8:bf:d0:79:bb:00:8a:8d:ef:9c:04:c8:
         89:b8:f8:e2:64:ef:fb:6a:b3:9f:ed:01:cb:71:a7:3b:6a:a0:
         10:3c:21:a2:e8:3e:6d:c9:09:1f:af:71:0f:cf:93:53:c2:54:
         12:f4:1c:2f:b4:c0:f6:bb:9b:1a:4b:03:21:61:1e:94:bc:10:
         2c:d6:14:8f:00:b3:10:ce:a2:61:9a:2f:18:f7:57:c3:fe:8f:
         56:80:ff:47:8f:8f:eb:8c:4e:94:00:77:d7:f0:73:8d:5d:fb:
         09:de:08:25:f5:6a:c9:9d:b9:07:44:d8:93:2b:5f:5d:3c:11:
         05:c5:64:b6:9c:cd:c8:e1:79:e6:bb:ac:f9:7b:12:dc:ce:c6:
         ac:60:1f:c3:e7:49:2c:7a:cc:39:4a:e8:92:9a:c6:f6:06:1d:
         bb:81:f1:fd:e9:9c:02:6e:c5:b6:23:a7:06:08:39:35:e1:1d:
         b6:b2:18:76:c9:8c:45:4e:6b:c2:bd:a1:3a:89:bd:ed:c9:fb:
         66:94:af:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:30 2026 by rpki-client