Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          Kcwg+OCYa0l1c3T4L3Hw0O+SycguIuf5aVxWUqMU4IE=
Subject key identifier:   7B:A6:D7:9C:CD:DC:DD:D1:80:73:F2:CD:2C:38:04:C4:B1:AB:19:FC
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       3BE3F8497EB1E9BC7AC2F806A922F83B6F1095A4
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:13 +0000
ROA not before:           Sun 03 May 2026 02:23:13 +0000
ROA not after:            Sun 02 May 2027 02:28:13 +0000
asID:                     139949
IP address blocks:        2405:aac0:52::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e3:f8:49:7e:b1:e9:bc:7a:c2:f8:06:a9:22:f8:3b:6f:10:95:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:13 2026 GMT
            Not After : May  2 02:28:13 2027 GMT
        Subject: CN=7BA6D79CCDDCDDD18073F2CD2C3804C4B1AB19FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:63:bd:c3:4e:97:bb:00:3d:ab:08:0b:e7:
                    d9:de:d7:e8:ff:30:bb:2d:ea:bd:90:6c:23:f2:74:
                    37:9d:1e:7b:bb:3d:70:68:43:57:ad:7f:3c:52:4a:
                    d2:9a:42:a8:e1:0c:93:7a:66:7b:2d:85:1f:2c:53:
                    c0:74:ca:27:b6:14:f4:a9:7b:41:74:0b:ad:5b:71:
                    b2:8c:f7:71:84:e5:41:ad:92:9b:36:8e:70:46:7f:
                    64:1f:e9:58:a9:16:55:ca:d7:d9:a6:4e:a4:52:fa:
                    08:42:a8:55:b0:26:a1:ba:db:fe:64:05:b7:d3:db:
                    67:f7:17:8b:e8:07:d5:7c:5f:66:b3:5e:e2:bd:72:
                    28:ab:76:0d:15:d9:f5:f0:53:ee:7d:6f:78:18:01:
                    b1:3c:81:84:5b:6c:70:82:0b:46:9d:c8:51:b7:82:
                    ab:31:86:64:2d:77:2e:e8:63:f8:89:26:2d:c8:5f:
                    c1:61:e4:13:8e:70:93:eb:17:c5:86:28:49:86:e3:
                    f2:57:7b:df:80:6b:ab:a8:64:6f:da:1a:49:5d:2a:
                    1f:c5:c1:ae:91:9f:26:02:6f:6e:53:e2:07:e1:7f:
                    f0:4a:ee:39:ae:2c:19:17:df:b3:3e:24:61:63:38:
                    cb:04:99:f7:fd:8b:4b:dc:1e:cd:81:ea:ba:a8:a4:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A6:D7:9C:CD:DC:DD:D1:80:73:F2:CD:2C:38:04:C4:B1:AB:19:FC
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:52::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:c4:98:9b:5e:be:10:94:65:ac:db:e5:26:2b:40:ab:f2:32:
         0b:70:a0:3f:78:58:10:e8:dc:90:5b:03:63:08:79:0c:97:cb:
         33:20:78:c7:4c:59:cf:7a:7e:28:88:bc:52:2a:6f:2e:6f:77:
         f2:92:1b:c8:17:7f:e7:59:b9:14:bb:90:51:cd:13:04:1a:dd:
         c4:42:ac:c1:fd:85:d5:66:6b:e5:fb:22:a1:69:c5:0f:9a:8f:
         27:6a:a8:16:4b:30:25:0b:fd:25:a3:39:ee:12:7d:f7:45:ba:
         34:bd:9f:4e:80:9c:2e:31:7b:b0:a7:6c:72:70:0b:0f:82:c6:
         2b:e6:f8:7e:db:92:de:47:c1:61:da:40:77:fc:8f:83:be:c1:
         a4:06:fd:68:d3:96:dd:e2:82:8e:23:01:67:70:b8:48:df:b3:
         54:f0:71:62:25:91:fa:1e:af:81:3a:b0:69:dd:7a:3a:42:80:
         a3:07:d4:dc:f8:8d:59:03:21:52:51:15:e6:2d:69:c5:c1:58:
         d5:06:67:eb:35:f9:4f:f3:dc:bc:61:2c:de:61:d7:19:f4:5c:
         f1:5a:65:e8:80:f9:60:d8:56:74:cd:bf:4e:d4:19:04:7f:cd:
         ae:84:97:b2:6e:57:96:c7:6c:fb:8f:00:2e:67:0e:18:d2:47:
         12:81:a4:29
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUO+P4SX6x6bx6wvgGqSL4O28QlaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2NjYxQUFBREUyQzYw
MUQwNjRGMDAeFw0yNjA1MDMwMjIzMTNaFw0yNzA1MDIwMjI4MTNaMDMxMTAvBgNV
BAMTKDdCQTZENzlDQ0REQ0RERDE4MDczRjJDRDJDMzgwNEM0QjFBQjE5RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/WO9w06XuwA9qwgL59ne1+j/
MLst6r2QbCPydDedHnu7PXBoQ1etfzxSStKaQqjhDJN6ZnsthR8sU8B0yie2FPSp
e0F0C61bcbKM93GE5UGtkps2jnBGf2Qf6VipFlXK19mmTqRS+ghCqFWwJqG62/5k
BbfT22f3F4voB9V8X2azXuK9ciirdg0V2fXwU+59b3gYAbE8gYRbbHCCC0adyFG3
gqsxhmQtdy7oY/iJJi3IX8Fh5BOOcJPrF8WGKEmG4/JXe9+Aa6uoZG/aGkldKh/F
wa6RnyYCb25T4gfhf/BK7jmuLBkX37M+JGFjOMsEmff9i0vcHs2B6rqopErlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUe6bXnM3c3dGAc/LNLDgExLGrGfwwHwYDVR0j
BBgwFoAUCgJEYv/afibl02Zhqq3ixgHQZPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2RlZGMwMzMtY2Q0ZC00NjIwLTkzNzItZTZlMDM5ZmMwNmI5LzAvMEEwMjQ0NjJG
RkRBN0UyNkU1RDM2NjYxQUFBREUyQzYwMUQwNjRGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTAyNDQ2MkZGREE3RTI2RTVEMzY2NjFBQUFERTJDNjAxRDA2
NEYwLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05
MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzUzMjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFqsAA
UjANBgkqhkiG9w0BAQsFAAOCAQEAusSYm16+EJRlrNvlJitAq/IyC3CgP3hYEOjc
kFsDYwh5DJfLMyB4x0xZz3p+KIi8UipvLm938pIbyBd/51m5FLuQUc0TBBrdxEKs
wf2F1WZr5fsioWnFD5qPJ2qoFkswJQv9JaM57hJ990W6NL2fToCcLjF7sKdscnAL
D4LGK+b4ftuS3kfBYdpAd/yPg77BpAb9aNOW3eKCjiMBZ3C4SN+zVPBxYiWR+h6v
gTqwad16OkKAowfU3PiNWQMhUlEV5i1pxcFY1QZn6zX5T/PcvGEs3mHXGfRc8Vpl
6ID5YNhWdM2/TtQZBH/NroSXsm5Xlsds+48ALmcOGNJHEoGkKQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:19:34 2026 by rpki-client