Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          pIBcky8PhZ8lbAaksvs2Ue/3STOwF1hzQOT3OATuGHg=
Subject key identifier:   E0:6A:6E:28:1F:ED:FE:D8:EE:5A:79:08:64:9D:A8:8C:66:DF:7D:3C
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       186E75AA123904FB781B77FA975C3B50DE4C1C5D
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:13 +0000
ROA not before:           Sun 03 May 2026 02:23:13 +0000
ROA not after:            Sun 02 May 2027 02:28:13 +0000
asID:                     139949
IP address blocks:        2405:aac0:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:75:aa:12:39:04:fb:78:1b:77:fa:97:5c:3b:50:de:4c:1c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:13 2026 GMT
            Not After : May  2 02:28:13 2027 GMT
        Subject: CN=E06A6E281FEDFED8EE5A7908649DA88C66DF7D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:59:1a:16:55:a7:eb:0f:7b:82:d5:a6:0e:
                    a7:fe:6e:65:c2:7e:81:4e:56:be:37:f9:b7:1f:d6:
                    e6:25:39:33:a7:27:36:e1:b9:75:13:ed:01:94:16:
                    b7:74:10:78:c0:fd:d9:57:24:1f:50:e9:e1:a5:8f:
                    b0:3e:cf:22:da:d0:a0:d3:49:a1:f3:ea:56:1e:00:
                    1f:84:d5:56:58:2e:a4:8e:58:66:94:bb:f5:0a:23:
                    84:fd:7f:29:d4:96:a1:03:d0:0b:37:0f:dc:66:31:
                    9e:0b:52:9e:56:70:59:99:ee:16:00:f1:98:28:14:
                    c6:70:c7:7d:65:ce:81:65:66:c7:26:f6:e4:c6:11:
                    f1:cb:bc:c5:c9:fa:7e:ba:39:07:e3:27:b3:18:97:
                    90:83:0d:c2:57:94:e8:9e:1d:0d:b2:8f:0e:89:aa:
                    9c:92:a0:1e:46:f4:7d:50:cb:ab:58:5a:04:f1:d5:
                    d6:03:90:c7:fa:1d:5c:d4:a8:d1:d7:60:e1:e6:43:
                    b3:70:20:57:25:05:ae:88:be:14:db:22:52:c5:e5:
                    b3:e6:10:53:4f:78:0d:e2:d3:b9:02:00:29:a5:86:
                    d7:aa:33:c1:76:8b:4d:c8:56:47:38:b9:e9:ba:44:
                    2c:82:0d:51:1c:fe:80:27:04:a7:09:c7:d3:d9:b4:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6A:6E:28:1F:ED:FE:D8:EE:5A:79:08:64:9D:A8:8C:66:DF:7D:3C
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:53::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:d5:a0:db:85:2d:e4:93:02:c5:5e:5e:8d:c0:7c:d6:8a:7a:
         fb:30:16:8f:a2:1c:fd:99:0b:e4:c1:4e:40:72:dc:33:c4:e5:
         22:7b:62:7b:6b:31:c6:13:7f:77:31:f2:a6:79:0f:1f:06:28:
         e9:b3:0c:2b:7a:79:2b:4f:cb:56:a4:bd:3f:69:10:0e:4d:af:
         54:4e:68:94:af:9b:63:5e:29:bd:88:d9:1c:a4:f4:e6:82:bc:
         13:bf:2a:58:c3:2e:05:29:8b:73:c0:2a:0b:cc:8c:c0:4e:d3:
         b6:f7:ba:62:e1:24:21:78:91:4f:c9:38:1a:4b:37:e1:ca:fb:
         e2:63:16:fe:d0:86:2f:d0:08:8f:3f:56:52:8b:14:dd:01:f8:
         a9:b6:94:d3:41:a4:4a:ae:ce:47:76:a9:8f:4d:ea:68:22:ba:
         75:0e:cd:61:f1:66:af:8b:ee:52:6c:c0:21:1c:56:d1:19:2e:
         d3:01:01:12:f4:d8:cc:fa:cc:9e:3a:4b:d5:81:9c:3c:d1:09:
         7e:c7:bf:dc:83:1e:28:c9:59:ba:64:4b:ac:17:5b:00:0a:dc:
         47:53:31:ac:62:ee:62:d1:74:bd:4f:dd:7f:2f:c9:7c:91:7d:
         d0:a1:47:da:02:e2:7c:32:5a:3e:f6:d8:e6:19:ca:57:39:6b:
         22:89:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:11 2026 by rpki-client