Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          prQ0STU300ws+20gWkOKVn47VB6KOKFl9q8JOYL+sAI=
Subject key identifier:   79:09:26:C1:89:60:62:16:42:C8:F8:00:F7:D1:B6:10:7C:E3:9F:9E
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       1C62FE3EBCC8277303F2ED296247A280903F1EF3
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:17 +0000
ROA not before:           Sun 03 May 2026 02:23:17 +0000
ROA not after:            Sun 02 May 2027 02:28:17 +0000
asID:                     139949
IP address blocks:        2405:aac0:54::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:62:fe:3e:bc:c8:27:73:03:f2:ed:29:62:47:a2:80:90:3f:1e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:17 2026 GMT
            Not After : May  2 02:28:17 2027 GMT
        Subject: CN=790926C18960621642C8F800F7D1B6107CE39F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:47:0e:a8:9a:b7:74:26:77:2c:3c:bc:5b:
                    3b:6a:2d:82:b0:89:1f:1c:c3:86:9f:46:fa:52:88:
                    c6:7f:75:b4:7b:60:22:04:6c:f5:97:1d:b2:e4:38:
                    09:9a:a2:cd:9e:7c:b1:6f:fc:5c:8e:89:6e:bb:15:
                    70:6a:79:e6:3c:1c:29:f8:ea:ee:ee:22:d6:5d:d5:
                    95:86:68:70:c9:9e:45:91:9e:63:c5:ad:61:cf:b6:
                    9e:5c:25:f8:ff:a8:df:fc:c5:cd:97:7d:07:60:9c:
                    af:2c:7d:0c:c7:6a:a3:da:fa:4c:3f:f1:5a:a9:f8:
                    a7:37:99:df:35:38:70:8e:db:8c:e5:9b:c4:85:5f:
                    1d:39:11:be:6e:8c:05:0e:ea:81:9d:34:23:64:46:
                    f4:71:16:a2:d9:24:0d:f9:47:7e:92:d5:12:5c:9f:
                    87:ce:c4:30:49:70:ea:4e:c0:ed:9e:14:85:fe:27:
                    f4:81:ef:37:e6:9e:19:ef:15:db:1f:54:fa:06:c1:
                    a6:8a:b3:e4:72:6f:33:90:da:70:33:30:a6:24:cd:
                    37:4c:b8:77:65:d8:34:53:c8:d4:89:3c:4a:ef:40:
                    f5:93:c7:2f:9c:2d:6b:b4:06:9e:1d:1b:5c:46:46:
                    f7:bd:60:55:2f:b6:aa:e8:82:29:fa:88:f8:eb:a3:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:09:26:C1:89:60:62:16:42:C8:F8:00:F7:D1:B6:10:7C:E3:9F:9E
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:54::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:ee:13:61:1f:a8:9a:06:a7:7a:d9:6a:da:22:7f:ea:b2:
         80:e4:cc:88:ba:b9:76:46:46:8f:ec:4d:a4:64:8a:31:41:16:
         38:1c:3e:ec:91:3d:fd:4d:1c:92:b7:b3:dd:ca:5f:43:84:56:
         2f:f1:43:8e:81:9e:d7:42:0a:2b:92:7f:cf:78:77:9b:c0:bd:
         e9:b5:2c:e8:9b:cf:9c:a2:28:92:76:6f:15:20:85:d8:28:0d:
         e2:6f:fb:04:db:84:6e:4e:9d:39:33:1c:fa:d6:e7:ca:c7:5e:
         7a:18:25:ab:06:d6:f1:17:af:72:13:52:8a:f9:df:8e:da:b7:
         61:b7:ff:7a:d3:26:71:31:6c:32:2e:99:df:96:ab:df:80:91:
         1c:a5:13:8f:8e:bd:0f:41:dc:aa:3a:bc:0c:44:76:e3:0c:e1:
         24:8a:28:60:40:b3:96:8d:c7:e3:07:5d:40:91:a4:d2:0c:56:
         e3:12:ba:f8:3f:26:eb:2c:d4:5e:a5:34:69:e1:2e:9b:ed:df:
         6c:53:dd:f9:bb:f5:a2:7b:0a:b3:b1:e9:e3:8d:e9:b3:4c:c6:
         5c:db:59:b3:79:2c:6c:04:88:4b:78:e1:0c:5e:c1:f3:c8:30:
         bb:d7:c7:d1:12:61:25:31:5e:0b:57:d1:ef:cc:79:13:a2:ee:
         22:29:48:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:47 2026 by rpki-client