Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          8VZ6yOrpPP8qj0ebl3Xe0ocJwI+ajmU1uSDgJG8H+0U=
Subject key identifier:   5D:41:05:29:C7:F2:5E:C2:DD:87:4A:BC:24:F0:A3:62:32:F3:72:A2
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       5919D9B5C1C93CBC548DD076400937CDB9C3A4BB
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:14 +0000
ROA not before:           Sun 03 May 2026 02:23:14 +0000
ROA not after:            Sun 02 May 2027 02:28:14 +0000
asID:                     139949
IP address blocks:        2405:aac0:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:19:d9:b5:c1:c9:3c:bc:54:8d:d0:76:40:09:37:cd:b9:c3:a4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:14 2026 GMT
            Not After : May  2 02:28:14 2027 GMT
        Subject: CN=5D410529C7F25EC2DD874ABC24F0A36232F372A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:a7:6f:e3:23:da:7a:17:ac:02:fb:2f:39:
                    cd:08:8a:a5:b7:c4:50:ca:a6:77:ea:7f:2d:81:9a:
                    c4:19:62:d8:3f:66:4d:6b:1f:05:95:5b:b0:4f:a3:
                    56:10:c5:52:2f:a1:72:ee:2f:7b:2b:6c:c6:f3:ec:
                    e3:3a:6c:57:d1:da:22:e1:c2:4d:55:86:62:7c:29:
                    a9:1b:6a:38:e4:b5:e0:26:30:f9:b9:96:a9:a9:6c:
                    2a:92:ca:57:fd:b0:d6:84:cf:ea:bc:db:06:de:20:
                    b9:40:be:a2:5e:9e:e9:c0:17:62:d1:3c:93:94:76:
                    1f:3c:40:63:2e:5f:bd:7b:39:0e:cf:1c:82:ac:8e:
                    92:42:52:dd:c0:a1:57:f3:90:f3:01:e8:9f:d8:46:
                    b2:dd:a7:b6:25:bc:a5:00:e8:2a:b8:0f:91:57:1f:
                    f3:b3:ac:42:2f:9e:54:f9:ff:cf:05:8a:fe:22:d2:
                    92:5c:34:25:62:d7:5a:ac:90:e3:e3:51:f3:4f:9b:
                    e0:af:a2:b2:42:02:52:a4:02:9e:ae:90:93:3f:f9:
                    dc:53:69:32:c1:20:fa:7f:b4:bf:73:1e:1b:94:3d:
                    27:2a:f2:5a:32:54:fc:f0:e4:d8:91:79:ba:86:61:
                    2f:fd:09:57:dc:ba:e6:df:f8:df:25:47:bf:53:d3:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:41:05:29:C7:F2:5E:C2:DD:87:4A:BC:24:F0:A3:62:32:F3:72:A2
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:b6:3d:cb:61:55:cf:05:16:88:19:1a:b7:07:27:1d:ba:2d:
         49:47:3f:10:8e:00:fb:8c:84:52:9a:cd:b2:fb:d4:0e:0f:84:
         59:49:9b:19:76:79:dc:63:1e:f4:95:36:b2:98:f4:5a:df:c0:
         05:d5:3f:1a:db:8c:b1:c3:88:9e:21:aa:ed:05:b3:61:54:15:
         50:8a:1b:18:5a:da:e9:60:f7:21:11:18:23:9a:9e:6c:b1:d4:
         44:04:b1:e1:7b:31:a7:5c:84:a1:14:5d:26:b8:81:df:38:73:
         6b:bd:1e:6a:bb:27:f6:ab:4d:40:17:a0:ac:6c:c2:fa:a9:35:
         fe:0e:8e:9e:31:aa:3f:f8:35:ca:b1:2e:fe:7c:c5:2f:57:2a:
         6b:a9:18:d4:e0:80:b6:df:33:2b:28:55:73:2d:d7:fe:3d:75:
         41:83:2b:aa:24:a7:33:3a:92:54:8a:b8:ae:e2:ce:41:88:b8:
         ec:91:9d:07:fc:89:bb:22:bd:03:52:b3:1d:95:ee:9e:b1:14:
         e7:34:96:34:08:96:01:d4:21:a1:bf:52:bb:41:18:82:d3:03:
         33:a5:8f:6c:2e:07:13:41:36:1d:a5:33:30:74:46:29:08:12:
         95:e9:4b:96:f1:9f:29:6a:d5:ea:0a:3d:c6:b3:73:67:3b:e7:
         99:45:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:16 2026 by rpki-client