Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          0+GyLeKkWKJ8TVOfe9fU58eqoMjNvF8Cv7/VNlXdbh4=
Subject key identifier:   B3:09:6D:56:C2:19:FC:32:04:3D:63:AF:54:2B:62:4C:5E:1A:54:84
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       5ADB10ED56BFBA289D81545B55DF5DDA621313D4
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:17 +0000
ROA not before:           Sun 03 May 2026 02:23:17 +0000
ROA not after:            Sun 02 May 2027 02:28:17 +0000
asID:                     139949
IP address blocks:        2405:aac0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:db:10:ed:56:bf:ba:28:9d:81:54:5b:55:df:5d:da:62:13:13:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:17 2026 GMT
            Not After : May  2 02:28:17 2027 GMT
        Subject: CN=B3096D56C219FC32043D63AF542B624C5E1A5484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:14:b4:d5:03:6c:ec:a0:aa:f1:ea:98:e6:dc:
                    0c:3b:c9:b1:54:62:00:92:dd:ef:72:ac:6a:4e:50:
                    b8:4e:19:c6:2f:3e:26:8b:61:cd:bd:2e:7a:59:3d:
                    16:7e:ba:a4:ee:a9:f0:4e:e6:6c:aa:88:00:ea:e0:
                    d0:39:29:56:de:1e:50:87:cf:7f:d3:69:b9:1f:70:
                    c1:70:b7:45:d7:78:21:ef:60:27:0d:c1:f8:ee:3a:
                    b9:1c:2e:e9:d8:f9:47:45:2f:32:e4:58:61:b5:d1:
                    35:84:ea:55:f8:49:9f:1f:46:00:11:e8:e1:e6:99:
                    81:be:34:23:62:34:0b:e0:fe:78:2d:a6:7c:ef:15:
                    f0:d4:f2:73:b7:6c:da:75:35:bb:17:29:ee:04:b1:
                    0a:42:25:2d:cd:1b:ab:76:29:18:57:71:2f:5b:72:
                    26:12:ab:1f:76:2a:49:fa:46:e4:db:75:32:4a:5f:
                    eb:6c:68:d0:17:7e:d3:74:3b:1d:4e:70:29:e6:8f:
                    0d:fc:1f:f5:49:e3:9e:a1:73:72:02:f3:5e:26:c9:
                    68:dc:86:f2:33:38:fb:44:8a:ac:56:31:b0:22:6e:
                    ab:b6:0a:f1:31:87:46:a8:f3:bc:44:f3:24:33:b9:
                    7b:a4:34:12:ae:db:53:07:d8:66:13:72:70:58:4d:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:09:6D:56:C2:19:FC:32:04:3D:63:AF:54:2B:62:4C:5E:1A:54:84
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:f7:65:70:68:62:26:c5:69:f4:49:b8:6f:43:63:20:08:
         cf:96:23:49:96:be:7c:0f:db:70:b2:8e:8a:36:08:bc:91:d2:
         6e:d2:91:87:df:70:42:e4:c2:57:6d:37:3f:9f:e1:be:a3:f7:
         8c:d1:db:c3:92:40:f0:c8:1d:41:bd:ef:a1:15:b8:e3:f4:7c:
         85:02:64:1d:71:d5:7b:7a:34:59:47:05:37:80:de:fe:94:ef:
         35:96:18:97:61:14:e8:c8:52:93:2e:d6:b5:2f:e3:e1:99:31:
         7a:60:0e:68:f9:8b:61:2b:a2:92:96:90:e4:5f:df:d8:f9:50:
         0e:ca:75:24:8d:c7:be:b4:a2:ae:34:99:15:e0:9d:b6:22:91:
         5a:06:ed:f4:41:81:6e:63:ca:55:8a:64:bc:c1:2b:5d:a5:6e:
         72:99:7e:51:51:2a:15:6c:c0:bd:0c:d6:18:be:70:a4:89:78:
         59:be:d7:70:e1:43:8e:e4:5f:61:71:99:96:a6:23:7b:86:8d:
         d9:16:7d:95:10:ca:b7:b5:6c:4e:02:19:7e:35:54:16:5a:9d:
         1e:da:e9:e6:1f:7e:91:f3:2d:b6:3e:a8:29:e3:e9:de:78:ca:
         f1:0c:e3:98:c5:95:d3:de:f5:eb:af:03:67:79:f8:9e:b5:3d:
         fe:69:db:c1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUWtsQ7Va/uiidgVRbVd9d2mITE9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2NjYxQUFBREUyQzYw
MUQwNjRGMDAeFw0yNjA1MDMwMjIzMTdaFw0yNzA1MDIwMjI4MTdaMDMxMTAvBgNV
BAMTKEIzMDk2RDU2QzIxOUZDMzIwNDNENjNBRjU0MkI2MjRDNUUxQTU0ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpFLTVA2zsoKrx6pjm3Aw7ybFU
YgCS3e9yrGpOULhOGcYvPiaLYc29LnpZPRZ+uqTuqfBO5myqiADq4NA5KVbeHlCH
z3/TabkfcMFwt0XXeCHvYCcNwfjuOrkcLunY+UdFLzLkWGG10TWE6lX4SZ8fRgAR
6OHmmYG+NCNiNAvg/ngtpnzvFfDU8nO3bNp1NbsXKe4EsQpCJS3NG6t2KRhXcS9b
ciYSqx92Kkn6RuTbdTJKX+tsaNAXftN0Ox1OcCnmjw38H/VJ456hc3IC814myWjc
hvIzOPtEiqxWMbAibqu2CvExh0ao87xE8yQzuXukNBKu21MH2GYTcnBYTUPxAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUswltVsIZ/DIEPWOvVCtiTF4aVIQwHwYDVR0j
BBgwFoAUCgJEYv/afibl02Zhqq3ixgHQZPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2RlZGMwMzMtY2Q0ZC00NjIwLTkzNzItZTZlMDM5ZmMwNmI5LzAvMEEwMjQ0NjJG
RkRBN0UyNkU1RDM2NjYxQUFBREUyQzYwMUQwNjRGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTAyNDQ2MkZGREE3RTI2RTVEMzY2NjFBQUFERTJDNjAxRDA2
NEYwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05
MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzczYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBarAAAcw
DQYJKoZIhvcNAQELBQADggEBAARL92VwaGImxWn0SbhvQ2MgCM+WI0mWvnwP23Cy
joo2CLyR0m7SkYffcELkwldtNz+f4b6j94zR28OSQPDIHUG976EVuOP0fIUCZB1x
1Xt6NFlHBTeA3v6U7zWWGJdhFOjIUpMu1rUv4+GZMXpgDmj5i2EropKWkORf39j5
UA7KdSSNx760oq40mRXgnbYikVoG7fRBgW5jylWKZLzBK12lbnKZflFRKhVswL0M
1hi+cKSJeFm+13DhQ47kX2FxmZamI3uGjdkWfZUQyre1bE4CGX41VBZanR7a6eYf
fpHzLbY+qCnj6d54yvEM45jFldPe9euvA2d5+J61Pf5p28E=
-----END CERTIFICATE-----
Generated at Wed May 13 05:47:52 2026 by rpki-client