Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          Tqgt3drK7GXDeIa386l7SvcEvHjLdUOZAMzwjcI/FPU=
Subject key identifier:   3A:9A:E1:6B:62:94:97:64:5E:A6:37:04:98:EF:B2:9F:3F:8A:0E:91
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       33C82CDF1DE3B5A47712E93B147447F775316315
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:18 +0000
ROA not before:           Sun 03 May 2026 02:23:18 +0000
ROA not after:            Sun 02 May 2027 02:28:18 +0000
asID:                     139949
IP address blocks:        2405:aac0:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c8:2c:df:1d:e3:b5:a4:77:12:e9:3b:14:74:47:f7:75:31:63:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:18 2026 GMT
            Not After : May  2 02:28:18 2027 GMT
        Subject: CN=3A9AE16B629497645EA6370498EFB29F3F8A0E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:26:62:38:49:00:89:9c:cd:3d:30:2c:59:40:
                    0d:56:b7:82:85:9b:ad:ef:61:ca:c5:6b:d2:7f:fe:
                    c8:70:38:55:a1:ca:a5:cc:df:7b:f3:96:be:9a:48:
                    04:ef:7e:a7:39:55:16:c8:70:34:fb:9c:b5:ef:e6:
                    16:a9:bf:44:1c:e9:31:83:f5:89:f5:c2:fd:26:4c:
                    09:e5:ac:ac:ac:09:4c:f2:78:c6:56:a6:ff:7d:60:
                    e6:c7:76:9f:3e:10:41:3e:b1:b5:af:ef:d0:24:1c:
                    ef:5c:e1:fa:14:f9:c0:35:cd:df:d1:39:7a:a2:3c:
                    70:f6:d1:12:8c:7f:31:8f:67:7e:57:07:88:83:32:
                    b8:4a:45:69:2a:71:a6:7f:26:d9:09:1d:cc:cd:11:
                    4e:78:b2:a8:47:79:11:8f:6a:7f:40:dc:de:ee:1e:
                    c4:2a:e2:57:6e:bd:2f:44:76:80:93:ad:cf:74:85:
                    ff:76:53:39:7e:38:ed:56:a0:49:3e:70:42:15:1a:
                    3a:ea:4d:a1:26:a9:b0:67:10:21:96:65:7b:af:2e:
                    04:dd:da:22:c9:29:6b:45:5b:b9:0c:84:51:b8:d3:
                    fe:2c:da:15:46:9d:d8:23:be:c9:c6:df:0d:74:d4:
                    7c:7a:f3:77:bf:35:19:b3:96:0f:a3:b4:44:d4:bd:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9A:E1:6B:62:94:97:64:5E:A6:37:04:98:EF:B2:9F:3F:8A:0E:91
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:53:8f:8d:84:d7:f8:4a:8b:f8:b1:9a:49:54:01:61:4b:
         fa:a8:70:a2:f6:6b:8d:48:fe:39:53:aa:ac:b7:95:72:ac:3c:
         8e:9b:8b:5f:c6:e8:3d:d5:f2:21:ac:85:a7:04:4c:cd:a8:d0:
         01:1e:ad:e0:92:bd:5c:08:99:62:f2:b3:7e:2d:80:c2:fe:db:
         0b:68:79:7a:e9:4a:e9:58:76:9b:5e:c6:a5:98:c6:ff:9b:3f:
         3e:e7:a3:24:aa:59:87:d7:26:ce:38:fa:97:cf:4b:26:0c:9f:
         17:7c:8c:f1:95:ab:13:61:64:cf:23:72:f6:99:c6:0c:68:6c:
         26:cd:c5:5f:a4:29:0a:66:81:a4:01:0c:cd:08:0e:d6:d5:88:
         c4:5d:84:3f:2c:32:eb:36:5e:e3:f9:d7:c3:e9:19:5d:f2:90:
         97:a3:ff:4e:3b:27:ad:35:3a:19:b3:68:7e:eb:c1:12:86:bc:
         c0:6d:d5:cd:99:5e:2c:a5:61:8f:79:95:89:66:59:da:46:2e:
         87:7a:9e:f9:0f:9c:78:6f:e9:f7:40:52:b2:8b:c4:77:36:98:
         af:98:a1:88:3a:0c:57:f4:de:b9:d9:94:7d:26:7b:dd:c0:0e:
         5a:6b:c5:b6:1d:28:a7:92:95:91:86:93:56:d6:89:f8:27:44:
         f6:1e:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:47 2026 by rpki-client