Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          4PKU8D4LDtx+JijJab3nhgdhfIOpu2XH2Kk8Q5hpOLI=
Subject key identifier:   84:8A:3B:20:5E:A8:A0:E0:DF:D6:34:15:FE:1D:46:3E:CD:53:F7:DB
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       19F2A2395C56037E43099DFEF7D9BF7DDF007F13
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:14 +0000
ROA not before:           Sun 03 May 2026 02:23:14 +0000
ROA not after:            Sun 02 May 2027 02:28:14 +0000
asID:                     139949
IP address blocks:        2405:aac0:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f2:a2:39:5c:56:03:7e:43:09:9d:fe:f7:d9:bf:7d:df:00:7f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:14 2026 GMT
            Not After : May  2 02:28:14 2027 GMT
        Subject: CN=848A3B205EA8A0E0DFD63415FE1D463ECD53F7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:ca:00:80:c4:9c:5d:69:60:2a:8a:24:80:
                    46:7a:a5:05:8f:a2:e0:db:14:58:a0:04:d8:6c:e8:
                    4f:09:58:b7:f1:d6:a5:d5:26:9d:10:e2:c1:76:24:
                    b5:85:e8:66:c7:6e:5c:11:1e:40:19:ab:07:09:23:
                    af:5a:98:a7:07:dc:dc:4b:e8:21:62:06:2a:3e:17:
                    65:5b:81:60:78:4a:f9:b6:07:1b:61:b2:f5:07:47:
                    e8:48:f6:b7:39:68:41:37:da:8e:43:38:8b:b7:55:
                    5e:84:78:58:a6:85:7b:e8:06:e0:62:ab:02:23:ba:
                    be:00:f8:5a:94:02:48:c8:4e:65:b6:35:0e:83:8f:
                    ff:d4:53:73:3e:92:ad:83:2c:70:be:c9:b2:85:37:
                    21:7e:fd:95:20:f4:fb:17:b0:67:20:53:9c:89:75:
                    a4:65:93:98:81:65:ba:5f:78:99:fb:94:6e:9a:bd:
                    8c:28:ea:ff:ac:31:3c:ed:8d:78:a4:61:39:26:2b:
                    4b:92:01:20:a8:0a:a2:97:94:5e:2c:f2:67:c8:f9:
                    0f:da:97:8a:3d:ac:3e:41:51:6c:cd:2c:9c:1c:dd:
                    97:ed:e6:51:57:8c:9f:c0:6c:01:7d:a6:ef:57:e9:
                    be:92:fb:1a:3d:ff:4a:f6:41:b3:92:ca:3f:b5:b3:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8A:3B:20:5E:A8:A0:E0:DF:D6:34:15:FE:1D:46:3E:CD:53:F7:DB
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:69:d2:88:8f:d3:88:cb:c8:0b:f7:41:b7:88:b6:f9:47:83:
         30:07:a9:2b:89:35:73:4b:e5:0f:2c:ec:2b:30:fc:e4:f6:b0:
         2d:62:d1:31:af:76:1f:fa:ba:d0:56:6b:07:d4:45:df:04:72:
         a4:90:22:2d:48:01:f5:66:70:ea:76:75:56:7c:88:be:3f:ac:
         ad:13:3d:43:0e:5b:64:d4:18:20:c5:a1:cb:80:39:c5:73:63:
         96:9e:b3:c4:8e:c2:99:02:53:0e:80:79:73:44:f4:f5:9a:b2:
         2d:3e:15:0f:89:e1:b6:65:5d:79:69:cf:a5:05:05:c1:5a:e1:
         2e:55:91:08:8f:17:71:00:44:e0:0a:98:2a:81:9b:fa:1a:70:
         26:2d:ec:4f:05:d5:02:6d:0f:27:a8:d3:ae:5a:79:5e:66:27:
         99:c1:a1:56:fc:ac:27:f5:88:3d:3f:34:90:97:2b:e6:e7:16:
         6d:d2:6a:3e:86:5a:24:7c:61:94:53:82:69:fa:7c:5d:3b:4f:
         c9:d7:9b:49:4b:1d:3e:aa:12:87:85:29:45:14:49:19:13:3c:
         13:2f:0c:5c:3f:e3:42:e8:35:ae:9f:1d:45:9f:01:b9:95:82:
         aa:51:4c:42:b7:ef:58:ff:65:ef:91:19:3b:f6:a0:e6:bc:bf:
         48:db:64:1c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGfKiOVxWA35DCZ3+99m/fd8AfxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2NjYxQUFBREUyQzYw
MUQwNjRGMDAeFw0yNjA1MDMwMjIzMTRaFw0yNzA1MDIwMjI4MTRaMDMxMTAvBgNV
BAMTKDg0OEEzQjIwNUVBOEEwRTBERkQ2MzQxNUZFMUQ0NjNFQ0Q1M0Y3REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxecoAgMScXWlgKookgEZ6pQWP
ouDbFFigBNhs6E8JWLfx1qXVJp0Q4sF2JLWF6GbHblwRHkAZqwcJI69amKcH3NxL
6CFiBio+F2VbgWB4Svm2BxthsvUHR+hI9rc5aEE32o5DOIu3VV6EeFimhXvoBuBi
qwIjur4A+FqUAkjITmW2NQ6Dj//UU3M+kq2DLHC+ybKFNyF+/ZUg9PsXsGcgU5yJ
daRlk5iBZbpfeJn7lG6avYwo6v+sMTztjXikYTkmK0uSASCoCqKXlF4s8mfI+Q/a
l4o9rD5BUWzNLJwc3Zft5lFXjJ/AbAF9pu9X6b6S+xo9/0r2QbOSyj+1s5HzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhIo7IF6ooODf1jQV/h1GPs1T99swHwYDVR0j
BBgwFoAUCgJEYv/afibl02Zhqq3ixgHQZPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2RlZGMwMzMtY2Q0ZC00NjIwLTkzNzItZTZlMDM5ZmMwNmI5LzAvMEEwMjQ0NjJG
RkRBN0UyNkU1RDM2NjYxQUFBREUyQzYwMUQwNjRGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTAyNDQ2MkZGREE3RTI2RTVEMzY2NjFBQUFERTJDNjAxRDA2
NEYwLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05
MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhNjY2NTNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFqsAA
/jANBgkqhkiG9w0BAQsFAAOCAQEAQ2nSiI/TiMvIC/dBt4i2+UeDMAepK4k1c0vl
DyzsKzD85PawLWLRMa92H/q60FZrB9RF3wRypJAiLUgB9WZw6nZ1VnyIvj+srRM9
Qw5bZNQYIMWhy4A5xXNjlp6zxI7CmQJTDoB5c0T09ZqyLT4VD4nhtmVdeWnPpQUF
wVrhLlWRCI8XcQBE4AqYKoGb+hpwJi3sTwXVAm0PJ6jTrlp5XmYnmcGhVvysJ/WI
PT80kJcr5ucWbdJqPoZaJHxhlFOCafp8XTtPydebSUsdPqoSh4UpRRRJGRM8Ey8M
XD/jQug1rp8dRZ8BuZWCqlFMQrfvWP9l75EZO/ag5ry/SNtkHA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:26:13 2026 by rpki-client