Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa
File:                     323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa (raw, json)
Hash identifier:          HpkVwWqEXIjN3YEAY1A1C8iTWhjH8FC+NyTxqq1d2LI=
Subject key identifier:   72:74:F7:C4:8B:9A:88:14:1C:95:C9:5E:64:9F:11:A1:77:E9:4D:3E
Certificate issuer:       /CN=330092B238160780852731102A871D6304465F70
Certificate serial:       2506F9C5F78EE6449DA2049847221541F38973CF
Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa
Signing time:             Sun 03 May 2026 02:28:23 +0000
ROA not before:           Sun 03 May 2026 02:23:23 +0000
ROA not after:            Sun 02 May 2027 02:28:23 +0000
asID:                     141056
IP address blocks:        2406:6d40:116::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl
                          rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:06:f9:c5:f7:8e:e6:44:9d:a2:04:98:47:22:15:41:f3:89:73:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330092B238160780852731102A871D6304465F70
        Validity
            Not Before: May  3 02:23:23 2026 GMT
            Not After : May  2 02:28:23 2027 GMT
        Subject: CN=7274F7C48B9A88141C95C95E649F11A177E94D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:90:26:4a:cd:58:c2:35:1a:aa:56:6c:d6:
                    42:8a:d7:f1:fc:18:04:ca:2e:71:41:d6:ff:21:15:
                    a2:1e:c6:df:a2:ef:f5:81:36:c8:ed:4a:e3:2d:e2:
                    cb:d5:63:a5:30:4e:b6:56:ff:4f:5c:f8:d2:57:74:
                    9f:9d:5a:e4:17:86:e2:b5:8d:a5:ce:6f:16:06:64:
                    22:50:30:b2:0d:48:ce:80:c0:f6:2c:25:34:27:1a:
                    a9:da:f2:44:af:a5:67:3d:42:9e:92:ca:12:e1:57:
                    db:6f:15:07:4c:91:99:9d:74:05:31:b9:62:3e:39:
                    b3:8a:cc:17:1b:6f:5d:5d:57:37:df:35:c7:19:69:
                    9c:4c:c0:e8:9a:bf:d3:07:d1:59:03:04:6f:53:4c:
                    07:a7:d1:d8:f6:f8:83:d3:d6:42:50:f9:84:06:a3:
                    56:05:d4:e9:6d:a4:3a:09:b9:e4:20:55:7e:22:9a:
                    8f:39:5b:6b:64:ab:31:5b:e7:a6:0f:59:2a:69:a6:
                    15:eb:3b:c2:f7:cc:ff:62:b6:ce:58:22:fa:6c:96:
                    5b:f8:ed:15:9b:f0:c3:56:d5:01:21:9f:49:6b:1a:
                    13:b6:87:23:01:5f:69:e3:4c:bc:04:6c:63:57:38:
                    21:a8:b4:53:3e:ad:93:27:e5:86:a4:f5:4b:f8:9f:
                    3f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:74:F7:C4:8B:9A:88:14:1C:95:C9:5E:64:9F:11:A1:77:E9:4D:3E
            X509v3 Authority Key Identifier:
                keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:6d40:116::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:1c:47:f2:c9:12:49:0b:a2:7e:3f:e7:2c:94:57:a6:46:c8:
         1a:6c:f6:c2:dd:d3:7d:9f:43:51:8a:d5:e5:32:d2:8f:d8:17:
         93:eb:52:ab:cd:81:0d:f2:c6:50:76:2d:db:a0:cb:a3:63:3b:
         19:c2:54:29:51:c1:eb:52:ae:bb:b2:4b:e0:53:cd:88:7f:dc:
         8e:d3:ef:1f:60:0b:70:54:a4:ea:1f:d5:34:52:5e:46:7a:df:
         a4:14:3a:28:9a:96:c0:01:11:34:a0:02:e4:c5:e8:c5:6a:03:
         79:16:62:65:4c:87:0e:40:d3:89:8c:98:36:94:8d:05:51:4d:
         73:17:c5:5e:69:80:d5:9f:11:c4:c2:9b:24:0d:17:84:58:e8:
         92:a5:b6:2c:d2:a5:2f:89:24:94:bc:c7:b1:48:8f:61:35:30:
         8b:5f:a4:a8:76:1c:68:82:61:a9:3a:d9:62:86:b1:96:c4:ab:
         1a:8a:a1:e4:f7:7c:b9:a7:eb:77:23:45:cc:6b:6f:33:81:5d:
         69:c4:87:e5:b0:90:f7:6a:df:e7:22:40:0b:ac:96:ef:a8:8b:
         83:32:85:c0:74:a8:55:d7:8e:45:f1:a6:36:d4:93:3e:01:f3:
         3a:cc:cf:70:0b:43:ac:7b:9f:a1:66:19:20:db:11:8a:30:b0:
         ea:f1:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:22:52 2026 by rpki-client