Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa
File:                     323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa (raw, json)
Hash identifier:          frK8PZbh3KFjoO/nYY+Eo/5swXQNC1Cp6kW9KPTWIaE=
Subject key identifier:   C1:6E:58:5D:B5:BC:72:69:7D:F8:2A:46:62:8D:7F:DB:63:CA:92:08
Certificate issuer:       /CN=330092B238160780852731102A871D6304465F70
Certificate serial:       1725C9AFB3BCB2ECDFDC68AFD7C2D1BD5FCB2A82
Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa
Signing time:             Sun 03 May 2026 02:28:24 +0000
ROA not before:           Sun 03 May 2026 02:23:24 +0000
ROA not after:            Sun 02 May 2027 02:28:24 +0000
asID:                     141056
IP address blocks:        2406:6d40:eaea::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl
                          rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:25:c9:af:b3:bc:b2:ec:df:dc:68:af:d7:c2:d1:bd:5f:cb:2a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330092B238160780852731102A871D6304465F70
        Validity
            Not Before: May  3 02:23:24 2026 GMT
            Not After : May  2 02:28:24 2027 GMT
        Subject: CN=C16E585DB5BC72697DF82A46628D7FDB63CA9208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c0:d5:f8:4c:5d:53:d2:25:e1:01:63:2e:bf:
                    f1:d6:ab:c6:61:38:b6:55:66:2d:1f:73:32:a9:85:
                    ff:c7:57:d2:58:25:a4:09:78:81:2d:8e:63:fb:16:
                    c7:ff:ff:45:63:00:70:24:54:02:c2:57:be:1c:3c:
                    99:ed:c9:df:79:af:e0:12:a0:a8:b8:ce:7d:b9:67:
                    7c:11:c9:43:ae:1b:76:a3:cd:64:0c:09:e9:36:ca:
                    8b:a2:60:3d:ce:d1:8a:8d:17:da:ef:02:5e:d3:81:
                    a6:a7:d6:80:08:b6:b9:c0:16:28:1a:30:a4:3d:20:
                    0a:97:34:3e:4f:55:5c:ad:99:d9:1c:a3:16:b3:19:
                    2c:d0:36:7c:07:00:a9:cc:76:86:7d:f9:36:c6:c0:
                    56:7a:96:db:3b:62:93:57:b3:5f:74:7c:d6:b5:4b:
                    e8:60:93:15:78:e9:a6:b5:22:36:5e:e8:e6:72:ce:
                    e6:ca:aa:98:33:74:e9:cf:c0:0e:29:be:89:aa:41:
                    7e:58:32:7a:71:98:9a:b4:4f:f5:88:4d:7e:90:a7:
                    85:40:a5:bc:62:b7:82:6c:94:03:0d:64:e4:3b:29:
                    50:a7:ac:7f:5a:8d:41:dd:e1:6d:21:9e:75:6a:68:
                    1f:28:92:70:cd:1f:ab:03:3a:c9:72:47:4f:d7:f1:
                    cf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6E:58:5D:B5:BC:72:69:7D:F8:2A:46:62:8D:7F:DB:63:CA:92:08
            X509v3 Authority Key Identifier:
                keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:6d40:eaea::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:c7:38:c0:a6:f7:b6:f8:ab:bf:a9:05:1f:f4:86:6c:8a:00:
         30:34:a3:ae:91:f8:1c:4e:dd:7f:87:80:d5:1e:ac:c7:31:6f:
         c4:9c:d3:be:ee:52:cc:a6:55:dd:c7:22:f5:a0:ba:ab:3f:be:
         42:ee:a0:72:9d:a2:3c:b1:01:1b:01:69:cc:a0:56:29:f1:42:
         9c:1c:3b:d8:6c:b4:ff:60:85:e9:55:f1:4b:34:b7:65:f5:a0:
         8d:08:a2:f8:a9:98:36:7f:05:be:30:ed:55:92:96:cd:7b:eb:
         e2:70:6f:44:9c:17:cf:b0:93:9b:5f:6d:47:77:a9:7e:65:38:
         d7:dd:6b:cd:3e:18:97:8b:52:3b:f9:66:ee:87:1c:e1:1b:7d:
         3a:72:2a:b9:55:6a:a8:36:c6:a9:73:f5:d9:c4:ee:6b:91:bf:
         8f:2a:89:d7:0f:13:b7:71:42:fd:33:47:20:2f:a1:3b:1d:ae:
         98:70:b0:4c:25:e9:b7:74:14:06:65:30:b6:89:cc:d5:d7:80:
         8e:bc:22:bb:2a:e8:d5:6f:d9:9a:51:b4:85:86:ca:5b:0a:6e:
         89:6b:11:10:cf:d0:b4:49:2a:d1:f9:1f:89:14:cb:93:b7:8d:
         ff:4b:44:d9:4d:5e:76:40:30:b3:0e:c3:d1:9b:e3:7b:e9:4f:
         15:c5:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:24 2026 by rpki-client