Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa
File:                     323430323a393830303a3a2f33322d3438203d3e203338313538.roa (raw, json)
Hash identifier:          0tx+cabpYUu6XJ6rL5rjIlXh05RHelREXhaPKyivKtE=
Subject key identifier:   4D:B9:9D:22:83:E7:1E:EE:62:00:F6:45:8E:9A:45:E3:D8:71:ED:93
Certificate issuer:       /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Certificate serial:       0E7C8F3BCF86C192B1183080369176DD6275D8E5
Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa
Signing time:             Sun 03 May 2026 02:30:38 +0000
ROA not before:           Sun 03 May 2026 02:25:38 +0000
ROA not after:            Sun 02 May 2027 02:30:38 +0000
asID:                     38158
IP address blocks:        2402:9800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
                          rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7c:8f:3b:cf:86:c1:92:b1:18:30:80:36:91:76:dd:62:75:d8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
        Validity
            Not Before: May  3 02:25:38 2026 GMT
            Not After : May  2 02:30:38 2027 GMT
        Subject: CN=4DB99D2283E71EEE6200F6458E9A45E3D871ED93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:49:7c:47:f3:b4:31:bb:38:f5:de:83:a2:
                    27:19:8e:db:fe:77:cf:79:64:e4:1f:c2:71:7b:90:
                    90:0f:f3:83:e1:6d:01:0c:a6:3e:1f:5d:57:e8:fb:
                    e1:e5:9c:d3:d5:07:d3:a6:a4:4c:34:ba:88:af:b4:
                    c0:fa:f4:22:0b:83:9a:a0:a9:12:6e:a3:1c:6e:09:
                    7a:84:60:22:1b:a9:57:c8:4a:d8:a8:e9:80:cd:23:
                    b5:07:67:8f:b3:cc:aa:e4:8f:b3:9a:2c:83:66:65:
                    0a:ee:0b:c1:2a:e2:26:45:03:a8:bf:fd:02:53:a6:
                    7e:a8:77:6b:54:03:d9:22:7f:58:b2:93:d5:7c:9b:
                    9a:7d:f7:8a:b2:30:c8:3d:3c:bc:31:f2:71:d9:36:
                    b5:fd:2f:8e:82:4e:14:ca:ce:02:95:ff:71:66:21:
                    4d:2a:e7:49:eb:a9:79:6b:d2:0d:8f:30:a4:3a:4b:
                    64:fc:d9:ab:c4:23:90:23:25:0a:f3:e7:8f:8c:49:
                    e4:91:a3:71:87:38:7a:c4:22:84:fe:02:10:2a:e9:
                    91:93:1f:5d:bf:a2:3b:4d:7a:35:b3:e3:e7:01:4d:
                    d8:33:34:f8:eb:04:8f:19:5e:4e:96:6f:35:fb:6b:
                    55:b4:2e:98:a0:bf:c8:76:41:75:a4:7a:03:60:77:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:9D:22:83:E7:1E:EE:62:00:F6:45:8E:9A:45:E3:D8:71:ED:93
            X509v3 Authority Key Identifier:
                keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9800::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:cc:fe:ff:0a:86:fc:ec:18:61:f1:e9:b6:fe:4f:11:61:92:
         0f:c1:0b:9d:29:f8:95:96:18:2e:06:ec:e6:0c:d0:f7:c2:7d:
         13:ed:e6:5c:38:b5:54:76:7a:82:2a:8a:eb:5a:37:a3:07:b2:
         cc:00:3f:ca:84:3d:10:ba:3c:04:d2:ac:e5:aa:f7:e9:69:b1:
         05:ab:3e:8f:00:6c:84:5f:0e:61:e3:69:de:19:05:46:2c:aa:
         05:e9:57:f4:d3:5c:91:9f:cc:14:87:b7:78:56:fa:da:f0:7e:
         c9:9f:71:8a:eb:7a:47:b5:ef:5a:8a:6b:8a:74:77:e7:38:3c:
         41:f0:18:76:d5:2f:23:b0:2a:71:d1:fe:c9:ce:ee:dc:bb:77:
         5e:49:ba:b5:01:6c:81:37:1d:68:c0:cb:cb:11:24:d4:cb:4d:
         0e:fb:7e:40:a1:7a:d6:68:b1:be:2f:b7:63:0d:ff:e4:24:07:
         35:9e:c6:26:38:5f:09:08:81:a3:77:bb:53:e9:48:af:03:e5:
         c0:f3:d3:89:11:df:79:e5:e7:92:d4:71:38:34:92:c5:3e:1e:
         ec:c1:48:c0:09:32:54:d2:62:48:6d:e4:05:d3:68:a0:5f:57:
         b5:df:a4:1a:22:05:26:2e:b3:b8:88:48:19:76:fc:dd:8e:88:
         bd:27:07:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:17 2026 by rpki-client