Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/323430303a653332303a3a2f33322d3438203d3e203539313531.roa
File:                     323430303a653332303a3a2f33322d3438203d3e203539313531.roa (raw, json)
Hash identifier:          8FVK2/2gNZC5oxeYl9/JXd0zGR6AZ1yS8I4EVn+PCZM=
Subject key identifier:   A1:8C:B1:72:B9:5F:4B:83:5D:62:D4:D4:3A:CF:61:7C:8E:87:AA:17
Certificate issuer:       /CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910
Certificate serial:       29986F0312EA6173AE4C22897123653FE96BE3D9
Authority key identifier: 1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/323430303a653332303a3a2f33322d3438203d3e203539313531.roa
Signing time:             Sun 03 May 2026 02:30:56 +0000
ROA not before:           Sun 03 May 2026 02:25:56 +0000
ROA not after:            Sun 02 May 2027 02:30:56 +0000
asID:                     59151
IP address blocks:        2400:e320::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl
                          rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:98:6f:03:12:ea:61:73:ae:4c:22:89:71:23:65:3f:e9:6b:e3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910
        Validity
            Not Before: May  3 02:25:56 2026 GMT
            Not After : May  2 02:30:56 2027 GMT
        Subject: CN=A18CB172B95F4B835D62D4D43ACF617C8E87AA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:56:c5:b5:21:c1:0c:a2:9c:20:7a:ef:6a:
                    76:15:1b:c8:56:61:d4:6c:d8:50:84:3a:48:42:13:
                    ef:d6:99:b3:f3:46:e3:9d:e2:0c:b3:7b:2c:5e:19:
                    27:4c:c3:45:94:be:b4:7f:4e:0c:b0:8c:ee:6c:0b:
                    de:13:fc:3a:01:f2:ce:a9:41:00:cf:48:75:1b:ce:
                    69:9d:10:29:44:d2:c5:93:b6:a2:a0:48:75:da:6e:
                    0f:7d:7b:19:ba:b2:98:73:e2:81:e4:b2:fb:ad:08:
                    31:4f:48:de:ec:43:bc:89:eb:0e:92:53:a6:2f:4a:
                    b5:25:0d:15:b0:96:c5:13:e6:fd:c0:c6:b3:13:16:
                    f8:30:d1:14:a7:37:83:c8:9e:33:48:e2:bf:17:78:
                    f3:cf:d5:49:09:e1:b0:20:11:c7:9a:64:96:8c:be:
                    47:bf:26:59:62:0e:6f:3e:4d:04:f0:09:9b:76:aa:
                    2f:fd:d6:ca:23:80:53:cd:a2:98:a1:b5:4f:76:c5:
                    7d:34:f8:ce:44:81:0b:7d:08:56:ff:b9:12:d0:f7:
                    9f:2d:7f:29:9b:ee:ff:4b:c3:8f:d7:c0:4f:83:b3:
                    d1:ed:7a:2e:c6:d1:2a:91:60:c1:ce:c9:14:43:f8:
                    e6:ba:5c:a0:fc:a7:fd:f7:4d:be:19:6d:99:aa:a9:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8C:B1:72:B9:5F:4B:83:5D:62:D4:D4:3A:CF:61:7C:8E:87:AA:17
            X509v3 Authority Key Identifier:
                keyid:1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/323430303a653332303a3a2f33322d3438203d3e203539313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e320::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:6b:db:f8:ca:4e:98:13:5a:9e:00:5e:3b:28:c8:23:da:c7:
         3b:ca:14:3f:b8:44:42:53:d9:a9:6e:88:e1:9c:50:af:0a:2e:
         95:5a:f1:fb:04:a6:3a:c5:9a:b7:d5:7f:a7:88:76:4d:f1:c2:
         2f:83:74:f1:28:68:ca:c2:13:93:82:8b:b1:04:b9:0f:ad:3f:
         47:a7:36:0e:17:3d:4e:ec:d7:9b:49:da:41:2c:f5:c7:62:aa:
         0e:20:69:3b:06:85:ba:4b:c2:3e:dc:23:40:b9:25:21:d9:60:
         47:e7:cd:62:d8:66:99:a5:2c:f9:97:70:c1:98:87:73:0d:15:
         16:a5:ed:f4:8f:76:db:8d:85:44:ec:90:23:84:79:10:bd:ba:
         d6:5a:c4:44:ca:fa:a0:93:dc:6d:b2:31:f4:a9:f9:68:40:a3:
         7b:7f:32:01:48:dd:a4:99:a5:42:9f:b7:f5:9e:29:c9:6b:e1:
         c1:ba:4f:fb:d7:c0:b0:34:7f:9d:02:17:c6:c5:da:c6:4d:b4:
         47:ce:f2:c0:db:d0:2e:58:79:23:ce:57:c5:00:86:fd:31:ea:
         1c:ef:3a:ae:7a:2f:ee:66:74:7e:08:86:4d:e8:fd:0a:d6:de:
         a5:51:4b:d7:65:00:1c:42:1e:96:7d:3b:74:c0:72:f8:c3:c4:
         bb:75:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:46:10 2026 by rpki-client