Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/323430353a316534303a3a2f34382d3438203d3e203538343735.roa
File:                     323430353a316534303a3a2f34382d3438203d3e203538343735.roa (raw, json)
Hash identifier:          0OL8yRFc3dc/04Uo3qwJLQPh9f57dZz2AXVP9/HkiQ8=
Subject key identifier:   A2:4F:C4:DF:D7:37:B1:47:49:4A:67:21:E9:BA:4A:C5:AF:A1:1F:16
Certificate issuer:       /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Certificate serial:       465F1DBC1A4D24E109C6BFD42FBB9B735F014F5E
Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/323430353a316534303a3a2f34382d3438203d3e203538343735.roa
Signing time:             Sun 03 May 2026 02:30:59 +0000
ROA not before:           Sun 03 May 2026 02:25:59 +0000
ROA not after:            Sun 02 May 2027 02:30:59 +0000
asID:                     58475
IP address blocks:        2405:1e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
                          rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5f:1d:bc:1a:4d:24:e1:09:c6:bf:d4:2f:bb:9b:73:5f:01:4f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
        Validity
            Not Before: May  3 02:25:59 2026 GMT
            Not After : May  2 02:30:59 2027 GMT
        Subject: CN=A24FC4DFD737B147494A6721E9BA4AC5AFA11F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:6e:5b:dc:42:f6:71:41:bb:f4:50:35:fd:
                    9d:b0:fd:ef:a3:f7:b3:4b:ef:8f:dd:36:20:b6:86:
                    ad:9b:87:7e:9b:09:67:09:c6:34:5b:7a:b6:24:a3:
                    b2:03:36:46:b4:cc:c0:a4:42:65:54:bc:1f:74:b1:
                    ab:37:e8:6c:e5:dc:71:f0:31:58:ce:47:1e:1f:36:
                    1b:36:6d:58:7b:cb:a9:f5:e3:34:f4:08:21:38:c2:
                    e0:6f:a1:8c:94:2d:47:32:74:5d:1a:f2:70:a1:79:
                    76:b3:8e:47:62:45:62:3c:7b:7b:f4:4c:36:83:a1:
                    71:8f:48:ee:77:4b:a5:5c:6e:e1:54:10:0a:1c:98:
                    75:5e:e0:32:08:48:dc:0c:ff:f7:22:56:d3:93:a8:
                    db:15:de:97:00:67:b9:84:d8:c9:7d:8a:ac:8c:f9:
                    43:da:15:be:e5:05:ac:d6:e7:7a:b4:9d:d9:16:c7:
                    cb:b2:a7:27:73:b6:cf:22:07:2f:e4:26:03:d8:d9:
                    ea:02:43:b1:cc:1c:23:6e:46:06:04:d6:b8:9e:b0:
                    10:f0:8d:d0:8b:fd:9a:1f:47:19:e3:f6:a8:f5:2a:
                    ee:17:d9:7b:a5:66:f9:a1:78:f8:ae:5e:f3:95:5d:
                    16:42:6e:2c:1c:e3:0e:42:e8:7d:ca:75:85:b9:80:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4F:C4:DF:D7:37:B1:47:49:4A:67:21:E9:BA:4A:C5:AF:A1:1F:16
            X509v3 Authority Key Identifier:
                keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/323430353a316534303a3a2f34382d3438203d3e203538343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:1e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:39:95:56:ab:72:c4:37:7f:e1:e6:9b:74:2b:39:d3:7c:b5:
         b8:16:56:7b:82:2d:ea:8e:0a:5d:e9:fd:1c:82:dc:bd:bf:9f:
         60:64:00:d7:b9:78:7b:eb:80:31:99:52:fc:57:25:71:bd:1c:
         79:c9:74:4a:c9:95:9a:0d:2b:a4:36:49:76:d1:1b:cd:43:ed:
         09:8a:79:ef:b2:0a:4c:56:65:4e:18:33:2f:49:c8:95:72:2b:
         02:82:23:6b:1c:94:3c:5c:6b:d9:64:c2:af:1c:83:e8:5c:02:
         7a:0e:44:20:d2:e7:45:eb:97:45:6d:b1:11:47:60:c8:a7:be:
         5a:6e:1c:d0:46:50:b4:52:2a:2a:29:db:57:33:3e:4e:7d:44:
         47:f0:fc:79:cd:12:95:d3:41:cc:85:0f:9f:2e:bb:70:08:9e:
         c8:44:ec:91:4a:50:8f:c8:c4:76:24:80:47:e4:e6:82:4a:d1:
         7a:2b:b7:d1:7e:a7:87:67:0c:ed:2b:8a:c2:21:4c:dc:eb:7d:
         43:f7:1c:b4:2f:4f:80:8b:c3:75:ad:31:1c:88:dc:ea:3b:19:
         45:59:46:b7:79:80:4a:c3:da:f8:82:c1:9f:21:6d:e6:df:49:
         4a:41:80:12:b1:e1:54:a0:b7:89:90:3b:64:50:ad:d0:00:b3:
         b0:89:3c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:52 2026 by rpki-client