Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/323430363a373534303a3a2f33322d3332203d3e20313431303637.roa
File:                     323430363a373534303a3a2f33322d3332203d3e20313431303637.roa (raw, json)
Hash identifier:          FYauunKANl/uJOdMm9h5JGBN5ujukRIc+0gZpC60p2I=
Subject key identifier:   2B:FA:AB:8B:D4:A6:3E:97:8D:13:49:26:90:5F:F9:FF:3B:1B:9B:AA
Certificate issuer:       /CN=7835F7081DDA4FE045A4471EB06CBB09259803A0
Certificate serial:       32CE3E15C5DEF0DB5EE74F4A7E254C8A1A75DF26
Authority key identifier: 78:35:F7:08:1D:DA:4F:E0:45:A4:47:1E:B0:6C:BB:09:25:98:03:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7835F7081DDA4FE045A4471EB06CBB09259803A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/323430363a373534303a3a2f33322d3332203d3e20313431303637.roa
Signing time:             Sun 03 May 2026 02:31:25 +0000
ROA not before:           Sun 03 May 2026 02:26:25 +0000
ROA not after:            Sun 02 May 2027 02:31:25 +0000
asID:                     141067
IP address blocks:        2406:7540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/7835F7081DDA4FE045A4471EB06CBB09259803A0.crl
                          rsync://rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/7835F7081DDA4FE045A4471EB06CBB09259803A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7835F7081DDA4FE045A4471EB06CBB09259803A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ce:3e:15:c5:de:f0:db:5e:e7:4f:4a:7e:25:4c:8a:1a:75:df:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7835F7081DDA4FE045A4471EB06CBB09259803A0
        Validity
            Not Before: May  3 02:26:25 2026 GMT
            Not After : May  2 02:31:25 2027 GMT
        Subject: CN=2BFAAB8BD4A63E978D134926905FF9FF3B1B9BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:e4:1a:ef:01:48:a3:a6:d2:ac:14:16:7b:
                    b3:88:87:dd:2c:f2:60:37:b7:75:d8:5d:7f:39:83:
                    60:a3:20:43:34:ea:d6:52:65:db:3b:50:0f:95:79:
                    57:3b:25:47:70:11:fc:b7:fb:d1:ec:bb:69:b0:dc:
                    ca:42:40:f6:54:dc:e5:8a:92:95:5a:47:62:06:0f:
                    82:09:6c:da:29:2d:39:f1:de:37:45:7d:b2:ae:a1:
                    2c:56:91:03:f4:26:e4:72:ed:70:5e:36:5b:09:e5:
                    66:4a:24:bd:ac:0b:99:83:9d:a3:30:81:fd:27:07:
                    5c:41:c3:66:ec:da:e4:e4:a3:80:df:a3:9c:de:dd:
                    1b:f6:43:07:31:45:68:dc:08:1c:0f:24:58:d8:e2:
                    fb:d0:f3:9a:72:8c:9b:35:ae:e5:b8:fe:3e:1b:5b:
                    a8:ba:20:d8:53:92:ad:d0:3f:da:49:e8:2d:eb:c2:
                    2f:fa:e3:83:00:15:1e:fc:19:b1:c9:1e:62:db:75:
                    1f:ee:73:57:43:54:8b:4b:15:e6:1f:6b:9a:e6:63:
                    77:33:73:99:ce:53:a9:08:94:07:d2:64:c0:fd:f2:
                    68:04:99:16:c2:c7:0b:1c:01:b8:80:3f:4d:0a:8f:
                    9f:ab:18:59:cc:69:61:63:2c:b7:43:a4:ae:81:68:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FA:AB:8B:D4:A6:3E:97:8D:13:49:26:90:5F:F9:FF:3B:1B:9B:AA
            X509v3 Authority Key Identifier:
                keyid:78:35:F7:08:1D:DA:4F:E0:45:A4:47:1E:B0:6C:BB:09:25:98:03:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/7835F7081DDA4FE045A4471EB06CBB09259803A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7835F7081DDA4FE045A4471EB06CBB09259803A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/323430363a373534303a3a2f33322d3332203d3e20313431303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7540::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:63:f7:92:6d:bd:3d:2a:b8:bd:c7:70:b2:5e:3f:b4:22:65:
         a6:ff:bf:89:37:fe:ab:e2:c3:d3:01:51:36:20:50:ce:d7:d4:
         de:00:3e:ea:ce:99:4b:bf:42:0a:bc:ad:b5:3a:2f:16:4b:58:
         58:06:d8:e9:b9:20:d3:1d:cc:b9:82:3e:59:12:51:9f:e9:18:
         28:7e:cc:cf:63:46:a2:6a:eb:6c:5d:6b:32:ed:b9:3b:ce:16:
         86:d4:38:74:ac:49:68:f5:43:84:1a:f7:6c:12:c5:44:0c:97:
         9f:3f:8f:cb:e5:d3:d5:dc:ad:c1:ee:ca:49:2a:d2:c7:d1:70:
         e9:14:e0:06:d3:0b:8a:96:f3:3a:0d:05:73:17:1a:5b:98:ff:
         69:76:50:c6:26:f4:c1:fc:2e:a0:75:b6:94:b8:1d:d7:39:97:
         fc:33:da:25:99:1d:d8:f2:be:17:3f:a6:12:5c:18:77:d4:7d:
         ef:17:f5:5e:3d:68:cf:d8:e2:77:39:2e:70:58:55:de:85:91:
         15:94:6a:e5:18:c1:3f:90:94:d0:0a:84:2c:5d:b8:72:0f:83:
         7c:9e:c5:11:e8:f3:d7:1f:c5:a2:f5:41:15:76:a7:c5:8e:94:
         5d:59:47:8f:c8:38:df:fc:60:ae:da:c8:fb:df:32:09:a7:e7:
         5c:86:bf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:32 2026 by rpki-client