Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa
File:                     323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (raw, json)
Hash identifier:          adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=
Subject key identifier:   24:A8:7E:B7:B0:B9:BA:7C:79:8A:F6:10:5D:70:E0:59:BB:7A:87:8D
Certificate issuer:       /CN=872439399C3ADEB5FD342E7B6286CED219899CA2
Certificate serial:       32C1D6EFB41DF8D0DF59897B78D8E913C426C0E2
Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa
Signing time:             Sun 03 May 2026 02:31:54 +0000
ROA not before:           Sun 03 May 2026 02:26:54 +0000
ROA not after:            Sun 02 May 2027 02:31:54 +0000
asID:                     141078
IP address blocks:        2406:7ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl
                          rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c1:d6:ef:b4:1d:f8:d0:df:59:89:7b:78:d8:e9:13:c4:26:c0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2
        Validity
            Not Before: May  3 02:26:54 2026 GMT
            Not After : May  2 02:31:54 2027 GMT
        Subject: CN=24A87EB7B0B9BA7C798AF6105D70E059BB7A878D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:c8:4b:34:34:6c:ae:0a:cb:f9:3e:72:fa:
                    a4:1f:7d:22:a9:63:9a:a2:8b:02:60:4c:8c:10:3b:
                    50:8b:73:00:84:c7:63:2a:f2:06:ff:b0:6b:c2:14:
                    1d:d3:5f:01:7f:1c:93:a3:e4:41:a8:69:dd:94:cb:
                    8b:d4:a1:0f:0f:2b:c8:e4:2b:27:96:7f:55:a0:2f:
                    13:64:d9:a6:36:b7:f7:fd:9a:1d:de:b4:f1:e9:69:
                    3c:a8:fc:6d:25:44:83:c1:f6:7d:c6:1d:ad:99:81:
                    83:44:fd:7e:c0:e5:94:21:e6:a3:c7:3a:63:ac:dd:
                    3e:6f:17:26:8e:d2:1f:50:f3:c3:66:b8:57:5a:43:
                    da:7f:b0:7e:32:ef:a8:70:20:c8:1b:44:34:bf:f8:
                    0c:8a:ed:d9:0b:e0:a2:be:f0:26:1f:78:33:47:94:
                    1c:86:8a:91:bb:e4:7d:11:b4:7c:54:80:bc:65:6f:
                    3b:71:ca:f2:7f:6d:ad:b9:7a:52:85:0e:13:5b:a8:
                    c6:39:af:9f:57:c1:4a:13:78:25:54:ee:33:d4:20:
                    d6:20:92:4b:67:a0:1e:ab:f6:9b:65:b9:06:9f:ae:
                    f4:b4:4a:87:4e:4d:e4:50:31:93:dd:05:b2:4c:95:
                    e4:d0:02:e1:12:73:a1:53:45:2a:72:95:df:58:03:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A8:7E:B7:B0:B9:BA:7C:79:8A:F6:10:5D:70:E0:59:BB:7A:87:8D
            X509v3 Authority Key Identifier:
                keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:6f:d6:e2:9f:9f:59:0e:a9:0c:e2:06:5f:16:0f:eb:0b:
         73:4e:a0:f4:55:dd:43:2f:d3:cf:b4:e6:e9:78:b5:6b:4e:cf:
         46:fd:5f:67:75:04:a9:ca:dd:1e:c6:a1:24:9e:e1:b8:4f:11:
         ab:bc:b8:95:2c:a6:8f:8e:36:6e:1e:cc:c5:ed:0e:3b:46:26:
         c4:31:09:87:c2:93:0f:e0:64:c2:a1:fe:9a:9e:d6:34:0b:50:
         a0:69:69:92:e6:2c:14:82:25:17:3a:d4:1f:ff:ae:29:c8:5c:
         8a:7c:33:54:a1:bf:a0:30:5f:2d:9b:e9:e1:66:b5:80:34:9a:
         05:f4:22:e2:8e:08:bf:4a:c8:1b:88:4c:cc:9d:e4:9d:26:89:
         80:b2:5e:f7:32:a1:1e:42:c5:e6:06:51:3c:3f:16:95:a4:5b:
         ae:fa:75:cf:91:65:c0:7f:01:20:88:50:e2:46:39:a7:72:36:
         a3:39:d3:e6:49:a9:56:dc:7f:4c:3d:e1:9c:1e:6c:f7:b1:a6:
         d9:98:76:05:04:3a:79:92:b1:7e:52:be:ee:7b:d8:26:ce:6a:
         14:57:ea:4e:55:a1:ed:6e:fc:30:02:d3:cf:8e:a8:fa:cc:d9:
         f1:5b:bc:35:cf:16:99:76:d1:2f:b7:e1:ac:5c:27:06:f3:e8:
         bb:ce:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:40:54 2026 by rpki-client