Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a3a2f33322d3438203d3e203338373638.roa
File:                     323430373a336538303a3a2f33322d3438203d3e203338373638.roa (raw, json)
Hash identifier:          /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=
Subject key identifier:   94:51:EF:03:56:93:A3:AF:D7:BC:2B:21:1B:E1:DD:FA:A3:3E:F9:5F
Certificate issuer:       /CN=2C1233B548C07507C6EF58E2A03DD8309F820753
Certificate serial:       0A73E21B5D73B37886B3029EF6C6F58DFFB10748
Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a3a2f33322d3438203d3e203338373638.roa
Signing time:             Sun 03 May 2026 02:32:57 +0000
ROA not before:           Sun 03 May 2026 02:27:57 +0000
ROA not after:            Sun 02 May 2027 02:32:57 +0000
asID:                     38768
IP address blocks:        2407:3e80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl
                          rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:73:e2:1b:5d:73:b3:78:86:b3:02:9e:f6:c6:f5:8d:ff:b1:07:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753
        Validity
            Not Before: May  3 02:27:57 2026 GMT
            Not After : May  2 02:32:57 2027 GMT
        Subject: CN=9451EF035693A3AFD7BC2B211BE1DDFAA33EF95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:2f:60:00:98:e1:c9:8e:40:68:aa:4d:37:
                    fd:0b:b5:7c:c8:1b:36:0b:68:2c:d7:b6:2b:62:43:
                    9f:a8:7e:26:16:09:b2:2a:cb:f2:57:dc:0a:2c:2f:
                    6d:ca:75:ba:44:9e:64:a9:ab:1a:21:5b:b5:99:c9:
                    ed:e8:c7:fb:28:58:bd:dc:76:87:71:b4:07:c2:34:
                    e0:81:e7:cb:3d:1e:c4:27:2b:21:85:d3:e1:4e:83:
                    43:d0:ef:51:32:2c:19:4a:2e:23:8a:f6:4f:72:fe:
                    73:94:a6:9a:6e:cc:aa:04:21:95:2f:54:02:7a:14:
                    39:18:77:c0:d8:1c:f5:b6:36:a1:ca:35:7b:20:65:
                    6d:b2:72:dd:e3:21:ba:2d:8f:de:1b:5f:23:a2:59:
                    fc:b1:67:85:08:07:e1:52:a7:2e:ee:77:b5:95:99:
                    c5:91:7d:02:01:ef:36:a4:37:11:20:c9:8f:af:f0:
                    13:26:77:ab:20:90:60:1a:cc:e4:06:02:a8:73:9c:
                    d1:e5:16:67:b9:19:5c:e8:c3:47:1e:2c:03:f6:96:
                    41:25:f4:c7:cd:74:66:1b:3f:f4:ae:b0:d8:a2:6a:
                    cc:80:c8:58:5e:dc:96:e7:ab:8e:e7:35:dc:d0:e9:
                    67:2a:8e:6f:0c:f5:87:6e:bf:b8:16:51:74:42:b1:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:51:EF:03:56:93:A3:AF:D7:BC:2B:21:1B:E1:DD:FA:A3:3E:F9:5F
            X509v3 Authority Key Identifier:
                keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a3a2f33322d3438203d3e203338373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:3e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:9e:0f:56:16:94:8b:33:82:c4:be:71:08:4c:7c:4d:da:32:
         0f:bc:fd:8e:0e:4a:41:9a:56:7a:a9:94:76:fc:c1:1d:22:f6:
         a7:4d:60:b8:10:d4:5a:c4:54:29:f9:40:5d:a7:c3:0d:c1:c2:
         5d:a5:21:6e:24:d5:58:cb:1d:a9:f1:19:bf:ea:66:ea:d1:1e:
         36:31:0a:7c:b6:99:e7:df:e2:e4:db:a5:24:63:58:21:2a:e1:
         d3:73:3a:b0:13:de:50:12:47:49:a6:98:9a:7c:19:a3:44:5d:
         ed:bb:df:48:cb:33:cc:35:9c:7b:a4:9f:0d:94:68:ff:38:aa:
         1b:1c:c0:8f:d8:e3:26:5b:c8:df:63:11:0f:36:7a:6b:cb:65:
         11:c4:20:90:cb:02:04:0c:aa:1a:45:0a:5e:8a:1b:c9:72:3c:
         6b:e7:73:70:c0:92:21:17:b7:66:a6:e8:88:53:18:20:82:2b:
         a9:81:f9:eb:f9:e7:8d:ad:cb:3e:80:c1:aa:65:6d:4e:a4:69:
         38:3f:64:58:09:8a:13:97:d9:54:60:04:56:6c:01:7a:d3:db:
         7f:7d:ef:91:3d:86:3b:e5:9f:d3:0f:d3:21:d3:19:35:e7:db:
         e4:5e:8b:af:6b:02:7b:c5:6b:f4:a5:4d:e3:c3:9f:58:3a:62:
         23:8d:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:18 2026 by rpki-client