Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/323430353a386530303a3a2f33322d3332203d3e203234323034.roa
File:                     323430353a386530303a3a2f33322d3332203d3e203234323034.roa (raw, json)
Hash identifier:          sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=
Subject key identifier:   C2:7C:80:C1:9D:6F:B1:58:99:AE:FC:22:8D:A2:5A:EA:5F:3C:23:8B
Certificate issuer:       /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial:       6C6F4002328C27074E6760AC81E201F5BC6A5F3B
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/323430353a386530303a3a2f33322d3332203d3e203234323034.roa
Signing time:             Sun 03 May 2026 02:33:08 +0000
ROA not before:           Sun 03 May 2026 02:28:08 +0000
ROA not after:            Sun 02 May 2027 02:33:08 +0000
asID:                     24204
IP address blocks:        2405:8e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
                          rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6f:40:02:32:8c:27:07:4e:67:60:ac:81:e2:01:f5:bc:6a:5f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
        Validity
            Not Before: May  3 02:28:08 2026 GMT
            Not After : May  2 02:33:08 2027 GMT
        Subject: CN=C27C80C19D6FB15899AEFC228DA25AEA5F3C238B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:62:37:9f:98:75:82:b5:70:71:41:01:44:
                    4c:92:61:c5:32:18:ec:ce:ac:db:b8:ea:54:9e:d5:
                    6f:9e:19:02:4e:ee:dc:70:d7:94:3f:70:1c:46:c8:
                    01:2d:c6:de:c1:64:fe:69:28:e8:09:1e:70:f4:22:
                    88:56:60:58:25:59:03:1a:ba:a9:fd:77:0c:24:d3:
                    d2:84:f3:81:38:1c:9b:83:38:88:18:25:3f:cc:6d:
                    c7:e4:98:b0:f3:f1:ec:02:ee:a6:d5:88:cb:cf:47:
                    88:03:59:28:f7:f5:92:da:14:35:dd:fd:eb:29:6a:
                    20:18:ff:8b:01:ce:01:3b:9f:ee:6b:c0:28:17:a2:
                    91:33:d6:f4:d1:ca:2f:60:6d:70:4e:a6:30:e8:31:
                    2b:bc:c8:c9:c3:2c:40:e9:ac:c0:f5:6e:81:29:b8:
                    98:e7:59:76:5b:73:af:3e:e5:72:0f:2f:e5:62:e4:
                    70:06:36:7b:3c:f9:e0:7d:bb:d8:9c:f7:6d:59:8b:
                    25:27:d4:fc:a7:4f:54:5e:a2:0c:4c:3d:c8:77:c6:
                    6a:99:0e:80:50:ed:62:27:ea:96:fa:b6:47:97:6b:
                    9f:e1:9f:71:1a:10:9f:50:cf:ae:c9:2a:e5:32:ca:
                    64:53:63:e0:4c:d5:3c:98:d9:54:fa:dd:8e:b9:66:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:80:C1:9D:6F:B1:58:99:AE:FC:22:8D:A2:5A:EA:5F:3C:23:8B
            X509v3 Authority Key Identifier:
                keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/323430353a386530303a3a2f33322d3332203d3e203234323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:00:54:de:2e:33:93:a7:fb:4d:e1:ce:8d:c8:82:63:5f:e7:
         7c:bf:f2:6e:9d:de:22:12:4f:43:2a:89:1c:49:98:e1:12:d8:
         0f:8a:b1:8d:58:cd:99:c5:dc:0c:09:61:8f:0e:d1:a0:45:f4:
         4e:2d:ec:0e:cc:73:39:2f:16:0e:94:8b:17:95:2c:b3:08:2f:
         f9:92:d0:e4:0d:66:e3:06:df:c8:87:d9:a3:d8:25:c9:fb:dc:
         c6:f5:09:31:29:fd:d4:7e:f2:16:2a:7e:ed:2c:6c:36:a3:ec:
         02:d0:77:cf:61:56:9f:eb:16:c9:e9:3d:e9:2c:fe:5d:b5:4c:
         1e:bb:1b:ce:8d:5d:45:e7:7d:69:d2:7c:7d:8f:be:b6:52:0a:
         7c:0d:54:bd:7a:ee:2a:34:54:1d:b7:93:5f:99:24:bc:7c:82:
         c1:06:6e:e5:d9:06:83:49:6b:08:25:4f:dd:75:49:0c:24:60:
         7b:e9:90:ec:ad:ee:eb:7d:06:7b:e8:d9:95:3d:e0:78:42:d2:
         e7:b5:d1:97:b4:3e:39:46:00:84:ae:f4:a0:a8:1b:be:a7:16:
         04:91:38:28:92:b6:33:35:0e:28:0a:5b:a2:75:ec:19:97:a9:
         e2:06:6c:35:65:d5:6c:96:3b:33:3e:7b:bd:24:23:fd:96:12:
         a8:4a:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:03 2026 by rpki-client