Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          mABESLLCQ2wB+/DcP8V/6aovf2f/HSwW3vN4LrjbIeI=
Subject key identifier:   43:61:3D:BD:7E:1C:CD:68:E9:0D:2A:F5:1D:41:1B:45:BB:CE:76:4B
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       06851C1FC90F1E8BFDDD1DEC08428B92EFF6EEAB
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:34:11 +0000
ROA not before:           Sun 03 May 2026 02:29:11 +0000
ROA not after:            Sun 02 May 2027 02:34:11 +0000
asID:                     4800
IP address blocks:        2400:8000:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:85:1c:1f:c9:0f:1e:8b:fd:dd:1d:ec:08:42:8b:92:ef:f6:ee:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:11 2026 GMT
            Not After : May  2 02:34:11 2027 GMT
        Subject: CN=43613DBD7E1CCD68E90D2AF51D411B45BBCE764B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:5e:87:a2:a7:91:42:78:88:31:d5:fd:51:
                    4d:9a:73:45:af:c6:12:00:41:88:5d:42:13:72:cb:
                    dc:87:e7:77:c9:36:18:a1:0f:87:3b:80:39:a2:d6:
                    33:c6:fc:6d:17:4a:87:d0:b0:00:1a:b7:e4:ef:18:
                    a3:ce:dc:96:9b:24:26:26:7a:16:f1:a4:8e:c4:3d:
                    92:6e:be:06:26:72:76:38:a0:92:54:c6:c4:13:e4:
                    a1:56:0d:a2:58:4d:43:0a:68:a7:93:5d:90:54:f9:
                    c4:6f:25:2d:73:ac:c7:71:70:43:d7:a3:ff:7a:d0:
                    27:0a:f5:2e:71:8a:4e:61:d5:09:22:8f:57:2d:fe:
                    1e:94:7d:82:be:d9:95:59:ec:d3:88:c8:fd:08:53:
                    b0:c1:a9:65:a8:7c:40:3d:f6:43:b3:a1:58:2b:42:
                    fe:de:c5:b3:9c:26:3e:5a:e8:b2:40:db:57:26:5d:
                    de:a2:c0:f5:29:0b:3e:55:d3:a3:d3:0d:3b:5e:80:
                    c9:0a:4a:92:75:5d:d7:33:29:61:45:9a:9b:f0:a5:
                    90:3c:5b:16:e2:69:ef:dc:32:3a:14:c5:03:5e:40:
                    46:c8:7b:99:72:4f:72:3a:c3:0d:d3:08:34:98:63:
                    37:62:f2:4d:25:96:2f:e9:00:c8:78:fb:37:44:b9:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:61:3D:BD:7E:1C:CD:68:E9:0D:2A:F5:1D:41:1B:45:BB:CE:76:4B
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:e7:e8:53:31:16:7d:89:a1:a3:76:c8:1d:79:aa:a0:1a:e7:
         8c:ba:e8:fe:d2:b3:20:dd:f1:31:56:a2:00:8c:b6:8f:fc:51:
         83:ac:d5:10:a6:e9:e9:4a:6d:91:1a:ed:5a:59:f0:2c:a4:08:
         a6:0d:cc:28:97:2d:49:9d:6e:8d:04:3e:b8:1b:0a:13:4e:ab:
         4e:4f:d1:07:d7:6c:a8:9b:bd:cc:48:42:08:5a:f3:01:da:d6:
         25:b4:b8:b4:79:bd:fa:ba:33:0c:05:9c:e1:e5:eb:97:80:b5:
         28:30:74:ac:cc:91:d3:be:7a:bd:67:88:37:dc:de:bf:df:18:
         e5:46:62:37:d2:cf:83:9d:a6:24:84:fb:5d:6f:67:a9:31:a8:
         3e:1e:88:6f:92:0c:bc:f4:87:c3:30:80:8e:3c:ab:36:74:47:
         19:3c:91:c3:11:fd:42:14:19:2f:65:aa:ca:ca:ab:de:9a:56:
         dc:48:f5:94:1e:30:b0:48:9e:f3:e6:78:0e:6b:0f:d9:08:ab:
         c8:30:a2:c2:3e:3f:cb:b7:a3:8f:b2:ed:f5:0d:f9:35:a8:7d:
         9f:69:e4:99:60:68:94:45:cb:06:44:08:33:3b:92:af:b0:36:
         ca:85:4a:65:4a:3c:17:7c:e6:40:ad:5f:53:7e:ff:4d:ad:9c:
         f6:23:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:03:32 2026 by rpki-client