Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          jOJHetqOXQoWZjUBm4n9O8ywIbKG1mgUVhk6ESWf478=
Subject key identifier:   64:FC:86:04:2F:7F:D6:BF:CA:96:3A:58:95:45:59:53:20:0F:FA:42
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       57897A0764386C85ED8ECE0C93F286F819890A07
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:34:02 +0000
ROA not before:           Sun 03 May 2026 02:29:02 +0000
ROA not after:            Sun 02 May 2027 02:34:02 +0000
asID:                     4800
IP address blocks:        2400:8000:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:89:7a:07:64:38:6c:85:ed:8e:ce:0c:93:f2:86:f8:19:89:0a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:02 2026 GMT
            Not After : May  2 02:34:02 2027 GMT
        Subject: CN=64FC86042F7FD6BFCA963A5895455953200FFA42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:1e:1d:d8:30:92:e1:c8:fa:ec:c5:e8:a7:
                    86:0e:10:a5:ee:e1:e7:42:a9:2c:1b:b7:83:41:e7:
                    78:c0:36:f8:7d:b3:bf:4e:5a:a2:65:9d:30:4c:c9:
                    3a:12:98:1f:d5:43:6c:83:5e:c9:d8:92:b6:d7:15:
                    63:96:fe:30:09:5c:44:7a:1a:8e:81:f3:ea:b5:ec:
                    c3:ef:f1:15:bf:7b:43:1d:72:ec:09:30:16:a5:9d:
                    f1:2a:86:fb:00:1e:d1:55:99:22:ab:5a:94:81:8d:
                    28:da:ee:2d:50:f9:a3:9c:26:66:fe:1c:02:06:52:
                    f0:5c:3f:ad:63:4b:5b:ca:5f:20:63:57:20:75:73:
                    3b:79:5e:09:6f:ad:fb:37:b4:c7:65:ef:91:f1:1f:
                    c8:58:47:ac:3e:24:41:1a:c0:3f:fb:4d:16:a6:27:
                    b7:4f:a0:ba:5b:50:73:79:0b:ac:13:38:b2:a7:01:
                    3f:20:aa:d3:0a:30:05:ff:78:c6:41:c2:ce:f8:40:
                    05:a2:0d:0a:3d:fa:4c:6d:0d:96:e9:46:f6:cb:21:
                    51:f9:8f:7b:fa:b0:e3:bb:47:07:a9:56:a7:46:75:
                    89:eb:f3:70:d7:1b:1b:c1:52:a2:5a:fb:55:e2:92:
                    78:c4:95:a3:6d:29:f0:73:8a:fc:78:42:b3:82:64:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FC:86:04:2F:7F:D6:BF:CA:96:3A:58:95:45:59:53:20:0F:FA:42
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:65:e1:b1:00:cd:6a:63:55:a7:e1:c6:3b:21:ee:2d:6a:d0:
         59:34:33:ca:83:dc:ed:c2:6d:0f:1b:a2:5b:76:88:25:9e:ec:
         a2:39:6a:96:07:02:7a:12:06:c1:59:2a:0e:d8:bb:1b:11:12:
         ea:2e:f6:29:d5:17:83:4e:2a:83:24:01:d4:7e:bd:76:46:50:
         b0:a6:e1:b6:e7:3e:fd:98:88:9a:85:fa:df:ac:57:0d:7d:33:
         b1:0d:40:dd:3e:6c:40:04:26:63:27:6d:8c:d6:00:e1:d3:7f:
         65:f5:85:48:da:1f:e8:77:b8:03:cd:31:bf:bb:61:0e:41:42:
         58:e8:eb:80:39:56:4c:f2:0c:32:a0:a9:c4:dd:06:2d:af:bc:
         53:74:31:79:bf:e0:47:8e:d0:3d:1b:23:7f:c6:4b:87:bf:94:
         2e:a0:54:2b:aa:11:73:05:1b:b0:cf:74:f4:97:ab:91:28:f9:
         e1:50:c8:8a:56:ea:b4:e2:36:9a:75:ea:d5:a6:21:20:80:a3:
         96:d8:35:37:91:94:a2:33:ab:a3:45:1a:52:c0:2b:9d:e4:76:
         29:38:72:b3:6f:6b:62:b3:4e:60:16:ce:50:96:49:52:0d:5c:
         4c:6a:ba:58:8c:84:75:a8:d0:6e:be:9e:01:12:6b:a8:68:fa:
         d2:36:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:40:47 2026 by rpki-client