Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          sFIKspn12oUVHMGbLxwOULA11WrS73eFtedLiDBByg0=
Subject key identifier:   FB:05:EF:3A:40:82:4C:0C:70:50:B2:4E:46:FC:FC:0D:B7:0A:30:06
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       12220AF9288CA182858C2E09005EFBBC13D2228B
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:34:01 +0000
ROA not before:           Sun 03 May 2026 02:29:01 +0000
ROA not after:            Sun 02 May 2027 02:34:01 +0000
asID:                     4800
IP address blocks:        2400:8000:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:22:0a:f9:28:8c:a1:82:85:8c:2e:09:00:5e:fb:bc:13:d2:22:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:01 2026 GMT
            Not After : May  2 02:34:01 2027 GMT
        Subject: CN=FB05EF3A40824C0C7050B24E46FCFC0DB70A3006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:eb:13:3e:32:ae:f1:49:e4:27:9e:7c:0e:
                    1a:29:4f:20:7a:06:68:2b:12:75:b7:c6:86:eb:ae:
                    ca:57:77:3e:c7:55:30:73:b5:f9:1d:8d:ae:e8:a5:
                    44:1d:b5:d4:cb:9f:35:cc:a4:d5:38:48:53:e0:9c:
                    5b:c1:61:1c:21:20:38:dc:e9:cb:c3:bc:11:1c:60:
                    c1:73:e5:7a:87:7b:22:2f:d4:33:12:33:40:cf:ee:
                    c2:c0:94:66:20:3b:90:49:d4:b3:fe:7e:54:f6:28:
                    9c:4b:2f:90:b8:93:ce:d5:27:f9:8f:ba:54:03:58:
                    0b:99:89:00:85:b6:06:19:d7:00:d3:12:d5:3a:d2:
                    31:46:5f:7c:7f:77:a8:86:f6:28:81:88:4d:c8:3f:
                    85:a4:7f:fe:17:1b:ec:99:9a:4f:dc:be:51:ac:37:
                    15:64:4b:be:77:b1:e5:a0:27:60:31:d2:50:89:c8:
                    5b:ae:01:0d:f0:92:77:54:38:eb:74:50:61:ce:01:
                    f0:b2:35:da:18:9b:fc:4d:b5:95:7c:77:59:2b:7c:
                    7b:31:06:0f:22:64:74:5d:66:ef:4a:2c:89:42:c1:
                    b7:25:19:e1:60:39:22:2f:98:8e:39:17:92:e4:fb:
                    fd:78:c8:02:5f:c3:76:5b:0e:eb:e2:1f:1a:c7:e0:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:05:EF:3A:40:82:4C:0C:70:50:B2:4E:46:FC:FC:0D:B7:0A:30:06
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:0e:74:44:6d:09:b4:67:42:bc:3b:14:4f:72:aa:80:1f:f4:
         66:4f:e3:c1:45:64:7d:b5:a9:41:af:a9:93:cd:c1:7c:64:94:
         e9:54:2c:e3:61:e4:15:35:87:91:61:91:e4:ab:a8:26:b7:ec:
         da:15:48:71:7f:8d:c4:e2:5f:6d:4e:c1:31:0d:37:0a:8d:c6:
         f4:dd:9e:24:e5:7d:a1:5c:d3:b1:2c:d3:84:5d:df:f8:9e:ce:
         b3:47:8b:e8:90:c0:09:7e:5a:43:db:4e:0a:6a:f3:14:af:14:
         9a:23:f1:c9:72:71:85:d5:05:62:97:b0:2f:4b:ea:1b:e8:db:
         02:da:a9:ec:d0:99:a1:11:3f:d7:b5:ba:59:15:ce:7c:20:8d:
         74:c4:7e:56:60:61:9e:6d:c2:28:a4:da:2e:e5:49:bf:fe:1d:
         57:60:f9:f5:32:fc:5b:e1:a3:95:cc:71:6b:a7:91:0b:35:1d:
         cc:79:9a:22:fa:4d:06:b8:ee:55:b4:73:e7:19:b7:d5:7e:39:
         a8:73:80:6d:a5:ad:25:15:fb:10:67:a3:b5:76:7c:df:84:e9:
         08:dc:1f:a7:c4:0c:11:5f:ca:ae:f3:bd:6e:32:66:5f:c0:00:
         6d:7c:6c:93:ef:40:7d:e2:6a:26:ec:41:b3:35:60:3b:4f:6d:
         86:10:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:37 2026 by rpki-client