Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/323430303a366632303a3a2f33322d3438203d3e20313333383039.roa
File:                     323430303a366632303a3a2f33322d3438203d3e20313333383039.roa (raw, json)
Hash identifier:          anNDqws9MomLhYogS/yrt3t4/vBpWeVST2NjVPJXERI=
Subject key identifier:   06:27:95:28:6D:BD:08:3E:54:82:6F:D3:0D:1F:BD:73:E0:A2:16:46
Certificate issuer:       /CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB
Certificate serial:       636B181F68A867A6807C9C21B153A411CF132B32
Authority key identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/323430303a366632303a3a2f33322d3438203d3e20313333383039.roa
Signing time:             Sun 03 May 2026 02:35:09 +0000
ROA not before:           Sun 03 May 2026 02:30:09 +0000
ROA not after:            Sun 02 May 2027 02:35:09 +0000
asID:                     133809
IP address blocks:        2400:6f20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl
                          rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6b:18:1f:68:a8:67:a6:80:7c:9c:21:b1:53:a4:11:cf:13:2b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB
        Validity
            Not Before: May  3 02:30:09 2026 GMT
            Not After : May  2 02:35:09 2027 GMT
        Subject: CN=062795286DBD083E54826FD30D1FBD73E0A21646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:b9:a2:91:ff:aa:da:0c:fa:ec:c5:d1:51:
                    6b:be:80:f4:ef:5d:73:85:8b:33:9d:f3:09:1c:b9:
                    d4:33:a1:7b:a1:d8:45:e6:b5:39:19:fe:75:94:3d:
                    86:dc:9f:f5:0b:69:1b:7a:11:60:6c:ec:d3:8a:93:
                    64:0a:a9:ed:b2:d4:28:17:52:a9:ff:1b:db:48:61:
                    fc:50:60:bf:a4:17:64:18:73:18:8f:05:f4:25:9c:
                    e1:fa:e4:d3:45:ce:a3:4c:44:15:8c:f1:0f:63:1b:
                    34:d4:98:cb:33:28:b1:b9:88:59:5d:81:16:ca:62:
                    0d:9f:42:10:f7:ef:e5:2e:e8:ea:c6:ca:26:ac:89:
                    fc:70:1a:5c:50:f4:70:8a:d6:df:1f:b1:54:1a:5b:
                    27:57:83:83:64:59:0f:bb:6c:58:16:e8:30:88:4b:
                    7a:11:0b:1d:a9:14:79:5c:28:f2:bf:c2:a4:37:6a:
                    86:68:c0:ac:e1:c4:6f:65:31:7b:ab:79:0c:15:70:
                    92:4e:2c:0b:b8:dd:e2:b1:76:54:e1:30:95:7f:fe:
                    f9:ad:f9:85:18:d7:17:18:f7:87:2e:4c:30:9b:b4:
                    20:d7:8c:f4:9d:1a:b0:1a:f4:b7:55:15:20:7b:ca:
                    90:c4:66:47:e4:99:a0:a0:a5:f3:67:74:ab:14:c0:
                    14:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:27:95:28:6D:BD:08:3E:54:82:6F:D3:0D:1F:BD:73:E0:A2:16:46
            X509v3 Authority Key Identifier:
                keyid:10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/323430303a366632303a3a2f33322d3438203d3e20313333383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:6d:06:78:9e:4a:08:1c:da:cc:9d:83:58:15:52:fd:aa:b4:
         5d:79:05:1e:e1:87:78:dd:9d:1b:21:b8:c8:58:d3:c0:cd:a5:
         15:d9:ab:70:4c:96:ba:b3:ff:5d:62:f7:d7:ba:e6:e4:86:8c:
         b3:25:0f:c8:93:42:9a:69:8e:4f:c4:59:d2:00:94:d7:c4:4a:
         0c:4b:bf:9c:54:49:b4:fd:0a:81:89:6b:66:26:a4:e6:d7:db:
         9e:b8:08:c3:bd:21:63:34:37:19:b9:31:64:ee:af:be:f5:5c:
         32:bb:c8:a0:69:05:62:eb:59:46:f4:a3:8c:ca:b8:8e:23:87:
         40:7a:c4:df:2c:a6:56:b5:fb:e6:5b:15:53:dc:68:3b:9b:88:
         22:fa:d2:f2:40:73:75:bc:5d:77:f9:37:80:ba:02:10:6c:72:
         d8:7c:5d:04:a3:7a:fa:6e:db:24:f0:7f:2f:83:f9:d9:28:01:
         cd:5b:89:48:ad:ca:81:7f:e6:bc:9c:92:b3:60:e0:55:d5:e4:
         5e:eb:4f:40:4a:5f:3a:fe:76:19:bc:45:8e:16:bc:1b:b9:05:
         8f:ea:2c:a0:94:07:e1:30:d2:1d:7b:0d:d1:8a:02:ad:46:f6:
         b7:6a:a8:4f:51:07:0a:46:15:e1:da:b2:d0:0a:f7:dd:3b:64:
         07:e7:e1:4b
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUY2sYH2ioZ6aAfJwhsVOkEc8TKzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFENEVC
NjYwOUNGQjAeFw0yNjA1MDMwMjMwMDlaFw0yNzA1MDIwMjM1MDlaMDMxMTAvBgNV
BAMTKDA2Mjc5NTI4NkRCRDA4M0U1NDgyNkZEMzBEMUZCRDczRTBBMjE2NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/Lmikf+q2gz67MXRUWu+gPTv
XXOFizOd8wkcudQzoXuh2EXmtTkZ/nWUPYbcn/ULaRt6EWBs7NOKk2QKqe2y1CgX
Uqn/G9tIYfxQYL+kF2QYcxiPBfQlnOH65NNFzqNMRBWM8Q9jGzTUmMszKLG5iFld
gRbKYg2fQhD37+Uu6OrGyiasifxwGlxQ9HCK1t8fsVQaWydXg4NkWQ+7bFgW6DCI
S3oRCx2pFHlcKPK/wqQ3aoZowKzhxG9lMXureQwVcJJOLAu43eKxdlThMJV//vmt
+YUY1xcY94cuTDCbtCDXjPSdGrAa9LdVFSB7ypDEZkfkmaCgpfNndKsUwBTFAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUBieVKG29CD5Ugm/TDR+9c+CiFkYwHwYDVR0j
BBgwFoAUEELF9eryLakKBywU9+odTrZgnPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTljZWY4YjAtYmE2NC00YzBjLThkZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVF
QUYyMkRBOTBBMDcyQzE0RjdFQTFENEVCNjYwOUNGQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDQyQzVGNUVBRjIyREE5MEEwNzJDMTRGN0VBMUQ0RUI2NjA5
Q0ZCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU5Y2VmOGIwLWJhNjQtNGMwYy04
ZGU4LTFmNTBhODVkNWZkZS8wLzMyMzQzMDMwM2EzNjY2MzIzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMxMzMzMzM4MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQAbyAwDQYJKoZI
hvcNAQELBQADggEBACBtBnieSggc2sydg1gVUv2qtF15BR7hh3jdnRshuMhY08DN
pRXZq3BMlrqz/11i99e65uSGjLMlD8iTQpppjk/EWdIAlNfESgxLv5xUSbT9CoGJ
a2YmpObX2564CMO9IWM0Nxm5MWTur771XDK7yKBpBWLrWUb0o4zKuI4jh0B6xN8s
pla1++ZbFVPcaDubiCL60vJAc3W8XXf5N4C6AhBscth8XQSjevpu2yTwfy+D+dko
Ac1biUityoF/5ryckrNg4FXV5F7rT0BKXzr+dhm8RY4WvBu5BY/qLKCUB+Ew0h17
DdGKAq1G9rdqqE9RBwpGFeHastAK9907ZAfn4Us=
-----END CERTIFICATE-----
Generated at Wed May 13 07:01:36 2026 by rpki-client