Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31373a3a2f34382d3438203d3e203538353532.roa
File:                     323430343a666430303a31373a3a2f34382d3438203d3e203538353532.roa (raw, json)
Hash identifier:          Z01o6e/NGBcvjXp+BtWSWTDAiXQGw+qCN0rOFKuM708=
Subject key identifier:   0C:BF:B0:D6:DD:DF:4E:B2:9E:2B:CC:FD:7B:1A:40:D4:F9:D2:43:FB
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       2C73CD50DF4F2078D4DB5812F35EFF7AC5BD6335
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31373a3a2f34382d3438203d3e203538353532.roa
Signing time:             Sun 03 May 2026 02:36:42 +0000
ROA not before:           Sun 03 May 2026 02:31:42 +0000
ROA not after:            Sun 02 May 2027 02:36:42 +0000
asID:                     58552
IP address blocks:        2404:fd00:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:73:cd:50:df:4f:20:78:d4:db:58:12:f3:5e:ff:7a:c5:bd:63:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:42 2026 GMT
            Not After : May  2 02:36:42 2027 GMT
        Subject: CN=0CBFB0D6DDDF4EB29E2BCCFD7B1A40D4F9D243FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:f6:10:6e:ec:fe:7c:70:97:8a:84:c5:5b:
                    9b:c4:d7:ed:bd:0a:b8:fa:d1:03:81:09:28:e4:00:
                    b7:f9:9f:9c:4a:7e:9b:d7:d9:bd:dc:b7:7d:d7:5e:
                    89:b4:0e:bd:6d:d7:b2:a3:62:b6:0c:d2:58:17:e2:
                    9f:84:18:b6:79:12:de:8a:2e:d8:5c:d5:01:81:e6:
                    63:a6:a2:63:85:d8:01:84:de:68:9b:4b:ad:4e:86:
                    c3:e4:00:c8:35:59:45:6c:81:d8:31:0c:45:f0:99:
                    65:3c:a2:8a:b7:42:c3:73:f5:52:7a:75:e0:6f:ca:
                    0c:db:4c:0c:e8:46:79:10:33:32:c2:41:d5:fc:e7:
                    de:a4:9d:ae:6b:c8:ac:b0:8b:30:b8:0f:89:25:a0:
                    3d:0b:2c:d0:45:ff:a3:5b:cb:86:06:5a:9a:67:2a:
                    42:e8:b8:82:1a:85:62:14:b6:4f:b9:7b:ce:6b:e7:
                    db:9d:6b:71:e7:b5:d5:cd:31:91:64:00:34:e0:4e:
                    68:96:26:7e:0d:aa:74:32:6f:e3:8f:04:f4:9e:ec:
                    41:2d:55:bc:62:63:b6:87:28:fb:af:2a:df:7e:ab:
                    83:b5:7c:94:55:e2:9b:97:db:8d:53:6c:db:b9:63:
                    ab:52:d0:1c:cb:8c:64:61:5b:6c:80:d5:8a:cb:9e:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:B0:D6:DD:DF:4E:B2:9E:2B:CC:FD:7B:1A:40:D4:F9:D2:43:FB
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31373a3a2f34382d3438203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fd00:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:10:7c:a6:a0:e4:8b:bb:80:09:fb:b7:63:e3:93:66:39:
         fc:ab:6f:55:94:6b:65:fb:ba:1c:de:c6:fe:42:cb:36:1d:29:
         5c:01:d1:8c:db:93:31:17:0d:85:6d:13:dd:36:c7:fd:73:c8:
         6a:2f:ad:b2:d9:25:63:78:74:6f:af:e7:d6:aa:05:70:e9:e1:
         01:f2:e2:c7:46:d9:79:54:c3:bd:b7:9d:1c:3a:15:10:b7:e3:
         04:5b:2c:9b:6b:e1:56:80:de:2e:4a:f8:b0:6a:c9:fc:ac:c0:
         8c:a0:35:44:84:fb:35:d4:9c:92:6e:f7:31:90:f2:9c:61:df:
         c1:de:e8:2c:0d:b1:e2:d8:58:8f:23:11:fa:d2:ad:e6:0e:e5:
         42:af:4a:37:93:f2:50:40:43:33:9a:61:8f:1d:46:fb:4b:36:
         3e:bf:a5:bb:22:d8:32:a7:fd:e2:54:83:48:0c:6b:1d:42:f8:
         0e:92:f6:5c:00:75:11:f2:0c:b1:eb:b6:1a:e2:0d:33:8d:52:
         9a:37:de:e4:53:15:ef:7d:74:c3:19:71:63:29:c7:28:23:c1:
         8d:d0:a9:85:42:03:e0:cc:c4:58:b9:97:ca:6b:ee:73:3b:24:
         b8:80:0e:84:1c:21:c6:d7:a1:92:3f:5a:f9:94:e9:26:c0:e2:
         db:6f:1d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:42 2026 by rpki-client