Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa
File:                     323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa (raw, json)
Hash identifier:          9UzfT7LLn0bUwQObFe76BOZbwh+bWGbVpL9IQZJFG/k=
Subject key identifier:   F3:97:40:4A:51:BF:2C:E1:34:8E:89:4F:05:63:6B:09:FC:4F:E2:B6
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       4D81058BBA5AD5BDFEEC768B7BE95E18B7B5895A
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa
Signing time:             Sun 03 May 2026 02:36:24 +0000
ROA not before:           Sun 03 May 2026 02:31:24 +0000
ROA not after:            Sun 02 May 2027 02:36:24 +0000
asID:                     58552
IP address blocks:        2404:fd00:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:81:05:8b:ba:5a:d5:bd:fe:ec:76:8b:7b:e9:5e:18:b7:b5:89:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:24 2026 GMT
            Not After : May  2 02:36:24 2027 GMT
        Subject: CN=F397404A51BF2CE1348E894F05636B09FC4FE2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f3:6c:ed:73:70:72:d2:18:a9:90:a7:42:b4:
                    19:e4:22:e5:9f:cb:61:b2:c7:e8:20:45:27:43:c9:
                    45:d3:65:df:9a:d9:45:df:9d:90:67:dd:da:67:69:
                    dc:79:2e:7f:11:86:22:95:c2:42:bf:0b:6b:30:be:
                    b8:6a:35:0b:9c:0c:ed:86:aa:db:ca:0f:ad:09:2a:
                    c4:64:98:2c:0d:39:fa:de:42:99:38:1e:3d:64:e4:
                    b9:53:0d:bc:db:2c:1a:0a:50:8d:6d:f3:72:a9:07:
                    e7:69:ca:42:46:94:1c:cf:71:48:53:42:b4:5d:6e:
                    8c:a7:8b:86:97:d3:a2:ef:fe:b7:8a:a0:c2:33:95:
                    64:0c:ff:81:75:ca:43:80:e2:54:76:7c:3c:93:32:
                    4a:48:ea:f6:4d:3e:05:7c:b4:4f:fb:e7:9b:f4:6d:
                    09:12:18:d7:bb:95:c5:04:24:ad:1e:7d:7e:ec:19:
                    3e:bb:b6:f3:da:d9:2f:ab:e3:ab:3f:ca:51:a4:05:
                    a0:71:b6:59:24:32:96:d1:d3:b3:64:f9:e1:5e:ac:
                    5f:20:a4:07:3c:f4:9c:38:66:05:2e:96:66:8b:a3:
                    b0:7b:3f:34:4b:36:e9:ba:e0:27:df:54:c7:f7:87:
                    f5:1c:9a:7c:48:7e:64:eb:c6:b7:92:7b:ab:1a:34:
                    06:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:97:40:4A:51:BF:2C:E1:34:8E:89:4F:05:63:6B:09:FC:4F:E2:B6
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fd00:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:c4:14:b1:52:89:a1:9e:19:8c:6e:5c:f0:1a:56:7d:24:c1:
         e0:98:6b:06:a3:8b:88:5f:9f:53:79:2e:ed:75:05:36:ab:9a:
         58:d6:ba:54:b7:3e:25:d2:31:d4:06:1c:cc:f5:02:cf:ed:05:
         4f:f6:3d:72:6b:d5:15:c3:6a:f0:3b:22:d8:c8:04:42:ce:0a:
         ab:c7:19:44:45:05:35:ad:2b:08:a3:65:c6:e1:23:83:8f:d3:
         30:1f:9a:1f:71:a8:29:9b:13:32:f3:6d:b7:f1:35:21:e0:1f:
         3c:08:29:88:bf:fb:2c:94:80:74:d9:d3:89:54:55:fc:9b:58:
         64:88:19:f7:21:13:aa:04:90:08:fd:2e:a9:be:fb:5a:e4:16:
         20:af:59:6a:26:92:d7:4f:33:a5:5b:e4:37:f4:6d:2c:26:09:
         bd:11:04:35:6c:51:05:f6:e8:77:f4:a3:0e:35:b2:4b:08:7b:
         1e:9d:3b:23:61:7e:ee:c7:81:a2:61:04:33:35:7b:dd:44:30:
         79:c0:23:e0:ec:d8:7e:c8:c1:ed:2e:5c:91:e0:b6:7e:ba:5a:
         ce:d7:2a:df:e4:30:c3:49:b9:39:55:c4:53:d3:13:5c:18:d6:
         df:96:56:d6:91:f1:94:11:c2:5c:4d:45:16:a9:63:67:d5:b3:
         30:33:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:35 2026 by rpki-client