Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31393a3a2f34382d3438203d3e203538353532.roa
File:                     323430343a666430303a31393a3a2f34382d3438203d3e203538353532.roa (raw, json)
Hash identifier:          lBYYZ74JhrTiBs1kw3flNSacU6E8vZq8ZnOwsj1mTfs=
Subject key identifier:   D6:57:2E:C5:A1:1F:E9:51:A0:95:7D:28:28:6F:A3:63:E9:53:CD:0A
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       6ED566379F85B4B538B7C8E17EA01935A849118A
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31393a3a2f34382d3438203d3e203538353532.roa
Signing time:             Sun 03 May 2026 02:36:29 +0000
ROA not before:           Sun 03 May 2026 02:31:29 +0000
ROA not after:            Sun 02 May 2027 02:36:29 +0000
asID:                     58552
IP address blocks:        2404:fd00:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d5:66:37:9f:85:b4:b5:38:b7:c8:e1:7e:a0:19:35:a8:49:11:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:29 2026 GMT
            Not After : May  2 02:36:29 2027 GMT
        Subject: CN=D6572EC5A11FE951A0957D28286FA363E953CD0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:47:37:e3:7f:f3:aa:75:9e:d9:21:e9:dc:
                    1c:bd:f6:9f:56:90:36:e2:a4:7d:14:96:42:7a:07:
                    63:1b:b8:51:6e:b5:4c:46:c7:09:a8:48:0b:f6:1f:
                    39:7b:8f:36:3f:1c:b7:ca:18:92:ad:18:95:5e:ae:
                    86:66:cc:fd:9f:81:2b:40:93:c5:71:17:4b:34:51:
                    cc:39:25:c4:55:4f:f0:0d:7b:18:41:fe:e3:18:df:
                    9d:d8:8b:3d:d6:47:f1:1b:59:0b:50:83:f0:3f:8e:
                    07:73:38:3d:de:01:07:b6:5d:84:1f:03:0e:91:7b:
                    3f:f1:c1:c4:51:10:19:6e:3e:45:18:38:09:50:7b:
                    8d:ad:d4:73:fd:d2:2f:00:51:5d:d8:80:31:76:ed:
                    1f:55:2b:4b:96:8c:4c:08:16:ca:89:97:10:0e:b2:
                    20:ac:4d:d6:1e:b6:43:62:3e:81:6f:7b:b5:eb:52:
                    a3:ab:a7:20:e3:33:cf:d3:b0:51:a2:54:1f:72:e7:
                    15:99:49:91:e6:e4:12:71:f3:45:fc:a2:df:9c:6c:
                    36:e1:a5:6b:6c:da:42:c2:61:cc:8d:52:c2:3f:53:
                    23:55:5d:a5:4b:45:6c:6b:e7:08:ee:8a:bb:66:bf:
                    7c:ca:4a:8b:8c:55:66:5d:cc:4b:a5:cb:e4:08:d7:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:57:2E:C5:A1:1F:E9:51:A0:95:7D:28:28:6F:A3:63:E9:53:CD:0A
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31393a3a2f34382d3438203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fd00:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:6a:27:50:08:bf:bd:35:d7:75:94:66:46:68:c6:0a:82:79:
         79:73:ce:3f:1f:61:49:a7:12:ea:c1:16:2e:c2:3b:66:9d:44:
         7c:eb:4d:a4:48:7b:d2:c2:5d:90:a2:97:9c:88:79:c0:cd:fa:
         3c:8b:97:05:a1:b2:b2:b0:46:aa:81:e8:96:69:52:b7:75:8d:
         83:e3:e7:43:5e:a1:a6:0c:05:c2:c1:af:15:d1:10:c3:59:69:
         da:92:16:ba:0f:1f:6a:d3:e0:1f:1f:1d:a5:8c:8a:66:50:00:
         42:2f:67:79:d2:fe:7d:af:d8:70:23:5d:62:a0:9c:9c:a5:cf:
         0b:73:02:64:3a:8a:0e:50:ba:7f:1c:ea:07:ac:83:4c:1b:c7:
         30:46:cc:c0:bc:e6:c3:fb:b9:1f:9f:26:07:2e:34:c7:76:5b:
         c0:69:7d:3f:8a:7f:99:ff:fa:e1:45:e1:00:6f:a5:a0:53:db:
         f0:6c:dc:af:ee:cb:e0:53:47:cd:65:f3:bb:f6:e4:74:7b:ea:
         a6:e8:33:d2:a4:4a:57:91:2c:ec:f9:c4:2f:41:ea:e4:bc:7b:
         d1:42:a6:45:79:6b:cd:cf:6d:36:5f:7c:88:d8:98:61:de:ba:
         da:57:3b:15:72:73:22:64:ed:79:53:7b:f5:12:5e:04:f5:de:
         9b:51:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:07 2026 by rpki-client