Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32373a3a2f34382d3438203d3e203536323436.roa
File:                     323430343a666430303a32373a3a2f34382d3438203d3e203536323436.roa (raw, json)
Hash identifier:          yOnLX5r8obc5lvjN4HLaKlz/pTRrZIg98RBFHd9BC9M=
Subject key identifier:   95:9C:95:F3:98:55:DA:25:90:00:23:6C:A9:EB:45:F5:9B:1C:B5:A4
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       547C0E3028F4173EEBBA31058501632068AB0DEE
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32373a3a2f34382d3438203d3e203536323436.roa
Signing time:             Sun 03 May 2026 02:36:41 +0000
ROA not before:           Sun 03 May 2026 02:31:41 +0000
ROA not after:            Sun 02 May 2027 02:36:41 +0000
asID:                     56246
IP address blocks:        2404:fd00:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7c:0e:30:28:f4:17:3e:eb:ba:31:05:85:01:63:20:68:ab:0d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:41 2026 GMT
            Not After : May  2 02:36:41 2027 GMT
        Subject: CN=959C95F39855DA259000236CA9EB45F59B1CB5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:80:4a:16:ed:fc:90:05:8e:eb:a0:16:f3:d8:
                    77:35:d0:eb:02:0c:68:b5:bd:1e:75:d2:7c:61:25:
                    fe:d0:31:28:4d:b6:31:10:49:fb:ea:99:d0:ea:43:
                    db:55:44:9f:e3:98:61:2f:36:72:d8:8a:11:22:bf:
                    52:b5:7a:6b:0e:25:b4:01:25:0a:ed:2f:d5:75:f8:
                    fc:5a:60:db:50:74:81:9f:c0:9b:7a:df:7c:e0:09:
                    a5:84:ee:85:37:de:66:08:1e:9c:c5:35:17:21:90:
                    3a:08:78:79:3c:72:6a:fd:c7:e4:86:5b:04:62:6a:
                    96:d9:4e:3b:cd:ea:33:45:98:87:d9:c3:7b:60:57:
                    b9:8b:35:0f:71:1b:57:ce:46:1f:fc:87:b3:13:a4:
                    7a:89:a8:53:50:2b:47:d1:43:b1:04:63:4c:0e:41:
                    a5:5b:fd:38:8e:3a:81:2b:69:5e:6d:2a:ca:20:e5:
                    b6:d3:27:d0:4a:45:a4:3e:60:49:6f:49:0a:8c:d8:
                    73:33:57:63:74:31:f1:55:2d:77:92:04:f0:a9:b1:
                    92:3b:ec:1b:62:60:b4:3b:12:47:81:5c:b2:2c:d7:
                    b5:70:df:86:c9:1d:67:94:21:f0:4a:83:ec:c0:f0:
                    cc:54:6f:be:56:2f:29:7d:0c:4c:4b:5c:af:82:08:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9C:95:F3:98:55:DA:25:90:00:23:6C:A9:EB:45:F5:9B:1C:B5:A4
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32373a3a2f34382d3438203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fd00:27::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:ff:c9:88:29:5c:87:cd:e7:40:d4:9d:aa:f2:43:23:9b:5e:
         63:18:da:97:66:37:02:0d:29:b2:bc:4a:97:1e:07:94:91:03:
         50:2e:61:3e:95:81:ae:04:1c:48:5b:14:f9:50:b8:b5:bc:ed:
         bd:0a:d0:35:95:0a:fe:8a:eb:89:3f:90:8d:88:70:14:7f:97:
         ad:12:77:03:51:6c:fe:95:9b:5b:39:ba:ac:e2:be:9f:6e:0e:
         6c:d5:1b:6f:b0:e0:27:ab:ba:aa:83:8a:a3:c3:69:38:00:bb:
         2e:98:10:e6:54:e0:4f:16:dd:b7:0c:73:33:f6:78:4a:e0:b3:
         70:16:70:1b:75:aa:1a:33:e0:d5:34:5a:77:c2:38:81:ef:a6:
         58:5e:ff:75:be:b8:c9:c1:79:96:41:22:15:0a:e4:5e:16:a8:
         01:7b:4e:e2:17:bf:de:c8:24:5d:6d:b9:e4:3d:b7:d1:b4:61:
         60:35:72:4d:3a:7e:68:4c:13:76:44:b7:4a:70:77:54:a5:6c:
         c2:71:a1:a2:63:dc:f2:ad:88:cb:26:b4:29:e2:56:c3:18:3e:
         da:84:89:84:42:6b:85:83:b3:08:60:45:82:14:51:b0:91:53:
         32:7a:1b:b1:18:52:89:b9:55:04:e1:06:3e:23:9c:d1:1c:b2:
         e3:ba:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:30 2026 by rpki-client