Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa
File:                     323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa (raw, json)
Hash identifier:          tdKp/PyMQqUMTNRb4e50L2gAqL5v+WSupekjrjhao+U=
Subject key identifier:   4E:36:EF:3F:9E:3C:94:0E:25:14:3B:3E:75:C4:34:A8:1A:F7:F7:3E
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       1801A077A64FDCFAD4C449A3BAC7381F9846A6AB
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa
Signing time:             Sun 03 May 2026 02:36:40 +0000
ROA not before:           Sun 03 May 2026 02:31:40 +0000
ROA not after:            Sun 02 May 2027 02:36:40 +0000
asID:                     58389
IP address blocks:        2404:fd00:34::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:01:a0:77:a6:4f:dc:fa:d4:c4:49:a3:ba:c7:38:1f:98:46:a6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:40 2026 GMT
            Not After : May  2 02:36:40 2027 GMT
        Subject: CN=4E36EF3F9E3C940E25143B3E75C434A81AF7F73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:a1:58:20:2a:8b:6d:cb:22:cf:92:8f:ce:
                    6c:96:6b:9d:ef:32:61:37:28:0b:0c:27:48:1f:10:
                    a4:7e:94:e4:9a:c4:fb:ad:54:c6:94:0d:5f:6b:b9:
                    58:fc:18:e0:fa:23:43:4e:f2:21:88:8e:c4:b0:33:
                    39:18:71:30:37:db:5a:ba:46:e6:78:a6:65:5d:e8:
                    6b:36:d9:57:46:51:3d:f3:02:4c:35:8c:6c:5b:3b:
                    58:2d:36:71:52:93:f3:8a:0c:88:3d:bd:6c:8a:34:
                    27:a8:68:41:fd:f4:eb:ac:bd:c7:c8:41:23:66:a8:
                    de:64:75:9a:7d:dc:ad:4c:9a:bb:ae:77:ae:a2:df:
                    ec:4d:ae:ef:bd:b8:d3:0b:9e:e0:99:b4:85:c2:40:
                    cc:5f:de:09:72:b3:5c:3c:61:44:85:c0:30:9e:58:
                    d4:5d:2f:96:4f:d7:7c:11:2a:4a:46:e0:8a:96:b9:
                    fa:95:60:08:64:84:99:69:1a:6e:d0:5c:05:2e:e1:
                    5b:6f:9a:7c:d9:da:0c:87:92:df:bd:e6:a2:3e:5d:
                    b3:9a:7e:33:39:75:2b:b7:77:af:43:94:c5:b2:31:
                    02:b8:f5:45:ee:fe:d3:b1:2f:05:99:e6:db:e1:88:
                    f3:5d:39:6a:ec:6d:bd:03:c2:37:f0:ce:a5:3a:86:
                    54:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:36:EF:3F:9E:3C:94:0E:25:14:3B:3E:75:C4:34:A8:1A:F7:F7:3E
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fd00:34::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:1e:45:e8:b2:5f:8d:f9:e9:d0:50:ef:d3:8a:d5:e4:00:94:
         e9:dd:f1:f2:48:20:08:c9:8b:fb:1b:ec:a9:87:a0:3a:67:d3:
         20:07:66:9f:44:9f:db:b2:37:85:eb:1b:cd:a5:a4:ea:fc:4a:
         e7:07:39:09:09:69:6a:13:39:37:1c:fe:cf:c0:4d:bc:f0:74:
         68:06:01:01:67:25:f9:d7:ca:ec:52:fa:be:0e:eb:56:e9:5d:
         b4:9f:26:1a:54:81:63:fd:dc:ef:8e:05:4c:72:17:50:59:a4:
         d5:b8:44:88:b9:cd:d3:3a:f2:3c:0d:cf:c1:62:11:30:1e:e0:
         45:8f:9d:c1:b6:bc:fd:7d:ff:22:c0:ad:9d:02:91:3f:e6:48:
         94:30:c8:d6:8e:01:10:3d:45:e3:62:22:9a:fc:57:56:28:08:
         0d:90:f9:c0:83:e1:e6:b3:d6:69:84:15:ae:7e:b3:63:01:d6:
         10:a6:a2:9b:57:93:32:15:55:3e:4d:71:95:7c:c6:b6:2e:02:
         ab:54:11:f8:9f:92:6a:56:b3:08:2e:52:dd:04:e8:1d:01:42:
         ae:a4:1c:e9:4a:5c:44:d5:01:7c:c3:1c:fd:96:06:33:5a:5b:
         7f:ed:a8:d3:c7:c9:a7:db:17:06:ba:c0:77:77:6c:22:23:dd:
         72:80:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:06 2026 by rpki-client