Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430303a313838303a3a2f33322d3438203d3e203137363730.roa
File:                     323430303a313838303a3a2f33322d3438203d3e203137363730.roa (raw, json)
Hash identifier:          7JThFy92/VpEXEDJA9kwrgcgGhSHAfaM/+d1+Zp5aK8=
Subject key identifier:   6A:F0:E9:74:C8:8F:98:4B:5A:AA:A2:DF:55:05:DC:CB:1A:CA:8B:49
Certificate issuer:       /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Certificate serial:       7A8B57A615DE29ED3DEEE7E5192FC0DD97B95D34
Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430303a313838303a3a2f33322d3438203d3e203137363730.roa
Signing time:             Sun 03 May 2026 02:37:17 +0000
ROA not before:           Sun 03 May 2026 02:32:17 +0000
ROA not after:            Sun 02 May 2027 02:37:17 +0000
asID:                     17670
IP address blocks:        2400:1880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
                          rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8b:57:a6:15:de:29:ed:3d:ee:e7:e5:19:2f:c0:dd:97:b9:5d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
        Validity
            Not Before: May  3 02:32:17 2026 GMT
            Not After : May  2 02:37:17 2027 GMT
        Subject: CN=6AF0E974C88F984B5AAAA2DF5505DCCB1ACA8B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:dc:61:9f:29:71:28:70:5e:a8:8e:3b:90:
                    53:12:52:c6:10:d2:d7:e5:2d:4c:f4:c8:ca:f7:1c:
                    56:d7:1d:4c:0e:ab:d6:91:eb:e8:68:2f:90:e0:d3:
                    44:42:01:03:c0:05:22:af:c7:ea:1b:3a:e6:d2:19:
                    5b:6d:fb:a9:83:57:04:e5:7c:c5:16:2e:53:93:6a:
                    7e:b5:2d:45:e9:89:01:df:c7:e6:e4:7e:8f:74:52:
                    47:00:5d:26:bf:1b:7a:36:bb:79:57:61:03:aa:ca:
                    37:5c:ad:bb:ad:df:07:8a:5b:2f:2e:e6:bb:d4:e0:
                    84:8b:f4:ad:bc:62:b6:e3:56:84:bf:84:26:4a:10:
                    58:f3:bb:c2:f4:2a:f8:3a:18:fe:d5:24:65:65:38:
                    e2:45:8c:c1:70:75:3b:85:0c:ac:78:ec:53:ed:79:
                    3e:eb:70:e6:3f:31:3d:ee:51:f5:e1:ef:50:72:01:
                    51:f7:69:23:0e:b9:b1:69:6c:46:04:77:1d:d1:6a:
                    02:0f:66:db:9d:88:17:f2:64:aa:27:f7:4c:8a:75:
                    18:98:bb:a7:75:21:fb:40:f6:10:91:15:26:69:b5:
                    d1:e0:de:ee:ec:a5:14:c1:c2:b4:0d:4c:97:4c:c5:
                    ce:9b:88:ba:cc:87:44:a8:c9:e4:3e:2c:3c:16:8e:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F0:E9:74:C8:8F:98:4B:5A:AA:A2:DF:55:05:DC:CB:1A:CA:8B:49
            X509v3 Authority Key Identifier:
                keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430303a313838303a3a2f33322d3438203d3e203137363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:1880::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:19:c0:ec:fa:20:37:4a:2d:30:89:c5:88:31:d2:55:d6:fb:
         db:82:b1:59:ce:8a:c1:12:70:1c:8c:fc:16:33:07:41:bf:45:
         7c:69:76:70:58:bd:34:12:e1:c6:6c:77:46:8e:89:57:d7:da:
         73:bd:8c:30:ed:ca:c9:f7:4f:a1:0d:fe:89:8a:fd:0b:db:17:
         14:69:58:12:09:a0:b9:fc:18:9d:f1:6e:ff:d5:fd:d7:67:11:
         d5:75:0e:46:67:2a:a0:23:a8:6d:82:5a:be:ae:46:bc:99:df:
         5d:10:26:b4:47:cd:d6:d6:1f:d0:1c:17:2c:e3:7b:e1:1e:49:
         2a:c6:bb:6f:df:49:aa:e6:4a:64:5d:51:9e:27:8e:7c:c5:19:
         97:68:65:3a:b6:de:0f:f6:97:9e:e6:77:82:ad:ca:69:2c:2b:
         06:3e:fb:9b:d6:c5:bc:85:12:39:5f:fd:c0:27:da:2e:cf:b6:
         60:f5:1f:0a:f6:32:05:a7:32:76:1d:d9:1e:1c:a2:5f:95:7e:
         10:f4:7d:bb:2c:8c:3a:1b:56:53:0b:8b:dd:55:7e:46:ab:ff:
         27:e2:58:d8:9c:89:f5:d0:10:51:c6:c9:32:1d:a7:85:9d:73:
         7a:0e:62:ff:2c:07:13:1c:83:63:05:c1:30:2a:5a:b5:46:c3:
         79:11:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:25:38 2026 by rpki-client