Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/323430343a366430303a3a2f33322d3438203d3e203435323934.roa
File:                     323430343a366430303a3a2f33322d3438203d3e203435323934.roa (raw, json)
Hash identifier:          hu61kA8y8+AVvATIk7KwJvKK9QvDhjlP6nmM1pXjVy4=
Subject key identifier:   BD:43:86:6E:61:70:BA:F2:E2:CB:93:32:53:B2:EF:1B:6F:F8:E5:11
Certificate issuer:       /CN=06083035B4010CEC337EE26F5EA15A04DD209219
Certificate serial:       554A62E56F321B3A301FDA3B394300C082B3BD0E
Authority key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/323430343a366430303a3a2f33322d3438203d3e203435323934.roa
Signing time:             Sun 03 May 2026 02:39:19 +0000
ROA not before:           Sun 03 May 2026 02:34:19 +0000
ROA not after:            Sun 02 May 2027 02:39:19 +0000
asID:                     45294
IP address blocks:        2404:6d00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
                          rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4a:62:e5:6f:32:1b:3a:30:1f:da:3b:39:43:00:c0:82:b3:bd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06083035B4010CEC337EE26F5EA15A04DD209219
        Validity
            Not Before: May  3 02:34:19 2026 GMT
            Not After : May  2 02:39:19 2027 GMT
        Subject: CN=BD43866E6170BAF2E2CB933253B2EF1B6FF8E511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:d5:3e:79:79:c2:f9:29:ad:d4:b3:4e:f9:
                    bb:8f:3c:46:31:0c:88:e9:df:24:d5:c2:b8:96:28:
                    52:5f:c9:a0:e9:b4:2c:db:d4:53:33:19:1f:30:3f:
                    73:97:fe:05:63:86:65:f1:66:ac:16:f2:29:c5:61:
                    f8:80:2c:57:d5:31:2e:65:5c:96:05:0c:b5:20:d1:
                    61:0e:cd:43:c0:8a:3c:05:db:22:df:29:a7:19:63:
                    cf:d4:59:2a:66:fd:85:35:a7:f2:65:e2:b4:82:f1:
                    7d:20:70:9b:92:41:6c:50:1e:7b:a5:e4:9c:b5:66:
                    20:f6:1e:5c:6e:19:b5:d8:33:a1:b2:56:86:6f:50:
                    6e:64:ec:db:ef:e2:5c:39:8e:66:d0:93:b7:3f:a4:
                    b0:40:69:ad:e5:46:c3:c4:41:fb:be:cb:4c:1f:d0:
                    c3:7b:98:b2:00:64:a3:59:e8:7d:05:c4:fa:1e:53:
                    57:e8:4d:4b:63:dc:1a:de:f9:84:13:eb:df:c6:e0:
                    2f:c2:52:22:3c:05:0f:bb:13:5d:7c:a6:43:6a:2b:
                    10:92:a5:71:b4:17:1f:e3:d5:1b:3d:09:d4:bf:9c:
                    df:b8:bf:ff:f1:7d:a5:5f:31:f2:0d:3e:44:e0:14:
                    b8:99:de:4a:a0:f5:58:f4:fb:3f:cb:dc:8b:71:7e:
                    e6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:86:6E:61:70:BA:F2:E2:CB:93:32:53:B2:EF:1B:6F:F8:E5:11
            X509v3 Authority Key Identifier:
                keyid:06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/323430343a366430303a3a2f33322d3438203d3e203435323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:c3:81:ae:af:ec:a9:c1:d0:c5:8a:dd:7f:0d:8b:ae:c1:83:
         47:c9:27:8f:7d:c9:ed:67:ed:da:ba:ac:5b:87:e5:0a:2a:28:
         68:90:b5:30:df:a6:9a:53:9f:4f:61:b4:bf:01:1b:52:5a:15:
         36:9b:c4:fb:8e:38:0a:66:53:01:ae:b4:8e:0d:69:74:aa:4a:
         4a:08:37:a3:9f:18:07:f2:45:1d:2c:07:e7:80:6d:f5:af:f4:
         07:e3:1e:b6:f4:84:3c:e4:72:c6:bb:ee:02:77:58:d0:00:6a:
         98:43:a6:da:f6:b2:0b:30:8e:33:e2:ad:bc:2b:86:64:13:4d:
         a2:97:9d:63:67:c9:46:57:37:17:e0:77:61:07:59:94:a4:e4:
         20:db:99:39:d4:a7:15:cd:eb:69:24:f0:ee:73:0f:48:a8:02:
         00:be:80:43:22:71:95:20:af:1a:59:14:98:3a:ad:01:3c:49:
         15:e4:9b:2d:a8:bc:f8:3a:46:85:fe:eb:15:86:77:66:a4:a0:
         a4:3c:92:e8:3d:4e:f7:bc:ca:6b:60:0f:e3:59:90:cf:06:fa:
         01:58:90:5f:29:72:63:f4:1b:41:0e:b6:6c:5f:5d:f9:8f:7c:
         b3:84:76:cf:2b:6e:4c:bb:5b:40:08:f4:17:97:ac:c5:15:9e:
         3a:d2:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:25 2026 by rpki-client