Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/323430323a383263303a3a2f33322d3438203d3e203138303536.roa
File:                     323430323a383263303a3a2f33322d3438203d3e203138303536.roa (raw, json)
Hash identifier:          slMWOkKg1OA+OP/zcUxoXUDIah1vgvG+HFFav6ni4c4=
Subject key identifier:   A4:FD:4B:98:60:FD:E8:4B:EC:C3:B9:65:10:CB:A8:63:8C:29:1D:11
Certificate issuer:       /CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726
Certificate serial:       53952A40F1B40C0CDF1C79850969984FD060EFC8
Authority key identifier: 7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/323430323a383263303a3a2f33322d3438203d3e203138303536.roa
Signing time:             Sun 03 May 2026 02:39:24 +0000
ROA not before:           Sun 03 May 2026 02:34:24 +0000
ROA not after:            Sun 02 May 2027 02:39:24 +0000
asID:                     18056
IP address blocks:        2402:82c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl
                          rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:95:2a:40:f1:b4:0c:0c:df:1c:79:85:09:69:98:4f:d0:60:ef:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726
        Validity
            Not Before: May  3 02:34:24 2026 GMT
            Not After : May  2 02:39:24 2027 GMT
        Subject: CN=A4FD4B9860FDE84BECC3B96510CBA8638C291D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:60:40:73:10:19:d6:aa:7c:03:ca:9a:aa:95:
                    e7:2a:dc:75:59:e8:5e:3e:69:48:ff:54:61:21:77:
                    09:5e:e0:27:1a:1c:9b:0a:ec:98:a1:c9:6b:91:8b:
                    d3:ae:29:b2:cb:ef:83:dd:6b:0a:f8:19:b2:0e:aa:
                    9e:0f:3a:30:fd:05:1e:a6:fb:ef:3c:a8:0c:7d:8e:
                    83:ea:a1:86:78:c0:ee:13:84:98:1b:f2:0f:11:ef:
                    72:89:3d:f5:56:b3:07:cb:bb:8c:f1:39:b1:fc:71:
                    c0:59:70:90:db:40:90:02:1a:c8:f3:85:7c:68:4d:
                    f4:eb:4a:ac:95:82:e1:96:b9:83:ef:9e:43:0f:74:
                    f0:e4:b7:61:48:77:70:c5:61:08:b9:41:fa:cd:4d:
                    d9:43:c3:e9:87:de:b0:60:fa:77:28:c4:12:03:06:
                    be:e9:ba:bd:43:66:44:c7:15:74:1d:dd:a5:69:87:
                    25:a8:ab:f9:cc:ed:bb:50:9d:fb:b0:1f:93:c9:3f:
                    1e:56:22:d8:84:5a:e8:bb:8b:cc:05:89:cd:7c:c2:
                    b5:04:72:c3:c6:9b:e8:bb:b8:61:51:6f:50:8b:88:
                    aa:b5:48:49:3f:bb:2a:1c:22:fc:e4:6a:4f:e3:74:
                    32:00:99:7c:c3:b8:81:f1:68:23:2c:e2:88:02:0e:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FD:4B:98:60:FD:E8:4B:EC:C3:B9:65:10:CB:A8:63:8C:29:1D:11
            X509v3 Authority Key Identifier:
                keyid:7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/323430323a383263303a3a2f33322d3438203d3e203138303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:82c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:83:37:49:f0:a7:e3:2a:98:2b:7b:3e:e4:32:cf:f0:ec:12:
         5c:e0:be:e6:fa:00:71:68:22:f2:98:ff:ff:42:29:2c:b3:ab:
         c6:9b:38:d9:5b:15:49:50:e2:75:fb:39:5f:c0:45:35:25:48:
         80:7c:e4:df:ba:f1:08:76:ff:88:55:32:b1:b3:41:e1:1b:5a:
         b8:a2:db:2f:70:90:27:4e:09:60:a4:c6:83:44:f6:f5:5e:37:
         7f:88:b2:ec:19:d6:20:0b:c8:4e:20:14:ce:03:e3:a6:d5:94:
         22:a4:f6:82:5b:2a:50:d8:cf:48:fd:91:40:95:66:40:2f:07:
         c7:6f:78:bd:5a:ab:b0:dd:e3:5f:38:93:da:47:82:29:dc:e2:
         f3:ab:7e:b0:ec:e3:29:99:ce:cd:6c:82:2b:28:05:32:ea:54:
         b6:0e:16:54:c6:08:07:e2:ff:4f:64:14:79:72:68:d6:41:58:
         20:9a:71:37:d2:5f:b3:f2:f9:d4:3e:1b:69:15:7c:65:a0:59:
         60:59:a5:28:58:62:58:fb:40:1a:19:c5:75:cd:d7:a9:7a:23:
         c0:c0:ee:ed:b6:50:a3:66:96:a1:bf:d8:ba:2e:8b:31:5e:7d:
         5f:21:10:5c:41:1a:be:e5:55:f8:ad:ba:ba:00:b6:70:bb:ae:
         3a:33:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:44 2026 by rpki-client