Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/323430313a666363303a3a2f33322d3332203d3e203535363939.roa
File:                     323430313a666363303a3a2f33322d3332203d3e203535363939.roa (raw, json)
Hash identifier:          T5iXYEZsEylyp3JdGzhmtU2Kjr1HhNQabu6sAc+svIA=
Subject key identifier:   8C:12:89:42:5E:E4:A5:5D:9D:0A:40:9F:7F:E9:21:82:F6:87:14:EC
Certificate issuer:       /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B
Certificate serial:       6DE13A4AB76481F0FC32DF935BFC86B3CEB6F982
Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/323430313a666363303a3a2f33322d3332203d3e203535363939.roa
Signing time:             Sun 03 May 2026 02:40:04 +0000
ROA not before:           Sun 03 May 2026 02:35:04 +0000
ROA not after:            Sun 02 May 2027 02:40:04 +0000
asID:                     55699
IP address blocks:        2401:fcc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl
                          rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e1:3a:4a:b7:64:81:f0:fc:32:df:93:5b:fc:86:b3:ce:b6:f9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B
        Validity
            Not Before: May  3 02:35:04 2026 GMT
            Not After : May  2 02:40:04 2027 GMT
        Subject: CN=8C1289425EE4A55D9D0A409F7FE92182F68714EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e5:e9:e0:d0:60:a3:26:19:7b:62:fe:56:5b:
                    ea:a8:c7:1e:f7:01:4e:81:62:9c:6c:e7:f0:df:2f:
                    48:1b:a3:0e:0e:01:a2:75:23:06:1b:7c:17:8b:32:
                    b3:e0:23:b3:e7:ea:9a:60:61:49:fa:fe:01:6c:52:
                    1b:b6:bb:51:55:6b:f8:33:a6:a8:fc:74:31:a5:40:
                    1e:2a:cd:21:06:4e:ed:00:94:4c:e8:48:73:20:b5:
                    44:68:30:58:3e:ec:56:51:54:e1:18:6a:0a:6c:62:
                    0e:82:f9:0a:1a:63:76:bb:93:f2:74:2a:12:a2:29:
                    2c:9f:4d:2b:91:2d:4b:86:e5:cb:d4:58:fc:24:d2:
                    9a:e4:0c:25:61:22:52:2c:0b:e7:8f:0e:70:16:7a:
                    18:70:a3:7e:b9:8f:3c:ca:53:6c:e5:fb:40:84:a7:
                    d3:0a:75:83:8c:29:1f:cf:1d:40:9e:77:13:3e:bf:
                    df:11:a2:73:a9:c5:1a:bb:3a:3f:67:89:a2:dd:b9:
                    fe:f4:a2:44:b3:2a:41:d4:37:9e:63:63:ce:48:f1:
                    d8:dd:ae:ed:b0:bc:15:dc:db:37:fc:97:71:7c:54:
                    8a:ee:fa:20:ff:bd:4e:b9:05:ff:8e:e3:f1:fc:d2:
                    f8:5d:4d:fc:d4:dd:da:cc:1c:81:ba:ec:5f:01:cc:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:12:89:42:5E:E4:A5:5D:9D:0A:40:9F:7F:E9:21:82:F6:87:14:EC
            X509v3 Authority Key Identifier:
                keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/323430313a666363303a3a2f33322d3332203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:fcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:cc:3a:28:b5:36:72:a4:fe:f5:83:03:e5:19:39:76:fc:53:
         7d:b7:56:ac:01:b4:c7:83:b5:e8:86:3f:73:9e:ac:a5:fb:58:
         13:59:0a:a8:49:35:cf:84:50:63:94:95:21:d1:36:d8:a2:fe:
         db:37:60:fc:fa:09:70:d2:86:d2:a6:03:1b:ab:c8:ce:a8:22:
         39:f6:5f:12:04:58:b2:e1:a4:36:92:8f:3e:26:cd:95:90:42:
         06:e3:26:84:0e:bf:56:b0:6d:9e:cc:ad:13:f6:2e:06:35:8d:
         81:6e:da:53:29:dd:8c:14:ba:bf:f4:23:88:5f:13:4d:87:99:
         d0:5e:92:f7:fe:30:12:d1:17:ca:e3:ae:fc:e3:8f:b4:b8:61:
         33:54:68:bd:0c:77:00:60:10:c6:13:fb:3c:45:11:9d:14:b8:
         2f:09:aa:d0:78:4f:3c:93:79:74:a2:f1:71:ff:c9:68:ac:f6:
         6e:62:f9:d9:3a:a5:5a:dd:ee:3d:e4:5d:15:36:50:fe:02:be:
         d6:16:9a:de:75:d6:70:4b:cc:ea:91:c6:8b:1b:d6:d9:0a:49:
         c9:1c:a3:0b:c0:97:1a:cb:5d:44:da:e2:66:bc:a3:df:db:dd:
         fc:e1:bf:b5:6c:77:fb:7d:6d:ac:86:56:dd:91:d7:08:17:61:
         35:5e:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:27:00 2026 by rpki-client