Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/323430353a366334303a3a2f33322d3438203d3e203234353237.roa
File:                     323430353a366334303a3a2f33322d3438203d3e203234353237.roa (raw, json)
Hash identifier:          9vIrzXo0hOqXg/rk1f6nwh6INf+P7PQpW2N95A+iLj4=
Subject key identifier:   C8:E9:69:0F:6E:3C:B8:6B:A9:D8:3C:94:E3:87:7B:EC:0C:6A:38:FF
Certificate issuer:       /CN=45E5895753396A59380E8B15A613362BDD0B9399
Certificate serial:       586CA388AA3CB7DFFEB3C85274E8A2B06435128D
Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/323430353a366334303a3a2f33322d3438203d3e203234353237.roa
Signing time:             Sun 03 May 2026 02:40:09 +0000
ROA not before:           Sun 03 May 2026 02:35:09 +0000
ROA not after:            Sun 02 May 2027 02:40:09 +0000
asID:                     24527
IP address blocks:        2405:6c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl
                          rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6c:a3:88:aa:3c:b7:df:fe:b3:c8:52:74:e8:a2:b0:64:35:12:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399
        Validity
            Not Before: May  3 02:35:09 2026 GMT
            Not After : May  2 02:40:09 2027 GMT
        Subject: CN=C8E9690F6E3CB86BA9D83C94E3877BEC0C6A38FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:f6:31:dc:0a:63:6f:52:c2:ab:04:bd:26:
                    9e:c1:11:2d:a1:38:aa:61:73:96:c5:da:3c:4e:b9:
                    54:1c:05:17:a7:55:cb:c9:69:01:bc:9f:f4:eb:cb:
                    ff:1a:83:de:08:0e:50:af:f9:d5:a1:1c:a4:ec:67:
                    0b:f2:cf:37:d5:45:2f:c5:b0:91:59:29:ee:50:4b:
                    a1:cf:f6:88:cc:3d:0d:55:e4:98:43:b3:4c:a4:1a:
                    e7:b0:00:b9:43:07:e0:cb:c5:84:7a:33:c1:36:08:
                    30:5a:1d:1a:a1:37:3d:e5:a0:70:d1:59:d2:53:88:
                    fe:34:3b:64:70:98:0b:12:5a:6f:16:ad:11:cf:ed:
                    2a:61:60:a6:d0:16:a3:da:a8:73:b3:66:ff:31:f8:
                    9d:0d:b0:eb:92:87:77:27:1c:02:de:73:4f:f1:02:
                    1b:74:1c:cc:2a:41:5a:81:7f:61:60:0b:b5:ef:66:
                    b8:22:ff:36:cc:cf:34:d9:b8:32:6e:95:d3:d9:a2:
                    ef:50:d7:a3:83:55:04:44:27:06:8d:e7:fb:fd:e6:
                    c4:58:43:c7:43:a7:7c:01:9e:e3:b9:26:2e:46:b4:
                    2d:68:06:fe:22:fa:e8:0e:03:30:7f:13:6f:a6:bd:
                    f7:22:48:75:6a:7c:39:8b:79:e1:5e:57:c3:f3:27:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E9:69:0F:6E:3C:B8:6B:A9:D8:3C:94:E3:87:7B:EC:0C:6A:38:FF
            X509v3 Authority Key Identifier:
                keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/323430353a366334303a3a2f33322d3438203d3e203234353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:79:dc:2b:bc:a4:fb:77:a8:e7:c2:b5:b0:b5:de:aa:72:
         e3:63:17:dc:7d:72:d0:c6:c5:db:51:db:e5:35:03:58:18:4a:
         c1:dc:a3:b4:e6:e3:0c:02:46:fe:b5:af:b5:00:f0:93:2b:af:
         0c:92:a0:7b:8b:96:99:0d:c5:85:eb:64:fa:cd:06:82:c3:fa:
         ee:3b:b2:05:59:93:d9:7b:00:4e:0b:79:4a:49:95:17:11:8f:
         e8:ef:79:5d:15:af:6b:f3:4b:19:76:87:fc:c0:d2:26:53:9f:
         f1:fe:9f:bf:cb:98:03:7f:35:62:9a:8d:97:c6:f8:d4:12:0c:
         50:ce:92:2e:64:58:11:c5:84:c9:42:bb:25:71:81:ab:09:7c:
         15:cc:2a:a0:99:f3:33:7c:7d:6e:f2:96:8c:8f:a8:9c:c1:aa:
         e4:33:e2:f4:01:3a:51:71:70:27:b7:eb:cb:56:a7:ca:5b:06:
         64:ca:fc:bb:79:24:02:7b:85:d9:3d:f8:54:13:36:f2:fb:d0:
         75:df:05:ed:1e:f9:7b:43:fd:8a:09:95:5b:ff:a2:ea:13:67:
         32:4e:48:98:10:39:2e:a1:66:59:65:04:b3:2b:0a:1e:68:94:
         b8:8a:6a:58:f0:bd:08:67:b1:f6:28:ad:5c:6b:6a:77:41:11:
         74:e7:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:27 2026 by rpki-client