Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa
File:                     323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (raw, json)
Hash identifier:          6uEfVOnDlCA/pNIFT5bC9JCmVynI5FIoh7TLhoyhIys=
Subject key identifier:   8E:CE:35:06:EB:64:B8:A2:6F:13:E8:68:CD:FC:1E:83:8A:56:4E:E4
Certificate issuer:       /CN=EC464ACDD6858B613E13B13344BB988E92418A08
Certificate serial:       55E19B5C433200EE930500E6B39850C4A1BCBF79
Authority key identifier: EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa
Signing time:             Sun 03 May 2026 02:40:23 +0000
ROA not before:           Sun 03 May 2026 02:35:23 +0000
ROA not after:            Sun 02 May 2027 02:40:23 +0000
asID:                     134655
IP address blocks:        2404:5980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
                          rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e1:9b:5c:43:32:00:ee:93:05:00:e6:b3:98:50:c4:a1:bc:bf:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC464ACDD6858B613E13B13344BB988E92418A08
        Validity
            Not Before: May  3 02:35:23 2026 GMT
            Not After : May  2 02:40:23 2027 GMT
        Subject: CN=8ECE3506EB64B8A26F13E868CDFC1E838A564EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:a0:d1:c1:a5:d7:40:3b:24:21:14:cf:06:
                    5d:2a:c0:da:20:9a:e6:bb:d6:e3:62:63:1a:8b:0f:
                    88:f5:74:83:93:d1:a1:7a:86:3b:2a:ee:0a:11:a0:
                    51:11:c6:89:e0:05:33:63:e7:09:da:d8:e0:c2:7c:
                    cf:e8:15:83:07:a0:69:6a:2a:87:15:63:ad:b7:0c:
                    20:35:8a:a2:de:fa:94:8d:52:c9:9f:ab:6e:de:c6:
                    a4:c0:ce:03:51:42:ba:22:c6:52:72:f2:47:15:64:
                    79:e4:92:b5:0c:41:ce:b1:0b:8f:63:42:af:c3:a5:
                    65:b0:87:ee:03:ff:17:8d:77:5e:73:0a:ec:c2:37:
                    d6:3d:08:95:90:c7:57:6c:58:c3:4f:77:db:05:18:
                    f2:43:4d:d2:e6:f8:85:28:50:7a:e8:82:eb:06:92:
                    3a:a2:b0:11:ca:99:f2:d4:64:53:15:6a:31:3e:5c:
                    18:d1:cf:00:dc:d2:59:7f:86:5e:3b:7a:52:a0:51:
                    7f:0d:0d:ee:e5:71:88:fa:05:cd:b5:53:20:c8:81:
                    d5:ff:b7:37:54:6c:1b:40:b6:43:e7:59:4c:18:a6:
                    d7:26:4f:f1:6a:6d:16:1a:ba:b8:71:15:b5:b9:b2:
                    d6:28:42:2e:06:52:de:7b:b4:82:54:41:f1:8d:54:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CE:35:06:EB:64:B8:A2:6F:13:E8:68:CD:FC:1E:83:8A:56:4E:E4
            X509v3 Authority Key Identifier:
                keyid:EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:5980::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:f2:2a:04:2a:64:a8:3b:ff:20:e7:d9:33:f6:74:f5:f1:0e:
         40:fa:ef:a3:03:24:fd:18:bf:af:0f:9f:bf:6f:8e:bf:10:ad:
         2c:7b:eb:3d:46:a3:e5:c0:3c:fc:a7:87:59:84:11:f3:39:18:
         f8:42:c9:d7:fd:1e:4c:b4:1a:9c:a2:24:8a:ab:2c:61:a3:8c:
         bb:ea:0e:d3:dd:82:ce:27:b8:f6:1b:73:ad:00:a5:62:df:ac:
         4d:58:93:33:a4:db:c5:1a:f1:e5:62:8a:73:e2:e8:55:cd:41:
         6d:c4:d1:15:0b:db:a9:23:b4:4f:a4:24:b3:f0:0e:59:d8:66:
         3d:ca:c9:5b:6c:ed:3d:4a:6b:90:d5:d5:f3:b5:4f:e6:c7:8a:
         80:84:13:48:d6:a4:a0:ba:d2:52:61:db:4a:d1:19:d9:93:fe:
         7b:cd:37:bb:e5:f6:07:f4:22:62:de:5c:e8:02:16:08:7a:b1:
         bf:cc:c6:3d:01:f3:2f:a4:22:87:70:7d:e7:1e:75:34:ec:da:
         1c:a9:77:5c:5f:7f:69:24:39:f9:4f:11:6f:8c:c1:d4:df:80:
         6a:dc:55:22:e8:30:d8:1d:fc:a7:97:f6:2b:03:09:74:62:a9:
         5c:6c:ca:da:c4:2b:de:3a:14:8e:34:71:1b:91:eb:17:75:db:
         ce:08:15:54
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUVeGbXEMyAO6TBQDms5hQxKG8v3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM0NjRBQ0RENjg1OEI2MTNFMTNCMTMzNDRCQjk4OEU5
MjQxOEEwODAeFw0yNjA1MDMwMjM1MjNaFw0yNzA1MDIwMjQwMjNaMDMxMTAvBgNV
BAMTKDhFQ0UzNTA2RUI2NEI4QTI2RjEzRTg2OENERkMxRTgzOEE1NjRFRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukKDRwaXXQDskIRTPBl0qwNog
mua71uNiYxqLD4j1dIOT0aF6hjsq7goRoFERxongBTNj5wna2ODCfM/oFYMHoGlq
KocVY623DCA1iqLe+pSNUsmfq27exqTAzgNRQroixlJy8kcVZHnkkrUMQc6xC49j
Qq/DpWWwh+4D/xeNd15zCuzCN9Y9CJWQx1dsWMNPd9sFGPJDTdLm+IUoUHrogusG
kjqisBHKmfLUZFMVajE+XBjRzwDc0ll/hl47elKgUX8NDe7lcYj6Bc21UyDIgdX/
tzdUbBtAtkPnWUwYptcmT/FqbRYaurhxFbW5stYoQi4GUt57tIJUQfGNVO5pAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUjs41ButkuKJvE+hozfweg4pWTuQwHwYDVR0j
BBgwFoAU7EZKzdaFi2E+E7EzRLuYjpJBiggwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjkzOWRiZjEtMzA3NS00NTE5LWJhOTAtY2VlOGQzOTc5ZmNkLzAvRUM0NjRBQ0RE
Njg1OEI2MTNFMTNCMTMzNDRCQjk4OEU5MjQxOEEwOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQzQ2NEFDREQ2ODU4QjYxM0UxM0IxMzM0NEJCOTg4RTkyNDE4
QTA4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5MzlkYmYxLTMwNzUtNDUxOS1i
YTkwLWNlZThkMzk3OWZjZC8wLzMyMzQzMDM0M2EzNTM5MzgzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzNDM2MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEWYAwDQYJKoZI
hvcNAQELBQADggEBAHryKgQqZKg7/yDn2TP2dPXxDkD676MDJP0Yv68Pn79vjr8Q
rSx76z1Go+XAPPynh1mEEfM5GPhCydf9Hky0GpyiJIqrLGGjjLvqDtPdgs4nuPYb
c60ApWLfrE1YkzOk28Ua8eViinPi6FXNQW3E0RUL26kjtE+kJLPwDlnYZj3KyVts
7T1Ka5DV1fO1T+bHioCEE0jWpKC60lJh20rRGdmT/nvNN7vl9gf0ImLeXOgCFgh6
sb/Mxj0B8y+kIodwfecedTTs2hypd1xff2kkOflPEW+MwdTfgGrcVSLoMNgd/KeX
9isDCXRiqVxsytrEK946FI40cRuR6xd1284IFVQ=
-----END CERTIFICATE-----
Generated at Wed May 13 09:14:48 2026 by rpki-client