Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/323430343a663930303a3a2f33322d3438203d3e203538343832.roa
File:                     323430343a663930303a3a2f33322d3438203d3e203538343832.roa (raw, json)
Hash identifier:          h+uWSZuw4Wm95tPmge6aZ1N5h0ry5Z+IstZYIcPR9Us=
Subject key identifier:   C6:66:05:38:C2:C4:94:05:CF:F5:60:1D:03:87:3F:A5:01:AD:21:A7
Certificate issuer:       /CN=797581F67816C4132050EC6348DBB15EBC5C0189
Certificate serial:       61AEBAA04A6AA59544AA79FBA6B720C3B307A01F
Authority key identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/323430343a663930303a3a2f33322d3438203d3e203538343832.roa
Signing time:             Sun 03 May 2026 02:40:44 +0000
ROA not before:           Sun 03 May 2026 02:35:44 +0000
ROA not after:            Sun 02 May 2027 02:40:44 +0000
asID:                     58482
IP address blocks:        2404:f900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
                          rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ae:ba:a0:4a:6a:a5:95:44:aa:79:fb:a6:b7:20:c3:b3:07:a0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797581F67816C4132050EC6348DBB15EBC5C0189
        Validity
            Not Before: May  3 02:35:44 2026 GMT
            Not After : May  2 02:40:44 2027 GMT
        Subject: CN=C6660538C2C49405CFF5601D03873FA501AD21A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:5b:73:e6:d8:2b:57:e2:a4:3e:ec:d6:ce:
                    d5:6e:c7:30:35:3c:82:48:39:2c:37:bf:96:a9:9c:
                    e4:e5:14:36:b3:23:1a:9d:5c:83:17:d2:3a:1d:42:
                    9e:ed:a6:ae:ea:5c:c8:3c:f1:93:6f:98:a7:db:14:
                    fd:dc:0d:67:66:f0:01:2d:7b:90:66:8a:60:0d:34:
                    f2:b7:35:73:fc:b0:3f:8b:7e:58:15:21:5e:20:7d:
                    66:d2:d0:ad:1b:e6:68:ee:7e:3b:0f:4a:84:4d:17:
                    bc:e5:02:ca:f8:07:d9:82:2a:ba:3c:08:0a:0e:3e:
                    de:53:5e:08:85:96:7b:ad:ed:1e:f3:35:fb:a5:46:
                    d7:5b:1e:0e:2f:35:6c:b4:e5:18:8f:d7:b8:2d:6b:
                    f7:33:f2:5a:29:a8:aa:f5:89:d3:81:37:bd:a0:ec:
                    54:27:02:fe:c9:4a:66:a5:99:91:3d:59:2d:91:0f:
                    23:26:30:13:c5:16:65:96:55:2c:d3:fb:48:60:66:
                    32:3b:ab:02:46:23:31:ca:7e:ee:a5:ac:98:5f:7d:
                    08:4a:94:53:e7:cf:cd:01:28:f1:93:41:77:35:6c:
                    54:91:e4:c0:04:e3:d1:4c:5e:5a:fb:1b:ae:9a:47:
                    ef:90:99:8b:81:2f:08:88:78:b4:26:18:d4:bf:8c:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:66:05:38:C2:C4:94:05:CF:F5:60:1D:03:87:3F:A5:01:AD:21:A7
            X509v3 Authority Key Identifier:
                keyid:79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/323430343a663930303a3a2f33322d3438203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f900::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:a5:5b:f9:14:34:50:c0:af:dd:ad:4d:c2:d9:a8:2b:ae:2c:
         76:cd:9c:7f:8b:2d:df:b3:42:40:5c:23:ce:76:de:c0:5e:be:
         7b:e9:10:e8:a1:9e:af:5c:2b:9a:63:e2:27:3a:b4:7a:93:4a:
         a1:82:99:ff:f5:ed:00:0b:0f:06:1a:1d:76:41:a1:a3:47:e5:
         ca:f4:d5:2a:1b:8e:6a:3d:42:4e:d8:29:24:b1:1f:4c:8c:35:
         7f:7e:b0:85:b8:cd:20:70:5a:6d:21:60:f1:cc:54:af:71:cf:
         a9:3c:6f:6e:33:75:37:2e:fe:81:02:d0:98:65:ad:98:53:fc:
         7e:20:76:1f:0b:4b:c0:a3:9f:d9:ce:7c:56:d3:84:f6:b2:a5:
         f9:34:ac:e6:39:3d:3a:6c:59:0d:10:74:2d:ce:52:12:a4:b1:
         ed:36:2e:ba:41:46:ba:7e:0e:94:be:df:2f:b8:02:95:9f:81:
         dc:74:25:ac:44:61:33:fd:c9:ed:c8:b4:70:ae:dd:45:95:55:
         39:ff:2b:3f:89:ce:63:a1:a4:0c:f6:ad:80:68:86:09:10:6a:
         8e:cd:ef:f9:08:7b:20:f9:b1:32:4b:91:2d:3c:de:a7:ed:11:
         07:60:ef:cd:39:99:50:d1:85:d3:73:39:45:39:b6:33:e8:e4:
         78:98:76:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:44 2026 by rpki-client