Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa
File:                     323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier:          pbLRqvIGcFyn/7m6CqlnX9OGnnf//u2PTw4LD4ws3V0=
Subject key identifier:   24:18:BA:7E:06:C4:BA:04:3F:39:64:AD:E5:B1:87:8F:6D:EB:64:CC
Certificate issuer:       /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial:       1FABCB0EBB1D205D69C523CA37CF308C7EB7063F
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa
Signing time:             Sun 03 May 2026 02:41:04 +0000
ROA not before:           Sun 03 May 2026 02:36:04 +0000
ROA not after:            Sun 02 May 2027 02:41:04 +0000
asID:                     38515
IP address blocks:        2402:600:5414::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ab:cb:0e:bb:1d:20:5d:69:c5:23:ca:37:cf:30:8c:7e:b7:06:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
        Validity
            Not Before: May  3 02:36:04 2026 GMT
            Not After : May  2 02:41:04 2027 GMT
        Subject: CN=2418BA7E06C4BA043F3964ADE5B1878F6DEB64CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:ba:78:c1:4f:f3:83:47:ee:b1:1d:58:2d:
                    fa:65:17:ae:61:a8:15:8d:ca:94:5b:b5:36:33:6c:
                    c1:d6:78:ff:3e:98:38:07:98:4c:18:25:62:92:b5:
                    92:3c:08:07:4f:6c:b9:20:32:0f:53:f2:0b:3f:93:
                    d2:6c:dd:fe:22:3d:19:59:89:4c:ea:9e:71:7c:9f:
                    1e:3f:38:38:98:8d:2d:f0:d2:7c:41:6d:58:f0:c3:
                    38:64:b6:ba:03:a1:cf:5e:74:31:d5:5b:d8:fb:a7:
                    5e:aa:f0:92:f0:d2:c5:14:78:bd:a9:1a:eb:af:36:
                    44:7a:db:bb:c3:8a:4e:89:68:04:84:31:08:2c:35:
                    ec:4b:2e:d1:2c:89:c8:44:7f:b5:1f:85:63:37:e5:
                    3d:94:b5:27:68:35:a5:b0:c7:91:25:04:f8:5f:d4:
                    0e:ea:df:fc:3f:a2:e5:be:f3:21:12:c2:37:3b:99:
                    6b:ab:0c:64:dc:46:9c:ca:70:0a:48:ea:f9:39:0f:
                    f6:6f:4c:76:8e:68:13:4f:94:8e:e1:9a:3d:18:4a:
                    77:75:1b:3d:c2:da:df:30:6d:7d:c3:70:c7:91:46:
                    9e:c9:f5:b7:73:c9:c1:b2:bb:b4:3e:be:49:f1:ab:
                    50:eb:f1:3b:1d:92:d0:d8:e7:89:b3:cd:a1:d5:a8:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:18:BA:7E:06:C4:BA:04:3F:39:64:AD:E5:B1:87:8F:6D:EB:64:CC
            X509v3 Authority Key Identifier:
                keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:600:5414::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:7d:f2:b2:6d:43:d2:bc:a2:3a:91:60:52:eb:7f:e6:69:e3:
         26:88:02:b8:f2:c8:7c:58:22:30:69:c2:6f:bd:ea:9f:32:62:
         14:85:bf:f5:36:a7:4a:d5:cb:7d:e2:d1:93:a6:8e:3f:b6:23:
         97:22:44:a7:54:fb:c0:49:f7:09:82:02:46:70:f0:ec:8a:0b:
         2c:c8:90:b0:ca:d3:ab:a2:1c:21:f1:68:9b:7f:78:3c:45:18:
         9c:aa:9d:62:47:b7:df:5d:fa:dc:11:f5:91:1a:cb:11:68:18:
         7c:d0:31:56:24:a4:97:de:f5:17:46:73:5e:84:6c:f6:76:45:
         93:0e:9f:62:07:2c:f0:bf:32:98:4d:b5:93:1c:30:b6:4c:d1:
         f9:26:eb:3a:4c:3d:5b:75:93:ac:05:3f:39:00:1c:a4:58:60:
         27:07:30:87:10:d5:a8:6f:6d:59:9d:72:0a:0a:29:02:42:7c:
         ad:27:e8:7b:8c:f2:21:71:bb:14:5a:7e:2a:3b:8e:3a:ca:7d:
         80:68:19:eb:70:09:a4:72:66:91:e2:b2:65:f2:39:37:15:5c:
         78:b4:c8:44:07:5e:4a:bc:f1:1c:7b:71:52:37:23:fa:e1:fb:
         62:64:43:a6:e2:38:23:59:df:b4:88:2c:76:bd:f2:de:63:92:
         9b:c1:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:27 2026 by rpki-client