Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa
File:                     323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier:          T1nc91DmBxWyircdZzFzbDxGxyovVe7DPHahSvPllcY=
Subject key identifier:   0D:39:8D:F4:FC:A0:2B:85:61:BD:50:E4:CE:2C:47:92:13:5C:1B:33
Certificate issuer:       /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial:       67B0BCE87781385ACB28ECB0928E0BE929FA0DDC
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa
Signing time:             Sun 03 May 2026 02:41:09 +0000
ROA not before:           Sun 03 May 2026 02:36:09 +0000
ROA not after:            Sun 02 May 2027 02:41:09 +0000
asID:                     38515
IP address blocks:        2402:600:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b0:bc:e8:77:81:38:5a:cb:28:ec:b0:92:8e:0b:e9:29:fa:0d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
        Validity
            Not Before: May  3 02:36:09 2026 GMT
            Not After : May  2 02:41:09 2027 GMT
        Subject: CN=0D398DF4FCA02B8561BD50E4CE2C4792135C1B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:9b:d0:4f:6e:7e:e2:3d:81:15:c8:08:c3:
                    1c:d7:e5:62:60:9d:8f:b7:2d:bf:5f:0a:e6:2d:fa:
                    86:36:17:0a:8b:19:b6:8c:67:e6:41:3b:72:04:9a:
                    87:59:99:ba:eb:1e:08:51:4f:2b:ed:7c:a7:fd:60:
                    8c:9d:dc:3c:91:0b:09:83:4b:9f:69:1c:ac:c2:8b:
                    d4:7f:67:15:0e:88:4a:b4:a5:11:23:1e:9b:f3:f3:
                    ef:a5:a1:7c:9b:48:03:14:97:be:3f:f6:5e:7c:70:
                    4e:4b:48:84:5c:9b:e5:43:9a:d9:c5:e1:02:86:4e:
                    b1:62:c5:bb:d5:e8:ad:e5:52:a0:77:7a:3d:32:ca:
                    ff:ae:1c:a8:d9:df:29:60:8e:52:ee:3d:8f:b5:e4:
                    cc:a1:6f:bb:9d:a8:df:95:b2:0f:ab:bc:81:32:ca:
                    1f:4c:09:57:3b:7a:04:53:c8:ef:04:df:6d:0b:19:
                    15:96:f6:93:2c:61:bc:66:c3:49:57:21:80:1a:12:
                    2e:d5:6a:47:73:9e:b3:cb:83:d2:6d:70:f8:66:c1:
                    30:b8:c2:36:23:bf:b2:27:80:de:52:30:d1:43:76:
                    57:92:8b:d8:38:30:45:8f:0d:83:97:89:cf:f4:5e:
                    64:df:d1:94:6b:b3:8a:d5:a7:18:69:42:4b:80:77:
                    18:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:39:8D:F4:FC:A0:2B:85:61:BD:50:E4:CE:2C:47:92:13:5C:1B:33
            X509v3 Authority Key Identifier:
                keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:600:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:f7:bd:ac:cb:08:2e:99:d6:6b:5a:88:77:d6:b8:1f:86:
         32:37:6f:a5:9f:71:f4:5d:f8:67:2c:5a:c1:1e:dd:66:aa:e0:
         b4:ca:15:0b:37:4d:1f:ca:8b:8e:c7:e4:de:0b:a9:f7:07:8c:
         ba:3b:88:69:3a:02:fb:52:3c:3d:d8:47:76:a9:fe:6a:68:37:
         d9:77:77:e3:94:e8:7b:cc:79:63:0e:68:a1:fe:e4:b7:09:b6:
         8a:f1:dc:e4:cb:2e:ee:4f:b8:90:5b:7c:1f:bc:d9:b1:40:8a:
         eb:35:58:ff:7f:b6:1f:12:9d:f7:8c:8c:a3:89:9e:23:12:10:
         70:99:fd:f9:71:ea:13:1e:f3:a9:88:fa:20:a0:8e:23:56:8e:
         e5:cb:c7:a8:e4:ee:8f:3f:cb:86:21:dc:9f:fe:24:2f:6a:2a:
         78:8d:94:05:8b:68:7f:01:3f:53:0c:ff:fc:11:a6:4f:f1:94:
         2b:71:6d:13:6b:e4:e6:0f:47:0b:de:49:47:7e:12:e1:43:1f:
         21:41:d4:fd:c3:65:be:b5:c1:3c:16:93:81:04:97:68:be:36:
         63:54:4e:7d:b4:93:ea:b3:17:7d:1a:12:d0:0f:cd:bf:53:2d:
         67:c5:58:a1:9a:9f:27:37:26:a9:99:59:49:eb:31:0a:23:0c:
         74:41:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:20 2026 by rpki-client