Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          51Yinj8C2sS4DSwjTYZsRI/AnAjwU9VsQNi5t7TzYqY=
Subject key identifier:   FE:5D:01:78:B5:37:8E:81:C8:C6:BB:F6:25:50:08:DE:88:F9:06:D6
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       1CA717F0A1760BFD3883CB4A9D76B4EAB519E768
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:21 +0000
ROA not before:           Sun 03 May 2026 02:36:21 +0000
ROA not after:            Sun 02 May 2027 02:41:21 +0000
asID:                     137316
IP address blocks:        2402:7ac0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a7:17:f0:a1:76:0b:fd:38:83:cb:4a:9d:76:b4:ea:b5:19:e7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:21 2026 GMT
            Not After : May  2 02:41:21 2027 GMT
        Subject: CN=FE5D0178B5378E81C8C6BBF6255008DE88F906D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:00:a6:d2:9c:08:0c:68:f5:78:93:e2:5b:6c:
                    81:03:85:42:de:a1:f9:c3:73:c9:19:66:fe:53:b5:
                    11:fd:a2:7c:c5:7b:2a:94:a1:11:05:83:a0:6e:24:
                    28:f7:38:1e:69:61:14:0b:3e:64:c6:71:65:68:6b:
                    ea:2d:a1:99:38:c3:8b:7d:e8:17:de:f1:28:67:70:
                    2c:00:3b:13:96:89:92:a1:80:8d:e9:c8:b3:48:41:
                    fe:42:3f:65:79:ac:e4:d4:90:5a:70:e6:5a:06:f8:
                    06:5d:6d:7c:f6:92:ca:90:a7:88:00:55:40:9a:0e:
                    a8:af:6a:80:64:d5:1b:72:14:76:f9:4d:8c:12:6d:
                    e1:c9:00:24:6a:4c:62:60:02:45:18:45:2b:78:d3:
                    d5:60:d5:5f:a7:a9:d1:f3:d6:86:1a:7f:ca:4d:29:
                    a6:f1:b7:4f:e1:95:3f:16:ed:c2:9f:b3:35:36:23:
                    02:96:16:97:16:68:b9:bd:77:5b:d4:fa:18:37:8f:
                    6e:54:21:b0:95:d1:a6:1f:59:37:83:65:8e:f9:ad:
                    a1:6b:ad:d1:a9:70:c7:bb:4f:9c:70:0f:f8:49:04:
                    73:74:e4:4d:bf:b6:5d:c6:27:06:43:e5:37:07:c3:
                    70:a3:01:41:05:78:a9:35:98:69:3f:cf:98:ae:03:
                    db:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5D:01:78:B5:37:8E:81:C8:C6:BB:F6:25:50:08:DE:88:F9:06:D6
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:a5:52:f2:c5:b0:f9:d1:ad:71:d6:9b:1a:43:c4:7b:63:b3:
         a5:84:e6:42:b4:15:7e:9a:95:c2:79:62:c5:eb:ce:1e:29:6e:
         ba:0a:8e:18:e4:46:4c:10:dd:65:6f:25:9d:91:80:e1:17:e7:
         e3:29:e1:a9:7b:be:9d:e7:93:eb:b1:6c:84:36:1a:93:41:6f:
         10:3a:f4:02:d2:e1:6e:40:4d:a8:76:4e:0c:39:ef:30:85:79:
         84:28:06:f1:57:25:3e:2e:9f:e3:dd:75:60:52:a1:d4:3f:ec:
         03:39:cc:19:fd:09:9a:07:da:b0:10:cc:ff:69:d7:12:90:5e:
         ab:d4:33:4b:8f:97:e3:b7:3f:16:9e:42:54:67:90:1c:df:33:
         2d:70:f0:e4:62:d7:ca:1d:cd:67:40:96:0e:09:df:b8:1c:42:
         da:99:a4:19:8e:42:19:f3:a7:2e:eb:3b:95:1b:6b:5c:f9:a5:
         64:d1:a9:57:77:ec:16:24:6f:2e:4f:2a:70:51:eb:d3:ae:83:
         b3:e6:8e:b6:cf:22:de:df:48:78:4c:26:e8:18:91:27:ca:74:
         32:ff:c7:ab:cf:5e:38:10:dc:6d:a5:43:0b:42:ba:c1:ad:49:
         db:24:27:4e:9d:9d:a2:00:41:ae:cb:17:8c:5f:a0:ab:3c:e7:
         04:3d:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:32 2026 by rpki-client