Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a333030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a333030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          kVqRKPFTx1+3uBA38QpRDYM9MmzaEzDA4TVa6Orjj/Q=
Subject key identifier:   83:36:1C:71:A9:96:3E:BE:0E:45:7A:A7:7E:B4:E6:C5:EF:7C:88:B3
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       211D502DCC12C6015E4D73C110B9B02407A4F224
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a333030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:24 +0000
ROA not before:           Sun 03 May 2026 02:36:24 +0000
ROA not after:            Sun 02 May 2027 02:41:24 +0000
asID:                     137316
IP address blocks:        2402:7ac0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1d:50:2d:cc:12:c6:01:5e:4d:73:c1:10:b9:b0:24:07:a4:f2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:24 2026 GMT
            Not After : May  2 02:41:24 2027 GMT
        Subject: CN=83361C71A9963EBE0E457AA77EB4E6C5EF7C88B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2e:0c:94:b6:e2:1b:50:c6:ab:24:ce:f8:65:
                    42:b5:68:fe:9f:4d:19:c1:86:26:d9:23:ed:0b:60:
                    a1:2a:07:88:66:e9:70:3f:bf:c8:95:25:23:49:c2:
                    69:23:9c:1e:ff:54:f5:c7:d6:8f:4c:c5:c1:64:95:
                    1f:75:ef:a2:f6:7d:00:3a:13:38:47:b1:fe:48:bc:
                    74:65:dc:f6:84:c1:8e:f2:6e:a2:eb:6c:54:a1:bf:
                    6f:06:38:d4:ef:93:7f:41:8b:ca:c7:63:87:45:d1:
                    5b:ff:4c:8e:ee:a5:41:c5:39:e0:17:16:90:01:cd:
                    28:a5:1b:8a:f0:2c:51:01:02:9d:bd:5e:3e:cc:9a:
                    7e:32:e3:f6:5c:fd:c5:d2:5c:1c:57:94:c4:cd:2b:
                    2d:5d:d4:41:c4:de:cc:a3:b7:d1:b2:50:6f:75:ad:
                    f9:4f:ce:05:ea:ac:9c:d8:3a:f4:49:17:c6:2c:17:
                    ee:c4:4c:b4:af:a4:02:0f:96:53:4c:ce:1e:50:07:
                    1b:4b:e2:34:b5:68:e3:aa:12:8d:f1:eb:f9:b3:5b:
                    41:e2:8e:5d:94:91:f1:23:06:99:30:9c:80:52:92:
                    7e:ff:ee:a4:0f:25:2e:5e:b5:8a:b9:a5:a1:76:f0:
                    6e:96:60:df:6c:22:c3:de:c2:ac:a3:5a:ef:8a:cb:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:36:1C:71:A9:96:3E:BE:0E:45:7A:A7:7E:B4:E6:C5:EF:7C:88:B3
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a333030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:fc:59:b1:9d:54:c9:c7:10:41:f7:5d:40:bd:68:80:46:76:
         63:bd:ba:12:cd:90:11:be:1b:4a:b8:56:15:2d:a8:65:ea:b5:
         b6:54:f6:8f:ed:90:c8:9d:4d:51:9e:67:80:8c:41:f1:d0:fa:
         cc:57:8d:1c:da:da:c7:a2:52:19:ca:08:2a:83:d7:e8:d0:46:
         c0:54:30:15:3a:6c:b0:4e:66:77:91:6f:93:c4:47:69:76:ad:
         c5:96:91:71:1f:f9:61:06:09:f9:56:d2:42:71:c9:a3:03:f4:
         a8:d2:d9:48:38:32:fb:d9:53:45:84:da:11:51:72:56:a3:c7:
         35:08:87:50:8b:68:99:60:10:64:d9:81:09:e4:64:25:54:c2:
         ad:ad:5e:55:5d:46:e9:e0:2e:a6:a1:23:a1:91:d2:e3:ce:38:
         df:ce:ad:39:a9:86:d6:c1:fd:91:56:e2:bd:f7:e7:ed:3d:8f:
         de:92:82:27:1c:03:63:a1:22:f3:3b:aa:d0:a6:f8:9c:7a:cb:
         5d:69:51:6f:f5:82:51:b0:52:7f:ab:8c:ae:22:1b:49:c7:da:
         d0:a4:00:44:19:52:d3:5a:e9:1b:59:b1:32:22:a6:cb:66:6d:
         10:a9:71:01:dc:bb:ab:c4:b0:76:96:79:4a:47:90:c3:c1:5e:
         0a:5e:5e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:52 2026 by rpki-client