Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          o9yY+uZqgkv3Sqb81WO1heY9lf7s7tUc89wfOdr/ODE=
Subject key identifier:   72:8D:41:E0:58:BA:5B:EB:BE:DF:F5:8E:81:6F:72:66:F3:1F:40:DD
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       3633812353B320E73E4443E5F8A383D716FFF5DB
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:19 +0000
ROA not before:           Sun 03 May 2026 02:36:19 +0000
ROA not after:            Sun 02 May 2027 02:41:19 +0000
asID:                     137316
IP address blocks:        2402:7ac0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:33:81:23:53:b3:20:e7:3e:44:43:e5:f8:a3:83:d7:16:ff:f5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:19 2026 GMT
            Not After : May  2 02:41:19 2027 GMT
        Subject: CN=728D41E058BA5BEBBEDFF58E816F7266F31F40DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a5:ee:8a:61:62:48:c8:02:40:e6:6c:f2:6e:
                    2f:28:ad:c9:6e:7d:dc:ba:9e:e1:7d:d6:ba:57:04:
                    a5:71:6e:a3:4a:25:25:8d:58:fd:42:74:52:79:8e:
                    7d:74:48:85:8f:c3:59:72:d6:2c:b4:48:1f:3d:2c:
                    3c:25:60:bb:b4:b3:62:92:54:db:49:5e:a0:a9:20:
                    5a:80:7a:84:b0:60:57:a2:23:bf:6f:03:84:a4:45:
                    e8:6d:b4:27:a0:e9:9e:45:eb:d6:d8:69:e5:5b:b4:
                    20:e8:f1:63:df:9a:84:23:8a:74:5f:a8:69:90:0e:
                    c3:2f:fc:6b:f5:a3:74:2c:33:bb:c5:09:08:24:4b:
                    22:1e:94:c0:4a:e0:b2:fb:70:b5:d5:ee:7b:4d:2f:
                    27:d1:e8:60:05:e1:18:cf:53:02:27:48:b6:ad:76:
                    be:ca:7a:14:b6:6b:f5:c5:db:0a:47:fa:97:76:e2:
                    bf:96:fe:6b:fd:88:99:d0:fe:7b:0b:5c:d1:93:0b:
                    c3:fc:d5:37:1e:ab:5e:65:10:1c:55:6f:45:7b:1e:
                    e5:d3:8d:02:f5:57:8c:27:33:20:03:0a:d1:30:2a:
                    c3:b2:fd:5f:74:aa:b3:d6:5a:ac:d2:a6:63:4b:de:
                    33:c6:e8:24:47:fc:bd:ff:c7:bf:4b:f5:85:45:5a:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8D:41:E0:58:BA:5B:EB:BE:DF:F5:8E:81:6F:72:66:F3:1F:40:DD
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6a:20:5a:16:1c:ef:f4:45:f5:4c:08:1f:c6:30:bd:53:3d:cf:
         ed:a5:6f:25:49:2e:42:53:9f:7f:f8:55:f4:e7:0e:19:60:fd:
         09:25:c1:45:9e:bc:18:a7:1b:dd:36:be:98:19:ca:43:26:e6:
         77:6f:9b:6c:5b:4a:ef:39:c1:47:6d:12:a9:2c:8d:53:27:ab:
         71:4a:96:c8:0c:64:e2:7f:35:8f:61:72:a4:95:cf:1f:71:f1:
         ea:c6:f5:67:4a:b0:13:d0:4d:41:59:c0:f8:3d:ec:4c:68:bf:
         a9:de:29:b7:80:cb:80:aa:89:9c:9f:b7:df:45:e6:9c:a4:78:
         dd:63:89:e5:0a:d1:bc:69:70:db:ee:fa:c4:3f:0c:79:12:0f:
         d7:94:b5:a5:13:2c:55:68:9e:c3:80:e7:d2:96:56:27:2e:f5:
         92:e3:a3:02:1a:6c:90:e7:4b:d3:58:e4:9d:d2:bf:e3:65:44:
         57:03:4d:b1:77:79:36:a2:7f:c1:0e:a9:74:7a:30:91:22:9d:
         9f:74:e6:85:a5:34:80:3f:72:c0:b0:4b:a6:56:60:33:80:d4:
         c2:ce:e8:6b:f4:f6:42:33:0f:24:d1:18:d4:5e:7d:72:2d:7f:
         4c:c4:74:19:00:5e:ca:9d:91:ec:62:67:68:c1:61:70:f6:8b:
         6e:6a:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:55 2026 by rpki-client