Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          oUT6cl1OTile/JQ1rEj6/+iphM0tDEnWn+izJNULrqo=
Subject key identifier:   29:F6:6D:4E:D0:92:B3:D0:AD:16:8E:32:EF:4D:3A:AC:30:A2:7B:7B
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       3AA5D6DCCDF3AEDFCA23B65C877C7E0747A58E0E
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:15 +0000
ROA not before:           Sun 03 May 2026 02:36:15 +0000
ROA not after:            Sun 02 May 2027 02:41:15 +0000
asID:                     137316
IP address blocks:        2402:7ac0:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a5:d6:dc:cd:f3:ae:df:ca:23:b6:5c:87:7c:7e:07:47:a5:8e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:15 2026 GMT
            Not After : May  2 02:41:15 2027 GMT
        Subject: CN=29F66D4ED092B3D0AD168E32EF4D3AAC30A27B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:3e:ab:9e:de:d4:fd:d0:0d:79:0e:34:c6:
                    17:11:ec:9d:4f:ea:39:85:62:57:29:7f:ae:71:c3:
                    ae:cb:01:1a:72:f7:7d:9e:91:20:f9:e5:97:ec:09:
                    f3:70:c5:ae:6f:ff:a9:7d:46:5b:94:6d:81:8e:ff:
                    b6:3f:c7:58:4e:e1:48:22:53:c2:3c:f7:67:e9:43:
                    fa:ca:f2:fc:11:09:f3:34:6d:2c:c2:e4:07:06:3c:
                    08:14:87:98:87:31:e8:87:8b:77:2e:a7:d7:bf:14:
                    07:da:dc:17:b1:21:42:ab:c1:90:f0:b2:94:23:09:
                    f0:19:da:51:be:af:11:12:e5:0b:48:fa:21:bc:73:
                    e2:73:b9:85:2e:b7:e7:98:92:89:1e:92:ed:99:53:
                    45:69:f9:38:98:7c:02:ff:b9:93:d9:f8:65:f6:90:
                    83:2e:54:1a:06:ed:1f:5f:b6:9a:c4:1b:d1:e8:f1:
                    1d:01:7c:1c:ac:50:b4:80:c1:d3:55:e9:bb:c7:5f:
                    e0:f5:2b:61:f3:50:b6:0c:10:4f:fb:00:f5:0c:cb:
                    8a:b2:6b:0f:5f:61:dc:2c:d8:03:4d:d0:a3:1d:b1:
                    52:08:39:b1:50:52:c6:1e:bf:72:28:00:45:f0:bc:
                    fd:fe:b0:5b:83:68:19:a1:ef:86:da:99:13:f5:e6:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F6:6D:4E:D0:92:B3:D0:AD:16:8E:32:EF:4D:3A:AC:30:A2:7B:7B
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:b0:6a:fa:aa:8f:f3:8a:40:20:f4:e6:b7:de:86:0b:e7:e9:
         ae:af:ff:07:8d:fe:40:3b:70:a9:49:2d:f8:30:81:5b:f3:ba:
         da:19:36:ab:88:56:f3:fe:21:2d:c1:c3:4e:a1:c2:ec:c6:94:
         cb:f0:5a:a1:05:db:15:d7:f5:48:5d:f6:31:33:ff:05:b1:7d:
         64:24:64:5f:af:bb:87:67:b3:9d:ce:ef:be:81:73:cc:cd:75:
         18:99:62:20:71:e6:ae:40:0f:12:ff:0d:d8:a0:14:7b:8b:a2:
         ff:00:51:83:23:8c:79:f5:e1:67:67:91:bd:33:8f:bd:9a:24:
         a0:00:55:72:ff:17:a6:96:7f:c3:05:76:f8:ed:6e:0b:d4:5d:
         ce:f3:19:18:91:ac:a7:29:17:df:ec:12:d4:a1:2c:9b:48:80:
         da:52:15:5b:2f:ed:1f:5d:8d:a9:9b:7a:fc:e0:1b:55:a9:4f:
         c1:78:98:fd:c2:8f:3a:f6:f0:cb:e3:e3:bc:56:f9:72:33:22:
         97:df:ad:80:52:62:fd:52:93:11:bc:99:96:da:c9:61:6b:78:
         d2:14:06:0c:14:e4:de:64:20:68:0d:20:d2:c9:a0:cf:1f:b5:
         86:28:08:40:a3:a0:35:0c:a1:8a:1f:12:ef:6d:4c:d7:ae:d8:
         b6:25:de:53
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUOqXW3M3zrt/KI7Zch3x+B0eljg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFDMDFDMkQzMTAwN0ZBOUY3Nzg1NzBBMzNBMEJCQjMy
MTUwOUU4QTAeFw0yNjA1MDMwMjM2MTVaFw0yNzA1MDIwMjQxMTVaMDMxMTAvBgNV
BAMTKDI5RjY2RDRFRDA5MkIzRDBBRDE2OEUzMkVGNEQzQUFDMzBBMjdCN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVMT6rnt7U/dANeQ40xhcR7J1P
6jmFYlcpf65xw67LARpy932ekSD55ZfsCfNwxa5v/6l9RluUbYGO/7Y/x1hO4Ugi
U8I892fpQ/rK8vwRCfM0bSzC5AcGPAgUh5iHMeiHi3cup9e/FAfa3BexIUKrwZDw
spQjCfAZ2lG+rxES5QtI+iG8c+JzuYUut+eYkokeku2ZU0Vp+TiYfAL/uZPZ+GX2
kIMuVBoG7R9ftprEG9Ho8R0BfBysULSAwdNV6bvHX+D1K2HzULYMEE/7APUMy4qy
aw9fYdws2ANN0KMdsVIIObFQUsYev3IoAEXwvP3+sFuDaBmh74bamRP15p8rAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUKfZtTtCSs9CtFo4y7006rDCie3swHwYDVR0j
BBgwFoAUscAcLTEAf6n3eFcKM6C7syFQnoowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmNjNDYyYTUtOGY3NC00MmFmLTg4M2ItNWU4OWVlNWYyZGYzLzAvQjFDMDFDMkQz
MTAwN0ZBOUY3Nzg1NzBBMzNBMEJCQjMyMTUwOUU4QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMUMwMUMyRDMxMDA3RkE5Rjc3ODU3MEEzM0EwQkJCMzIxNTA5
RThBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04
ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhMzYzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
AnrAYDANBgkqhkiG9w0BAQsFAAOCAQEAkbBq+qqP84pAIPTmt96GC+fprq//B43+
QDtwqUkt+DCBW/O62hk2q4hW8/4hLcHDTqHC7MaUy/BaoQXbFdf1SF32MTP/BbF9
ZCRkX6+7h2eznc7vvoFzzM11GJliIHHmrkAPEv8N2KAUe4ui/wBRgyOMefXhZ2eR
vTOPvZokoABVcv8XppZ/wwV2+O1uC9RdzvMZGJGspykX3+wS1KEsm0iA2lIVWy/t
H12NqZt6/OAbValPwXiY/cKPOvbwy+PjvFb5cjMil9+tgFJi/VKTEbyZltrJYWt4
0hQGDBTk3mQgaA0g0smgzx+1higIQKOgNQyhih8S721M167YtiXeUw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:51:57 2026 by rpki-client