Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          nJ8wNpmuEecrZIKwYKV0o++BqBwPFUagR5VJglG8iJA=
Subject key identifier:   B8:78:62:0F:34:CA:69:FE:1E:17:38:97:61:AC:EE:56:CF:50:42:94
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       542EBB92C7C0F6AD672287776CC86D2CDC788F9D
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:18 +0000
ROA not before:           Sun 03 May 2026 02:36:18 +0000
ROA not after:            Sun 02 May 2027 02:41:18 +0000
asID:                     137316
IP address blocks:        2402:7ac0:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2e:bb:92:c7:c0:f6:ad:67:22:87:77:6c:c8:6d:2c:dc:78:8f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:18 2026 GMT
            Not After : May  2 02:41:18 2027 GMT
        Subject: CN=B878620F34CA69FE1E17389761ACEE56CF504294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:e3:7e:11:94:32:f0:2d:97:e4:c4:c5:b7:
                    25:3a:8b:50:c1:54:dd:4a:b0:8a:5e:3a:7b:b4:ba:
                    8c:8e:9b:39:23:58:6b:4d:48:8e:b7:ad:52:a5:21:
                    a7:1a:07:87:c2:c9:03:50:14:45:64:d8:31:7a:23:
                    97:88:25:9b:5f:55:54:88:70:80:32:79:30:43:db:
                    cb:9a:7e:be:ae:60:43:80:61:7b:79:b3:4a:0e:9f:
                    6a:3c:90:5b:3c:64:7e:5b:89:ea:41:5b:49:d5:f6:
                    d8:60:1a:16:31:db:ce:ca:0a:85:42:71:0b:7f:cb:
                    fe:ff:d2:f1:68:20:98:bb:8f:c4:8b:b4:ae:a9:f7:
                    a7:49:14:eb:e7:ec:18:b3:fa:54:7c:2b:bb:0c:92:
                    a9:fe:f6:f5:67:55:97:95:49:7b:8a:2b:af:11:4b:
                    5a:a1:49:90:a6:db:c1:1f:7a:4e:72:ff:59:f6:a3:
                    b9:90:00:d1:9f:b0:db:28:0a:89:66:dd:a6:a4:da:
                    bd:25:f6:fc:6a:31:e0:04:e5:31:0b:3a:f9:01:0a:
                    29:89:8c:e9:05:be:e1:fe:3a:35:64:fb:55:c8:c4:
                    84:58:19:9a:34:e2:bb:ff:07:df:52:da:d4:a0:f5:
                    b3:10:9d:77:ff:1a:c4:be:79:ab:f9:10:91:48:df:
                    2a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:78:62:0F:34:CA:69:FE:1E:17:38:97:61:AC:EE:56:CF:50:42:94
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:7e:bd:4e:b0:67:da:01:bc:5b:b8:d8:29:66:77:b0:8f:
         79:a9:e1:97:c4:9f:20:7a:6f:7d:4a:b7:fc:06:01:8e:21:cf:
         fe:3f:d5:72:53:03:9f:e1:2b:56:3f:89:57:15:9e:62:33:b0:
         47:72:21:ca:ce:0c:67:59:f6:34:8f:08:4e:f8:68:90:5a:08:
         34:88:18:5a:e2:7f:6e:ce:c4:e5:1f:5f:be:da:3b:2b:d7:bc:
         d2:87:a0:f1:f2:fe:14:42:1a:90:be:c6:fc:97:52:8e:23:c0:
         87:39:00:42:cd:3b:c1:ad:00:56:9c:e7:7d:02:d4:7a:1e:55:
         74:d8:66:a5:63:03:52:59:46:6f:26:56:36:f4:81:86:51:72:
         75:2b:ab:b8:1f:40:e9:5e:a8:05:ec:27:de:4f:ee:f8:5c:48:
         b1:ce:e1:bb:cf:d7:6a:cc:92:85:b3:35:8a:79:03:70:2c:61:
         2c:08:b1:f7:9a:11:d9:75:ae:99:82:16:5c:d6:92:c2:4c:9e:
         e0:7a:52:97:f6:4f:3f:1e:58:1f:79:ed:e9:a2:60:be:f4:e1:
         ef:3e:51:1d:63:96:a2:b1:f9:c3:b1:dd:6a:e0:6e:af:96:c5:
         aa:33:0f:63:6e:d6:c1:30:52:a6:04:84:34:ed:27:21:ce:24:
         30:a0:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:59:44 2026 by rpki-client