Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          vyL6RE5IS2eTojCod6HIWuFJVb6RuyBrsJ2XkKJVcYQ=
Subject key identifier:   05:32:41:1C:FA:E2:6C:99:64:FD:EA:DA:18:6D:87:86:27:1A:F2:71
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       7264B277277E9C7513F9192D3DA6AA3B97F60FE1
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:21 +0000
ROA not before:           Sun 03 May 2026 02:36:21 +0000
ROA not after:            Sun 02 May 2027 02:41:21 +0000
asID:                     137316
IP address blocks:        2402:7ac0:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:64:b2:77:27:7e:9c:75:13:f9:19:2d:3d:a6:aa:3b:97:f6:0f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:21 2026 GMT
            Not After : May  2 02:41:21 2027 GMT
        Subject: CN=0532411CFAE26C9964FDEADA186D8786271AF271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:86:02:29:27:dd:9c:7a:8e:71:09:9b:4b:
                    29:70:dc:64:3c:dd:71:95:c1:b0:32:01:fd:24:a6:
                    b9:88:aa:84:81:50:24:6e:f8:5c:53:a0:46:60:1e:
                    39:ed:a7:ad:e1:0c:a4:22:29:bb:e6:4f:93:97:d3:
                    b5:67:ac:2c:e0:69:f2:c8:53:9c:5c:ec:d2:e6:69:
                    a2:dd:db:ff:77:2f:3d:22:e7:77:7c:56:99:2d:5c:
                    5b:40:1f:28:6a:0f:a5:4b:e7:be:cf:91:f8:1a:b3:
                    71:83:eb:0d:05:eb:0c:b3:e6:04:08:08:29:7c:ee:
                    56:fe:13:91:1d:c6:51:4a:1b:c0:ff:25:9d:4f:10:
                    4f:d2:d0:bf:6e:3d:39:16:a2:1d:a6:b7:21:22:ed:
                    79:89:f4:2f:2a:48:66:3f:cb:09:b1:e9:94:c4:81:
                    19:8a:fd:06:a2:ef:2a:88:56:40:ec:14:fe:c1:12:
                    4e:00:5a:92:24:9d:a0:21:f9:b6:16:ef:3c:41:e5:
                    d7:25:ef:d1:0c:fb:0a:6d:a2:e3:0c:21:bf:b7:04:
                    2c:34:17:1d:76:a4:e1:a2:b2:86:96:50:62:f2:18:
                    fa:0f:32:92:74:00:39:a0:35:ea:5d:f7:e3:2f:5c:
                    c3:46:fc:bb:ab:b4:56:d5:05:0a:ce:59:1e:4c:30:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:32:41:1C:FA:E2:6C:99:64:FD:EA:DA:18:6D:87:86:27:1A:F2:71
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:1a:8f:18:ca:20:25:6f:94:47:cf:43:e2:66:98:e1:11:
         a7:43:b0:1f:f2:d1:af:a4:a3:d2:d8:a0:aa:af:9b:83:93:53:
         98:c5:90:46:bf:0b:88:8e:72:bc:c4:b3:71:fc:6d:05:23:bd:
         46:22:82:d9:4c:1a:58:0c:3d:aa:b1:e4:a9:34:86:0e:c9:22:
         99:15:1e:12:20:f0:28:9a:ca:de:15:54:21:f0:5c:44:c6:1d:
         8f:b7:4e:c9:e2:0e:66:03:6a:30:4f:aa:6a:af:97:1d:28:13:
         14:d3:5b:c6:c0:91:e7:09:3f:e1:8e:c8:c4:68:9e:30:55:05:
         5c:a3:7b:ac:37:09:07:c0:0d:7f:68:34:dc:51:0a:02:b9:dd:
         a9:ad:e8:36:60:d5:73:44:c7:dc:04:1a:10:de:fe:56:3c:9e:
         0c:14:2b:8f:5e:fc:7f:ca:ec:d3:87:73:38:dd:9e:c9:c8:b6:
         1a:18:74:1e:6c:9a:75:b5:b2:46:75:ce:e7:bc:c6:41:85:5f:
         66:d8:6d:f4:95:7f:53:2f:6c:17:1a:8c:2d:9d:b2:e9:f2:07:
         88:3e:b0:5f:d3:cf:a8:46:be:e6:32:74:db:1e:e7:ea:90:74:
         9d:3d:30:ff:98:f8:05:ba:66:22:e1:01:d9:75:c4:3e:06:ee:
         5a:c6:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:57 2026 by rpki-client