Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a3a2f33322d3332203d3e20313337333136.roa
File:                     323430323a376163303a3a2f33322d3332203d3e20313337333136.roa (raw, json)
Hash identifier:          Kl38aAHqksG5/B1khY5i4Zf7UpR0ld9AEBuT2obV4TA=
Subject key identifier:   C6:EF:7B:D4:05:26:20:3B:F3:E6:AD:CF:44:7A:9E:90:96:9E:B7:45
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       0E26AFB71BA30D15DB58A0FADE999608902FA99D
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a3a2f33322d3332203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:18 +0000
ROA not before:           Sun 03 May 2026 02:36:18 +0000
ROA not after:            Sun 02 May 2027 02:41:18 +0000
asID:                     137316
IP address blocks:        2402:7ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:26:af:b7:1b:a3:0d:15:db:58:a0:fa:de:99:96:08:90:2f:a9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:18 2026 GMT
            Not After : May  2 02:41:18 2027 GMT
        Subject: CN=C6EF7BD40526203BF3E6ADCF447A9E90969EB745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:83:a0:3a:57:ca:85:a2:50:84:f9:53:36:
                    57:bd:ab:61:1b:45:de:db:36:88:aa:a5:38:00:04:
                    c2:92:ca:29:82:15:fb:94:0f:af:c6:4f:17:c6:6b:
                    c7:d1:1e:0e:46:88:de:2d:e3:fc:ef:f1:27:ac:53:
                    1a:a0:75:52:b3:22:c8:a1:66:c5:36:c0:ea:4d:6c:
                    03:80:19:b5:58:ae:ad:77:ac:31:7d:f4:3b:93:4d:
                    36:f6:67:c1:27:04:03:c7:2b:d6:e9:6d:95:3c:d7:
                    da:6f:d6:fa:71:e2:29:25:18:3c:41:b0:67:ca:b5:
                    b5:c0:de:2a:21:55:86:99:7e:65:73:4f:95:a2:1c:
                    82:87:37:12:5b:43:77:4b:6a:d1:91:90:12:4f:db:
                    55:a0:50:01:34:a5:06:8f:cf:25:2b:7e:e0:08:20:
                    9f:81:87:d2:d5:17:f6:49:9a:57:bd:fb:6c:41:d3:
                    85:6d:f3:df:34:b5:9f:72:09:12:94:97:d3:cf:b8:
                    f2:5f:14:55:6c:4a:15:86:c2:9f:f9:25:ec:6f:19:
                    db:05:94:e3:cd:c6:e1:2e:74:9c:7d:6c:cd:0a:59:
                    d2:62:b2:46:b8:ad:9d:a9:e1:42:f2:6b:ae:77:9c:
                    03:8e:ef:c4:cc:7f:6e:e6:20:38:a3:03:16:a6:47:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EF:7B:D4:05:26:20:3B:F3:E6:AD:CF:44:7A:9E:90:96:9E:B7:45
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a3a2f33322d3332203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:28:f4:87:0e:ec:51:6d:98:86:04:72:7b:a7:3d:68:89:
         60:ae:88:ad:d6:97:9d:c6:dd:c2:5e:62:2d:76:15:2f:f0:63:
         7e:68:dc:25:65:8c:8a:99:e1:b8:c6:fc:3c:e0:ae:b9:e9:7c:
         78:1c:6c:fe:91:37:af:cb:e2:0b:d2:de:16:9d:02:ac:0f:b7:
         8c:b1:03:91:2f:9e:31:91:61:21:ab:2d:27:ba:88:69:76:0b:
         5e:ac:49:22:2f:0d:65:61:fa:13:be:c0:d8:38:90:1e:38:9e:
         20:4f:ea:17:30:6e:94:0c:5f:e3:e7:82:1a:89:b9:92:6e:4d:
         fc:47:98:a4:b7:07:91:9a:5d:55:6d:ca:40:bd:77:19:89:31:
         3a:3f:ea:01:a2:9b:82:17:87:db:69:96:b7:44:65:25:62:09:
         c1:63:a2:65:21:f0:57:19:2f:b3:be:b7:d4:e1:b5:b5:15:92:
         9e:33:ab:63:5b:4f:b4:b1:7e:f6:7e:d8:ff:42:6d:1b:12:f3:
         e5:9d:39:fa:26:d6:6c:41:16:5f:74:1e:ec:10:e7:ea:0d:d2:
         70:07:0f:1f:b8:ae:33:6e:5a:8b:dd:12:58:44:08:b0:68:07:
         8c:04:45:94:d3:ef:6b:68:3f:bd:7c:d5:61:c7:75:f4:f4:fa:
         8a:32:7d:95
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUDiavtxujDRXbWKD63pmWCJAvqZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFDMDFDMkQzMTAwN0ZBOUY3Nzg1NzBBMzNBMEJCQjMy
MTUwOUU4QTAeFw0yNjA1MDMwMjM2MThaFw0yNzA1MDIwMjQxMThaMDMxMTAvBgNV
BAMTKEM2RUY3QkQ0MDUyNjIwM0JGM0U2QURDRjQ0N0E5RTkwOTY5RUI3NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZ4OgOlfKhaJQhPlTNle9q2Eb
Rd7bNoiqpTgABMKSyimCFfuUD6/GTxfGa8fRHg5GiN4t4/zv8SesUxqgdVKzIsih
ZsU2wOpNbAOAGbVYrq13rDF99DuTTTb2Z8EnBAPHK9bpbZU819pv1vpx4iklGDxB
sGfKtbXA3iohVYaZfmVzT5WiHIKHNxJbQ3dLatGRkBJP21WgUAE0pQaPzyUrfuAI
IJ+Bh9LVF/ZJmle9+2xB04Vt8980tZ9yCRKUl9PPuPJfFFVsShWGwp/5JexvGdsF
lOPNxuEudJx9bM0KWdJiska4rZ2p4ULya653nAOO78TMf27mIDijAxamR7b9AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUxu971AUmIDvz5q3PRHqekJaet0UwHwYDVR0j
BBgwFoAUscAcLTEAf6n3eFcKM6C7syFQnoowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmNjNDYyYTUtOGY3NC00MmFmLTg4M2ItNWU4OWVlNWYyZGYzLzAvQjFDMDFDMkQz
MTAwN0ZBOUY3Nzg1NzBBMzNBMEJCQjMyMTUwOUU4QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMUMwMUMyRDMxMDA3RkE5Rjc3ODU3MEEzM0EwQkJCMzIxNTA5
RThBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04
ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCesAwDQYJKoZI
hvcNAQELBQADggEBACTrKPSHDuxRbZiGBHJ7pz1oiWCuiK3Wl53G3cJeYi12FS/w
Y35o3CVljIqZ4bjG/DzgrrnpfHgcbP6RN6/L4gvS3hadAqwPt4yxA5EvnjGRYSGr
LSe6iGl2C16sSSIvDWVh+hO+wNg4kB44niBP6hcwbpQMX+PnghqJuZJuTfxHmKS3
B5GaXVVtykC9dxmJMTo/6gGim4IXh9tplrdEZSViCcFjomUh8FcZL7O+t9ThtbUV
kp4zq2NbT7SxfvZ+2P9CbRsS8+WdOfom1mxBFl90HuwQ5+oN0nAHDx+4rjNuWovd
ElhECLBoB4wERZTT72toP7181WHHdfT0+ooyfZU=
-----END CERTIFICATE-----
Generated at Wed May 13 12:28:28 2026 by rpki-client