Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a623030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a623030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          eTl1YwNN37QdQ5dDHfASHAv6NGd9RMnTrmPusInExv8=
Subject key identifier:   9A:12:41:35:DA:44:F3:1C:27:41:09:DE:1A:F0:F4:1B:E7:45:BD:59
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       37179B53A0714BE2DC0025AE79739799600C3E2F
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a623030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:21 +0000
ROA not before:           Sun 03 May 2026 02:36:21 +0000
ROA not after:            Sun 02 May 2027 02:41:21 +0000
asID:                     137316
IP address blocks:        2402:7ac0:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:17:9b:53:a0:71:4b:e2:dc:00:25:ae:79:73:97:99:60:0c:3e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:21 2026 GMT
            Not After : May  2 02:41:21 2027 GMT
        Subject: CN=9A124135DA44F31C274109DE1AF0F41BE745BD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:c1:20:21:f8:e3:96:bd:fe:99:44:17:92:
                    a2:8c:4f:c3:ee:ff:cd:aa:64:18:77:1d:71:21:cb:
                    a2:cd:c2:8f:1d:9f:c1:20:c0:b0:61:79:29:9b:7c:
                    d7:21:81:7b:b4:29:b7:94:2e:47:85:29:96:c1:33:
                    21:69:5a:ce:1d:6c:4e:f6:40:9e:53:47:93:48:4e:
                    e6:0f:6a:a8:e5:4c:bc:16:4b:18:5f:3c:15:85:27:
                    3a:b4:34:d2:4a:fc:90:77:1d:b4:37:59:d7:bf:30:
                    c1:3f:08:f4:29:c8:19:dd:35:1d:fc:15:05:9b:cb:
                    4d:0d:1f:43:18:d6:6c:8a:b3:c1:1a:b1:cb:1b:88:
                    81:e7:5a:53:19:4f:15:3e:af:06:1d:15:9b:17:97:
                    24:ff:2e:76:a2:95:d4:7c:1c:7e:1a:21:b1:cd:fe:
                    26:4a:db:92:62:06:a4:be:72:9d:54:d0:46:c8:83:
                    8f:62:63:ce:77:e0:3e:dc:ff:e8:a0:a6:52:96:d7:
                    7d:0b:20:5f:ac:57:0a:e1:ec:5c:3a:61:2f:db:ea:
                    3f:c3:53:17:ff:d3:9d:11:0e:35:c2:2f:d7:34:b7:
                    e7:e3:30:ee:9c:b5:c5:0d:af:dd:1d:83:63:17:13:
                    59:aa:d0:e2:8d:2e:e8:28:8c:c0:88:64:fe:67:31:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:12:41:35:DA:44:F3:1C:27:41:09:DE:1A:F0:F4:1B:E7:45:BD:59
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a623030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:54:80:13:8f:de:b5:64:b4:34:56:28:1a:88:f4:be:d7:ae:
         e4:42:00:28:42:d6:85:8a:4f:ac:6c:89:f1:e3:3f:3a:7f:a1:
         dd:ee:e4:29:f7:58:41:1a:b5:27:bd:58:cf:db:31:ef:77:29:
         ae:d1:fd:72:6c:e1:de:30:9a:62:59:33:23:07:23:ca:7b:e2:
         2b:0b:d4:94:f9:70:77:39:bb:6b:7c:0f:68:c2:f4:0c:78:c4:
         39:be:da:bf:0c:4a:a2:64:35:e1:78:6f:1c:14:ba:76:57:d9:
         a6:86:c1:4b:3b:9b:4c:65:be:55:9c:d6:b5:63:60:b3:af:22:
         9e:3d:56:9d:da:3c:cf:85:06:22:9e:e2:c6:58:3e:23:c6:27:
         53:f5:62:5d:7e:f1:ae:0c:98:7e:3b:28:22:01:e7:26:90:63:
         19:2d:02:a3:35:ae:0a:d2:9e:7c:32:76:d2:b9:99:08:47:69:
         25:ac:99:81:c8:b5:b6:9b:1d:1e:b7:9f:94:21:9e:69:b1:03:
         a9:2c:69:56:25:f7:42:42:c7:d0:09:39:71:ba:ec:9e:dd:78:
         2e:24:9a:c5:ac:b1:fc:05:a0:7a:3f:a3:f6:8e:99:bf:c9:b5:
         07:ad:ce:c4:27:9b:83:bb:8a:7b:6e:25:d1:16:cc:9a:f9:1d:
         4b:84:7c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:38 2026 by rpki-client