Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          3oKwsKNRauR6/BU5w20pIBJTqFJMoSZtHH5sQdqVsA8=
Subject key identifier:   73:CC:2A:C7:FB:4C:46:81:44:3A:E6:0C:97:1C:34:15:82:9F:DF:48
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       5C31AEAC898894B534EC9AFBFF7A1EBDCDC52987
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:22 +0000
ROA not before:           Sun 03 May 2026 02:36:22 +0000
ROA not after:            Sun 02 May 2027 02:41:22 +0000
asID:                     137316
IP address blocks:        2402:7ac0:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:31:ae:ac:89:88:94:b5:34:ec:9a:fb:ff:7a:1e:bd:cd:c5:29:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:22 2026 GMT
            Not After : May  2 02:41:22 2027 GMT
        Subject: CN=73CC2AC7FB4C4681443AE60C971C3415829FDF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:3c:01:52:05:34:49:14:91:f4:35:94:79:
                    f3:ca:66:17:f7:c7:1f:92:f6:68:c0:a9:7d:73:ee:
                    da:b3:4a:9f:4c:7d:27:1b:81:bc:40:35:0f:3d:fe:
                    d6:cc:8d:39:38:e9:6b:63:b9:33:aa:e2:96:68:b0:
                    d2:ae:23:87:6f:ee:d6:42:b6:d4:6d:46:4c:52:4a:
                    72:e8:54:7a:7e:2f:3b:d3:4f:6e:f9:52:23:d1:78:
                    88:22:45:13:ee:fa:0f:8f:59:5d:35:7f:77:a9:ff:
                    2e:b4:71:6f:f1:d2:ff:55:ed:47:77:76:60:c0:95:
                    51:58:ee:6b:b3:f4:6a:e2:94:e1:e1:23:ff:9d:b0:
                    de:59:5c:21:4e:cb:73:1a:78:a3:40:ff:aa:5d:09:
                    3d:65:f7:ba:b2:6e:06:89:21:f9:47:96:d1:6b:4a:
                    b3:82:ce:15:36:b3:51:20:a2:5a:e7:35:cf:e1:03:
                    30:23:f1:43:03:3d:1d:bd:36:79:f8:f3:61:f9:e8:
                    73:be:0e:79:3e:fe:e4:da:e6:70:2e:7c:6f:9e:91:
                    d6:fe:8c:28:5d:92:0c:4f:19:fc:2b:11:93:8f:e7:
                    e2:74:51:ac:8a:46:ed:d7:3f:7c:77:dc:b6:25:15:
                    f3:0f:ef:5e:a3:75:9f:b1:f8:e2:d3:68:b8:e3:01:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CC:2A:C7:FB:4C:46:81:44:3A:E6:0C:97:1C:34:15:82:9F:DF:48
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:13:27:0a:8c:1b:48:96:ae:9b:fe:24:2d:0d:95:88:37:d9:
         5f:4a:0a:6f:8f:41:cb:61:74:1f:41:c3:b0:f1:0f:ff:df:bd:
         84:b8:cd:0d:35:ac:46:0f:ce:00:c9:75:90:6b:21:06:1a:a0:
         e3:1a:5c:2c:54:e8:e1:83:33:cc:6a:c7:0b:18:2b:dc:7a:24:
         23:9d:88:78:44:1c:dc:23:6d:e7:b8:fa:6e:83:91:fa:e1:f0:
         87:57:28:ce:bb:eb:39:98:45:8c:80:40:b0:6f:94:b0:7e:78:
         2e:58:d4:73:e1:bc:9f:8a:b8:48:99:92:4e:1c:0e:54:92:db:
         79:97:15:07:d3:c0:c4:5f:4b:20:e1:93:59:2a:62:33:09:86:
         bc:0f:81:fa:6a:53:06:bb:e7:0c:cf:35:68:d5:fc:35:15:4b:
         36:b6:fc:98:f4:66:8b:01:79:d7:0a:5d:c1:07:76:2f:7e:b0:
         e2:67:a6:cd:69:a7:6a:30:60:88:ae:6a:5c:62:1a:0c:a0:1f:
         62:0f:d6:3a:32:31:a7:65:aa:76:ec:67:61:06:97:4e:45:de:
         de:29:3e:29:b3:0e:a4:56:9a:d3:21:4d:91:38:88:11:6b:07:
         5b:e8:70:81:79:4d:91:dc:f7:3b:00:0e:c9:86:10:7c:27:dd:
         7b:16:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:04 2026 by rpki-client