Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          +QYjkhsSbbtCKQMpsiFu/CVz29ksdJaA2gx5ZXUFCZw=
Subject key identifier:   61:84:44:7D:CA:2D:0E:91:02:29:21:F5:DA:95:5B:F6:E0:8E:88:7A
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       6F667A90E55AE718E42BEBBCBFF3D93F5F295730
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:19 +0000
ROA not before:           Sun 03 May 2026 02:36:19 +0000
ROA not after:            Sun 02 May 2027 02:41:19 +0000
asID:                     137316
IP address blocks:        2402:7ac0:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:66:7a:90:e5:5a:e7:18:e4:2b:eb:bc:bf:f3:d9:3f:5f:29:57:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:19 2026 GMT
            Not After : May  2 02:41:19 2027 GMT
        Subject: CN=6184447DCA2D0E91022921F5DA955BF6E08E887A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:9c:a3:77:2b:6b:04:87:db:56:97:11:fd:
                    94:42:e0:45:5f:5b:48:6e:2d:2c:68:f0:4e:8e:aa:
                    97:86:75:0c:d8:3f:37:e5:91:d7:7a:75:2e:6f:f4:
                    ae:4c:f5:ef:ca:82:34:86:de:3a:f4:cf:fe:29:52:
                    47:fe:4b:7b:05:46:3f:19:c8:d4:b2:4f:6c:11:97:
                    55:57:d8:09:d3:dd:d0:52:22:e5:b9:9a:d3:35:b8:
                    77:62:7c:fa:fa:bb:ca:1b:16:99:3c:0a:18:65:17:
                    c6:73:46:cc:56:5f:4f:19:65:50:10:e3:31:51:85:
                    70:9b:e9:8a:f5:f8:80:f0:43:88:dc:f6:48:41:1f:
                    b1:77:c9:e2:fb:9f:b3:32:fd:9c:93:51:67:62:a5:
                    5c:91:ea:69:d0:5a:80:5a:11:25:3c:69:34:2b:c7:
                    5f:df:3b:28:ea:c6:d8:b9:6b:ff:e3:4d:a7:d8:b3:
                    ad:b6:ff:f1:47:f7:60:0c:61:66:3c:be:4d:6b:27:
                    28:6b:bf:25:f8:57:69:1e:69:84:f8:98:6d:92:ae:
                    d0:da:da:1b:e5:52:66:9f:0d:d1:5a:aa:db:eb:8d:
                    38:3e:9a:11:ea:40:70:1d:30:88:3a:41:16:6e:4e:
                    32:6d:b4:1a:06:d8:38:f6:9a:c0:da:f5:d3:c1:61:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:84:44:7D:CA:2D:0E:91:02:29:21:F5:DA:95:5B:F6:E0:8E:88:7A
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:be:2f:49:0f:b5:1e:4d:50:d3:86:95:eb:7a:71:3a:22:6f:
         d0:23:e9:24:53:c8:a2:06:c2:30:4f:d5:37:0d:85:73:19:64:
         bc:09:6c:82:3a:c9:81:04:c8:56:02:c0:6c:82:72:f5:00:30:
         26:a7:72:d4:d8:3a:50:9d:31:fc:5e:10:fa:fd:05:c6:4f:89:
         ef:53:0a:a2:36:c9:e9:2b:a8:3b:1f:6d:b4:7d:0c:48:c8:09:
         fa:0e:ac:45:ec:2e:d3:65:f3:08:86:e6:66:ec:90:e5:20:10:
         ea:c2:fc:5e:44:c4:ab:cf:95:40:2a:fc:0b:30:de:91:ab:64:
         6d:f6:92:fd:b4:34:49:1f:be:59:2c:bb:55:6f:5a:0e:08:0b:
         ba:9b:df:52:4b:1d:27:76:47:87:88:88:8a:9f:a5:f2:7e:6f:
         d8:78:f6:4d:16:32:e0:52:ce:f8:25:cf:e6:5a:3c:da:f1:11:
         0f:b7:92:3b:39:9f:a9:fc:fc:35:5f:a3:c4:68:df:20:de:f6:
         f2:99:00:d8:2f:f3:4c:c9:75:97:fe:de:69:9f:54:c5:0b:b6:
         da:9a:4e:36:21:97:10:ae:ba:f3:e8:d9:d0:32:bb:d7:b7:57:
         b9:47:8e:d9:62:d6:68:d0:49:92:ce:20:fc:0f:9c:e5:a2:1a:
         a2:10:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:00 2026 by rpki-client