Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/323430333a653863303a3a2f33322d3332203d3e20313338303930.roa
File:                     323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (raw, json)
Hash identifier:          qU+T/ppZu7pLksCA/CM9lZkM5mfpYBVP5R9hFRPxoSA=
Subject key identifier:   F1:24:FF:35:F0:76:17:69:5E:91:6B:35:FD:16:22:BD:40:6C:05:3D
Certificate issuer:       /CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
Certificate serial:       1A1A189722A88429253A25FC6AF2C823327E5C80
Authority key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/323430333a653863303a3a2f33322d3332203d3e20313338303930.roa
Signing time:             Sun 03 May 2026 02:41:39 +0000
ROA not before:           Sun 03 May 2026 02:36:39 +0000
ROA not after:            Sun 02 May 2027 02:41:39 +0000
asID:                     138090
IP address blocks:        2403:e8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl
                          rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1a:18:97:22:a8:84:29:25:3a:25:fc:6a:f2:c8:23:32:7e:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
        Validity
            Not Before: May  3 02:36:39 2026 GMT
            Not After : May  2 02:41:39 2027 GMT
        Subject: CN=F124FF35F07617695E916B35FD1622BD406C053D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:18:9c:36:79:1e:9b:c5:52:2c:74:86:fb:
                    ae:94:82:4b:0b:02:d1:23:fd:22:2a:7c:95:56:52:
                    c9:26:a1:36:1d:d2:c9:c7:f0:e6:4f:75:0a:2b:f3:
                    1d:39:60:e4:b4:fe:14:45:b5:d1:14:8d:72:fc:16:
                    8a:53:c7:7c:69:9b:f0:a2:a0:19:be:92:2b:ef:60:
                    30:8f:48:e7:2d:0f:2d:21:7f:bb:b9:96:bd:6b:5a:
                    c5:a3:f2:5f:c0:46:25:b1:5e:4d:9c:d3:4f:7a:9e:
                    3c:e9:6e:a8:59:0b:4d:f2:15:02:d0:d0:98:aa:82:
                    c1:81:ff:ae:55:60:1b:fa:85:95:80:73:85:1f:35:
                    eb:2a:d6:52:ba:0f:f2:32:1f:ce:44:c7:7a:6b:17:
                    aa:bf:55:0c:fc:9e:72:45:7c:8d:92:7e:67:b2:da:
                    0e:45:ff:d9:89:6f:5a:6f:ea:21:09:69:05:e9:a6:
                    65:59:ee:95:98:61:3c:72:10:01:a5:2e:8a:e8:c3:
                    20:fd:c8:4d:33:c8:c1:97:c2:f1:a4:c9:11:da:ff:
                    4a:c7:b4:15:f1:63:18:0c:bf:fa:f8:52:e4:f1:15:
                    a6:5f:bb:c3:2c:a0:32:8e:22:a6:3d:32:36:c7:96:
                    09:ac:0e:d8:f7:7d:c8:31:c3:14:2b:1b:1e:89:39:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:24:FF:35:F0:76:17:69:5E:91:6B:35:FD:16:22:BD:40:6C:05:3D
            X509v3 Authority Key Identifier:
                keyid:5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/323430333a653863303a3a2f33322d3332203d3e20313338303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:53:fb:ab:11:39:46:18:8d:b0:44:19:2d:9d:7f:7a:72:6f:
         ba:01:76:be:99:b7:c2:29:1a:c5:ff:4f:b0:a3:84:0f:23:b8:
         54:ad:28:ce:36:5b:36:ea:db:bb:1a:54:c1:5f:e9:a9:e0:e6:
         26:b8:a3:c6:ce:6f:99:32:07:3a:ab:5b:95:a2:1c:0f:c8:cb:
         65:da:ef:d4:55:9c:cc:9e:1a:0c:85:3b:1e:e3:a3:7e:f0:be:
         e4:3c:ec:44:6d:44:95:ce:e7:e9:09:4f:5a:31:54:9d:72:d0:
         ba:88:11:cf:f9:62:64:69:54:e3:9c:67:89:f9:b8:80:8d:7e:
         10:23:7a:ac:ba:00:6b:68:f9:0d:a5:df:64:f4:db:2d:43:4e:
         3d:7a:3a:ce:59:94:8c:d9:71:9b:d0:30:cb:9d:6d:82:4d:cf:
         bf:3b:cc:a1:61:e8:2c:6c:f9:25:ab:51:15:86:09:13:da:fa:
         e9:a9:d8:26:bc:8f:83:f0:33:04:0d:91:39:84:d3:77:c6:63:
         fe:ab:c3:32:c8:c8:69:18:d3:23:71:f7:45:4e:42:05:69:8b:
         c9:e9:a6:cc:68:0b:f0:04:f0:25:a5:68:50:2f:e4:3b:3c:36:
         dc:43:1e:72:d1:69:4f:ce:11:40:fc:da:5a:06:91:02:90:07:
         68:6a:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:36:43 2026 by rpki-client