Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3438203d3e203538383230.roa
File:                     323430373a366634303a3a2f33322d3438203d3e203538383230.roa (raw, json)
Hash identifier:          uLpfvmOWPLMtCPKe67fDfTWwMZzd/ScnogVVWTCv8e4=
Subject key identifier:   79:E3:FB:54:DB:D4:20:B2:6B:55:39:AD:27:81:67:62:9B:19:5C:55
Certificate issuer:       /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9
Certificate serial:       675E8C2A61377417EC2841BC0A8194772EF39334
Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3438203d3e203538383230.roa
Signing time:             Sun 03 May 2026 02:41:52 +0000
ROA not before:           Sun 03 May 2026 02:36:52 +0000
ROA not after:            Sun 02 May 2027 02:41:52 +0000
asID:                     58820
IP address blocks:        2407:6f40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl
                          rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5e:8c:2a:61:37:74:17:ec:28:41:bc:0a:81:94:77:2e:f3:93:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9
        Validity
            Not Before: May  3 02:36:52 2026 GMT
            Not After : May  2 02:41:52 2027 GMT
        Subject: CN=79E3FB54DBD420B26B5539AD278167629B195C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1a:aa:aa:db:87:23:9e:90:8a:7e:56:42:cb:
                    a2:6a:67:df:c1:76:f6:54:a8:f2:9e:b1:ed:67:f1:
                    0f:86:01:02:e5:03:3a:17:55:f1:63:bd:29:7c:b0:
                    bb:4c:2d:e7:3b:fb:61:23:4f:3b:60:79:e5:ab:9d:
                    bc:9b:28:b4:a8:0f:b2:4a:1b:f7:c0:90:b4:b5:66:
                    3c:0e:0b:b7:02:2d:3d:02:79:e4:e5:35:f8:41:c3:
                    44:d1:8e:43:de:9d:d9:68:b4:7d:6b:f3:ef:de:78:
                    57:a4:22:04:bc:de:aa:76:7f:53:0e:c1:3a:45:57:
                    f1:85:87:0f:a0:74:2e:b0:41:31:51:3c:b5:ea:e3:
                    ee:da:2d:0f:83:18:66:aa:7c:d9:01:cc:cc:6d:d3:
                    a4:34:3d:61:63:80:f0:0f:c1:c0:8c:40:8e:32:11:
                    3a:35:33:d6:d2:4b:10:be:19:fb:dc:e7:07:97:a6:
                    2c:78:e7:62:a1:c5:4e:4d:f9:22:bf:af:db:24:82:
                    44:5d:c5:51:56:e4:77:1a:22:1b:ba:7b:da:89:17:
                    f9:de:99:f9:77:45:d3:a2:95:83:4a:f3:96:c5:d5:
                    dc:c5:3f:e9:3a:33:e4:e2:e4:f9:73:de:a8:0c:c8:
                    17:81:bf:5c:34:0b:9d:06:ba:45:92:11:be:32:5f:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E3:FB:54:DB:D4:20:B2:6B:55:39:AD:27:81:67:62:9B:19:5C:55
            X509v3 Authority Key Identifier:
                keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3438203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:96:0a:3c:51:ad:97:f0:cb:d0:10:58:4b:91:7b:ca:89:3a:
         49:2f:75:97:5f:0c:f4:1f:8b:69:c1:4e:4c:81:7a:9b:71:a5:
         b6:a0:b4:04:ac:aa:63:53:a5:79:a5:ce:8b:5f:a9:73:a1:23:
         67:57:b8:ec:31:1b:d5:75:13:7b:3c:61:c8:67:4e:44:ff:77:
         52:14:d3:3c:60:a3:ee:a3:61:ec:c2:3a:c4:d7:06:ec:d4:95:
         f6:38:26:dd:a6:e9:f8:eb:66:5d:0c:35:97:01:74:64:05:11:
         63:42:d8:71:d9:85:97:5e:ea:06:af:20:ce:75:8d:bc:d9:70:
         10:be:f0:17:b5:ad:1e:f1:05:5f:bb:b5:ff:e9:f8:e9:1f:21:
         9f:2e:3e:f2:3d:fa:d9:63:b7:82:db:75:ca:a1:50:48:cc:a9:
         fc:83:b9:2b:3e:f1:6c:65:c1:24:97:78:d5:14:bb:15:6f:1b:
         7a:6a:58:37:80:cf:c0:60:25:32:c5:c2:31:78:95:97:fd:ab:
         85:46:da:1f:11:44:f4:69:eb:89:57:82:77:41:3e:2b:ac:bd:
         f8:ed:cc:69:3d:51:32:cf:c1:16:7f:4c:2c:2f:ae:de:26:eb:
         31:d2:24:2b:37:57:29:fb:03:4f:a5:49:7b:c5:49:2b:8f:f2:
         cb:f6:8b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:39 2026 by rpki-client