Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/323430323a386163303a3a2f33322d3438203d3e20313337333230.roa
File:                     323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (raw, json)
Hash identifier:          roZTxY6zUAfeDTuWXo3yf76eU6YZOOXLfUlqD2CCnWI=
Subject key identifier:   7F:A7:A5:A8:EB:26:52:D8:F8:7B:5B:72:C6:F9:21:EF:B1:D6:E5:58
Certificate issuer:       /CN=1F79347E34F3842F873687AE47DBBF7766D07A56
Certificate serial:       2EEB08F6DA530C595A1913AA9AD74C1DA08C14DC
Authority key identifier: 1F:79:34:7E:34:F3:84:2F:87:36:87:AE:47:DB:BF:77:66:D0:7A:56
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/323430323a386163303a3a2f33322d3438203d3e20313337333230.roa
Signing time:             Sun 03 May 2026 02:43:15 +0000
ROA not before:           Sun 03 May 2026 02:38:15 +0000
ROA not after:            Sun 02 May 2027 02:43:15 +0000
asID:                     137320
IP address blocks:        2402:8ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.crl
                          rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:eb:08:f6:da:53:0c:59:5a:19:13:aa:9a:d7:4c:1d:a0:8c:14:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F79347E34F3842F873687AE47DBBF7766D07A56
        Validity
            Not Before: May  3 02:38:15 2026 GMT
            Not After : May  2 02:43:15 2027 GMT
        Subject: CN=7FA7A5A8EB2652D8F87B5B72C6F921EFB1D6E558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:b8:8f:20:67:8f:df:02:00:f4:ee:70:e4:
                    8e:0d:08:2f:2b:4b:bd:25:b5:ee:1a:a4:fd:ac:1a:
                    a8:27:a2:f0:0f:67:0a:cd:ce:3d:ac:4d:bb:08:2c:
                    d9:d5:45:8d:d5:51:45:1f:f2:d3:d4:83:f4:cd:23:
                    7f:23:57:85:d7:00:98:a4:66:18:b6:dc:f6:71:6b:
                    7c:70:77:54:09:20:2d:85:c0:c2:6d:77:5a:63:48:
                    39:7e:0c:e8:ae:05:53:1f:54:7a:cb:70:36:86:e6:
                    50:d4:8c:bc:90:b9:c1:b0:9a:1b:34:fc:0d:9b:ce:
                    ff:0f:9a:66:54:b7:1a:54:04:e0:b9:db:85:70:19:
                    a1:c4:6f:18:d4:dc:02:51:7c:7d:bf:80:2c:1d:4a:
                    e9:5a:00:b5:c1:de:30:08:c0:b4:cc:b6:53:08:dd:
                    e5:ee:d9:08:74:2a:d1:20:ac:fc:08:58:46:ed:89:
                    41:e6:46:71:b6:b7:16:a4:3e:7d:00:f0:d9:04:8c:
                    62:27:44:54:d6:8a:05:40:22:87:5b:93:60:7e:f6:
                    b8:26:0f:43:3d:12:da:7a:3c:19:31:77:21:14:47:
                    65:31:df:68:ef:92:42:36:63:40:6f:43:d6:32:0f:
                    0d:b4:51:7c:25:e8:82:9d:61:ba:65:e8:ea:a0:c1:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:A5:A8:EB:26:52:D8:F8:7B:5B:72:C6:F9:21:EF:B1:D6:E5:58
            X509v3 Authority Key Identifier:
                keyid:1F:79:34:7E:34:F3:84:2F:87:36:87:AE:47:DB:BF:77:66:D0:7A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/323430323a386163303a3a2f33322d3438203d3e20313337333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:1b:2d:a6:f6:1e:c1:64:7c:ee:18:f8:67:a4:aa:19:91:e7:
         53:8e:18:f7:94:f2:55:cd:7e:7b:16:29:c0:5c:5c:99:6b:57:
         9f:ad:ae:f4:62:9f:38:b2:2f:84:25:fe:dc:85:d9:71:0a:f5:
         9b:e1:4a:24:63:aa:d6:88:09:ec:76:59:c2:e2:62:1e:31:24:
         2d:d9:0b:63:6a:d3:32:f8:26:6d:83:f4:06:9a:70:6e:0d:4a:
         c4:aa:5e:51:fe:15:21:c1:cc:c1:d1:fb:0f:0d:5a:76:df:68:
         29:e7:aa:38:a9:eb:ab:66:b8:5f:a6:a9:ba:43:60:44:82:96:
         87:c6:09:6b:9e:dc:28:b0:fa:40:81:60:c8:7c:08:a0:e7:68:
         f8:28:b6:aa:3b:2d:26:b6:a4:c2:05:58:39:29:06:36:83:cb:
         f4:07:24:05:9e:5f:f2:8a:d1:5d:de:3b:6d:51:42:07:c0:78:
         09:ef:18:69:24:16:f6:39:ca:0d:5c:ca:2d:d6:f6:96:40:1c:
         95:77:bb:28:40:26:06:82:5a:e1:e8:43:4b:9e:85:14:c3:a4:
         95:24:66:56:b2:49:3b:59:b5:bd:fa:7a:31:22:b1:d9:8d:61:
         e7:52:84:41:5c:53:ce:50:99:b1:d5:fd:19:6f:96:be:85:4b:
         1d:de:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:35:53 2026 by rpki-client