Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/323430363a613330303a3a2f33322d3332203d3e203435373036.roa
File:                     323430363a613330303a3a2f33322d3332203d3e203435373036.roa (raw, json)
Hash identifier:          LXNYT1nV1xGIxdVsRECQ3Cj/A4MmgkuRi4tC78/lvhM=
Subject key identifier:   A8:77:3C:24:58:38:BC:A6:EC:35:68:F9:B4:B1:90:72:C0:9A:BE:C8
Certificate issuer:       /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial:       1476A00D52ED812432DFEFF25A541A4F64A735FC
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/323430363a613330303a3a2f33322d3332203d3e203435373036.roa
Signing time:             Sun 03 May 2026 02:44:06 +0000
ROA not before:           Sun 03 May 2026 02:39:06 +0000
ROA not after:            Sun 02 May 2027 02:44:06 +0000
asID:                     45706
IP address blocks:        2406:a300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
                          rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:76:a0:0d:52:ed:81:24:32:df:ef:f2:5a:54:1a:4f:64:a7:35:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
        Validity
            Not Before: May  3 02:39:06 2026 GMT
            Not After : May  2 02:44:06 2027 GMT
        Subject: CN=A8773C245838BCA6EC3568F9B4B19072C09ABEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:15:39:a1:4c:a7:1b:76:5c:e6:03:e5:c6:b4:
                    35:39:dd:60:42:35:54:38:9f:f3:d7:88:29:91:3e:
                    5f:49:35:6a:64:3d:67:e4:ab:9d:3e:08:70:97:d9:
                    5c:9e:6d:30:7d:68:e3:65:93:d0:e9:c8:3c:12:81:
                    43:27:0e:e7:23:11:dd:18:b3:fe:d0:e5:e5:3a:f9:
                    1d:f1:8a:bc:2e:f1:42:e2:21:f4:e1:3b:52:71:fb:
                    f7:e9:67:59:33:1a:bf:df:64:16:28:80:c0:e0:ef:
                    12:10:1f:35:24:bf:9e:4a:83:3c:a5:72:b0:e4:eb:
                    a8:cc:39:b3:70:3b:56:09:38:af:e9:92:3f:91:c9:
                    ea:6c:3e:14:04:75:55:73:e3:c2:50:1e:c8:21:c2:
                    98:94:f4:ec:55:1f:7b:fd:ad:b9:78:05:25:51:88:
                    30:9d:05:7f:b9:66:a9:ec:d1:2e:7e:c9:ff:a1:16:
                    d3:ca:9d:91:d6:a4:12:95:31:e0:e6:55:f7:d0:65:
                    f6:ea:37:63:fb:f7:f2:5c:06:7e:f7:63:81:1a:8e:
                    24:b6:ff:2a:2c:94:5c:fc:cd:21:64:5d:b7:98:0f:
                    d0:76:da:8a:37:1d:50:76:d9:8e:21:ee:4c:57:47:
                    89:16:04:71:08:20:8c:4e:e9:08:4c:2b:2c:9f:ea:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:77:3C:24:58:38:BC:A6:EC:35:68:F9:B4:B1:90:72:C0:9A:BE:C8
            X509v3 Authority Key Identifier:
                keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/323430363a613330303a3a2f33322d3332203d3e203435373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a300::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:1e:e0:d8:35:81:6c:5f:f1:27:cd:8b:74:87:86:8c:0b:54:
         e9:7f:b0:b6:5f:e9:fa:01:23:08:c0:c9:ad:5e:66:88:32:73:
         67:15:ce:48:0e:7f:18:ea:b5:30:c3:d3:b9:8f:38:97:a5:d3:
         92:ad:2a:c7:e4:8f:0c:63:0d:e7:91:b1:0e:d9:9d:01:34:ba:
         60:af:5c:4c:4e:5c:39:a4:1e:46:03:18:ea:03:6f:47:2e:ca:
         84:ca:8d:25:79:32:1a:ae:92:65:c9:88:28:99:52:51:b2:ce:
         b3:10:29:24:d2:03:8d:40:6f:a9:82:b0:e7:3d:4d:3e:80:ed:
         57:3c:1f:27:9f:ed:38:49:97:9f:ab:b8:f5:2b:97:ff:41:8d:
         9e:6f:6b:3b:ef:3d:6d:f0:bb:e7:dd:a7:d4:85:ba:b6:db:ba:
         7f:fc:7a:a7:e4:83:dd:ee:cd:12:f4:3d:bf:c2:a5:15:d3:26:
         6d:66:8c:91:a4:b8:97:c6:e2:a0:52:fc:30:20:ea:1a:f2:c2:
         c2:d3:43:6a:de:aa:29:ac:74:a5:38:36:f0:c3:16:63:a6:93:
         a8:39:d0:a0:c1:ce:b5:85:47:ee:71:a2:6c:a1:1d:37:6a:b6:
         b3:c5:80:0d:35:8f:cd:f7:b2:c3:f2:5f:fa:61:04:f5:ee:85:
         5c:4b:26:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:02 2026 by rpki-client