Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/323430363a373534303a3a2f33322d3438203d3e20313431303637.roa
File:                     323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (raw, json)
Hash identifier:          RqzBnuxk9dxcoh/IjiKr1/twWJoSn5/CF9hmDw/2Ve8=
Subject key identifier:   6D:1D:00:70:E3:5E:38:F4:0F:BA:0E:89:A5:CD:42:DC:DA:A0:49:B6
Certificate issuer:       /CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE
Certificate serial:       62C64F3DE5D78877AB3856723A7481B8E5D75BD9
Authority key identifier: 68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/323430363a373534303a3a2f33322d3438203d3e20313431303637.roa
Signing time:             Sun 03 May 2026 02:44:10 +0000
ROA not before:           Sun 03 May 2026 02:39:10 +0000
ROA not after:            Sun 02 May 2027 02:44:10 +0000
asID:                     141067
IP address blocks:        2406:7540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl
                          rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c6:4f:3d:e5:d7:88:77:ab:38:56:72:3a:74:81:b8:e5:d7:5b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE
        Validity
            Not Before: May  3 02:39:10 2026 GMT
            Not After : May  2 02:44:10 2027 GMT
        Subject: CN=6D1D0070E35E38F40FBA0E89A5CD42DCDAA049B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:f4:5b:01:f9:59:17:25:f8:b5:7b:03:33:
                    b2:4a:30:14:ee:44:6a:9b:9f:e8:2c:1d:12:d8:fd:
                    58:de:04:48:53:e5:24:10:95:5e:13:e1:48:f0:3d:
                    04:c6:25:32:1d:f0:4c:86:0f:1a:1a:5d:e7:4d:d5:
                    ce:2e:b2:ec:40:9c:86:c9:4e:71:6d:bb:1a:37:c8:
                    fc:b8:bd:61:39:fb:d1:f6:b3:d5:9d:f2:39:46:a6:
                    26:b6:7a:1a:f2:92:8c:78:eb:7e:d6:e6:9f:44:41:
                    9e:43:2e:b4:8b:b2:e8:07:fc:47:d0:b4:5b:8c:e3:
                    cf:05:5e:88:8e:2b:4d:6e:60:1f:bc:5c:be:e0:c0:
                    5e:18:70:13:54:3f:1d:6a:ec:29:58:73:e5:91:32:
                    24:ac:78:86:b9:a1:57:b6:53:fd:21:aa:29:c2:5b:
                    9c:ce:4e:dc:a2:7b:91:61:b5:ee:10:13:f9:14:c5:
                    d9:93:e5:27:a8:8f:9c:e3:32:c8:63:de:07:ab:02:
                    2f:db:12:0a:9b:63:86:bd:b6:83:2e:29:c6:11:6e:
                    ba:09:b4:52:b1:16:e1:a2:97:91:5c:10:84:9f:23:
                    ec:5d:e4:8a:b0:90:03:51:3b:96:06:5c:f4:a8:90:
                    e0:99:2a:5a:c6:f2:86:62:56:cd:d2:5f:b3:bf:ec:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1D:00:70:E3:5E:38:F4:0F:BA:0E:89:A5:CD:42:DC:DA:A0:49:B6
            X509v3 Authority Key Identifier:
                keyid:68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/323430363a373534303a3a2f33322d3438203d3e20313431303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7540::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:cb:1a:54:57:48:dd:fe:f2:7c:d4:43:1a:e4:89:c3:ac:
         d8:74:02:3e:30:d2:f8:84:bd:b1:d7:1c:e5:31:7f:af:cd:4b:
         77:9c:82:83:22:9f:57:7e:da:39:d8:84:74:94:f8:a0:52:e5:
         5c:ad:86:8a:15:81:4c:ac:3e:db:39:f2:31:6d:f1:0f:d6:18:
         16:34:1c:e1:9d:09:8b:0a:16:82:ca:39:98:70:ff:72:e7:ae:
         ab:ed:b7:58:a3:db:df:92:2c:6f:f2:4d:f4:61:be:eb:2f:ea:
         f8:74:b6:2a:4f:15:b2:04:c7:7b:9c:5c:bc:fd:1d:f8:f0:50:
         dc:b9:36:f9:79:de:f3:50:e4:1a:fa:b7:d0:5b:a7:ea:b6:fe:
         91:8b:24:3c:41:6d:9a:18:5d:9e:16:7a:cb:61:44:b1:0e:36:
         42:60:8c:34:de:e0:3d:8b:01:c4:53:4b:e2:b5:9f:b6:22:07:
         bd:f2:9a:9f:d1:23:8b:80:8d:3c:b8:73:0a:66:63:f9:f7:ea:
         46:6b:b1:2b:50:29:7b:c4:18:a8:82:b2:ec:ad:5a:23:b7:ab:
         6a:6a:2b:55:19:07:36:3e:68:b3:65:3a:56:51:3d:10:ed:b7:
         47:ec:56:15:5f:a5:12:37:f0:95:42:39:90:16:4a:e0:e2:27:
         46:68:0a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:21 2026 by rpki-client