Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/323430353a343634303a3a2f33322d3332203d3e20313339343034.roa
File:                     323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (raw, json)
Hash identifier:          IjCojVCQLVDXso6MfZ5Olpug+HpXiFAkQ/9TrlGdwBg=
Subject key identifier:   51:13:33:D9:DC:9E:B9:EA:3C:9D:73:1A:E6:30:4C:15:E8:71:1F:D4
Certificate issuer:       /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20
Certificate serial:       053536949F359C1AA3BCB615BD8C0E995D5A4492
Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/323430353a343634303a3a2f33322d3332203d3e20313339343034.roa
Signing time:             Sun 03 May 2026 02:44:30 +0000
ROA not before:           Sun 03 May 2026 02:39:30 +0000
ROA not after:            Sun 02 May 2027 02:44:30 +0000
asID:                     139404
IP address blocks:        2405:4640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl
                          rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:35:36:94:9f:35:9c:1a:a3:bc:b6:15:bd:8c:0e:99:5d:5a:44:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20
        Validity
            Not Before: May  3 02:39:30 2026 GMT
            Not After : May  2 02:44:30 2027 GMT
        Subject: CN=511333D9DC9EB9EA3C9D731AE6304C15E8711FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:5c:34:51:c0:fd:cb:70:e7:46:c6:2e:18:
                    a8:6e:10:32:ab:ba:b8:3b:d4:65:76:fd:5c:25:a3:
                    b6:7b:3c:12:7d:90:9e:2d:81:ae:69:d1:53:79:bf:
                    56:39:b3:0f:5d:43:ae:7f:fa:31:6c:cc:5e:3b:f6:
                    18:c4:a4:57:78:5c:bd:81:30:e1:88:cc:6f:fa:a2:
                    e8:27:db:94:30:ee:55:e2:6e:65:8b:84:9b:af:df:
                    16:ab:78:2f:e8:4b:9e:a3:a1:05:fc:1c:18:01:c3:
                    9a:c1:76:0a:90:8b:c7:5c:65:14:a8:22:65:a3:a4:
                    2a:92:57:4e:20:8d:7f:e1:24:7f:85:18:63:7c:27:
                    d6:ec:62:94:de:dd:29:f2:b1:e1:81:5a:3d:5f:23:
                    60:37:83:e1:62:84:34:d4:bb:a3:7f:e8:ff:16:b3:
                    47:3e:04:f0:59:33:22:dd:37:ae:6c:75:19:ce:39:
                    a7:97:b9:c7:90:9c:3c:c0:d5:e0:f4:25:b7:0a:57:
                    29:15:8d:40:fe:db:80:b8:53:d4:88:36:da:1e:d7:
                    53:f7:29:49:fc:87:21:d3:4d:95:0f:7a:a3:b0:01:
                    41:16:92:9a:f4:5a:e2:12:71:c3:94:74:18:fb:1e:
                    1c:d5:10:2c:b0:2c:95:0d:6f:e7:bc:59:9e:b6:4d:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:13:33:D9:DC:9E:B9:EA:3C:9D:73:1A:E6:30:4C:15:E8:71:1F:D4
            X509v3 Authority Key Identifier:
                keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/323430353a343634303a3a2f33322d3332203d3e20313339343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:f1:6b:fd:18:66:c5:1f:0a:47:81:86:2d:c2:84:3d:ae:6f:
         98:33:f2:ee:b4:25:41:a0:6e:d1:9d:74:12:36:f9:92:ca:0a:
         82:0f:35:26:46:3a:93:10:e3:8d:f9:c8:34:01:31:17:65:23:
         61:4d:9f:cb:52:bb:b6:28:5d:8e:81:98:c8:18:04:12:ec:ff:
         ae:94:f4:0e:68:77:4c:35:91:56:b9:47:cb:32:74:8f:2a:94:
         8a:37:ec:f4:1f:75:cc:39:d5:cc:b3:fb:fd:37:f6:b4:17:f8:
         ad:ed:67:15:88:9e:f0:c9:29:19:f9:c8:6b:b3:8b:ea:07:96:
         9d:12:ab:66:a2:f7:bc:e9:b3:4d:f8:a3:56:b7:41:3e:82:7d:
         35:08:17:f1:03:ae:9e:f4:97:c2:ce:ff:3b:c3:a9:ec:69:5e:
         72:5a:fd:b7:7e:91:87:1c:2f:84:79:c5:44:b4:bf:b6:fa:d4:
         4c:0e:be:0f:6a:43:e7:aa:04:7c:2e:7b:75:3b:c8:6c:b5:67:
         1f:76:bb:51:fb:a5:c0:22:cf:02:f4:56:07:07:5b:03:5b:f0:
         fc:37:8e:27:f3:8a:d4:b5:c3:5f:a0:40:dd:e4:42:3c:b6:8a:
         2d:19:80:ca:f6:08:c2:90:6e:96:01:65:3d:2e:ee:f5:5a:61:
         dd:7f:3a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:54 2026 by rpki-client