Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/323430363a623734303a3a2f33322d3332203d3e20313431313235.roa
File:                     323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (raw, json)
Hash identifier:          l7ceT7Yady3oaIAEABjXql9rOL2Wif/UR71ZUsOhJlM=
Subject key identifier:   A6:A1:2D:20:7B:4A:94:F0:C9:D1:9E:DC:83:19:76:8D:45:1A:A9:68
Certificate issuer:       /CN=1367EFA8AE36CCF2B126747358BA15C62F3C39C4
Certificate serial:       7789A7FE2FBB9EF71301F204D120DB0E62451127
Authority key identifier: 13:67:EF:A8:AE:36:CC:F2:B1:26:74:73:58:BA:15:C6:2F:3C:39:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/323430363a623734303a3a2f33322d3332203d3e20313431313235.roa
Signing time:             Sun 03 May 2026 02:45:43 +0000
ROA not before:           Sun 03 May 2026 02:40:43 +0000
ROA not after:            Sun 02 May 2027 02:45:43 +0000
asID:                     141125
IP address blocks:        2406:b740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.crl
                          rsync://rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:89:a7:fe:2f:bb:9e:f7:13:01:f2:04:d1:20:db:0e:62:45:11:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1367EFA8AE36CCF2B126747358BA15C62F3C39C4
        Validity
            Not Before: May  3 02:40:43 2026 GMT
            Not After : May  2 02:45:43 2027 GMT
        Subject: CN=A6A12D207B4A94F0C9D19EDC8319768D451AA968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ba:6f:7a:2c:ca:cd:39:96:65:82:6b:82:08:
                    75:eb:64:39:f2:10:41:44:1c:0a:c9:af:3b:70:4c:
                    5c:67:5e:a8:65:02:83:11:b8:b8:06:74:c7:81:a7:
                    5f:70:7c:ea:df:ca:84:a3:e0:94:21:c8:ad:ec:e7:
                    bc:08:68:31:81:f7:83:bb:31:ef:86:f6:fc:f3:07:
                    fd:43:90:3f:2f:07:31:c4:9f:97:e4:ef:be:bf:bd:
                    7b:f9:d3:80:51:8a:bf:56:a7:ca:ef:6a:35:e5:17:
                    be:fd:a5:cc:c6:83:60:65:eb:4a:c1:c1:14:b2:17:
                    3d:80:5e:bc:80:e9:37:8c:4a:0e:7c:34:76:49:ae:
                    c0:a4:62:dc:22:af:76:e9:e1:f9:91:81:56:2d:24:
                    2b:fa:0d:42:9f:3d:d8:58:8b:ff:c4:b5:ef:de:18:
                    65:97:5c:5f:54:ca:10:98:94:d9:8e:32:8d:de:e0:
                    f3:91:58:5e:6b:c8:a6:2e:6f:a8:45:d2:1c:d9:dc:
                    83:6d:13:7b:f6:7a:bf:b1:47:72:6b:2b:63:ce:18:
                    2c:48:4f:71:8c:23:6d:b8:33:a7:16:20:b2:5b:86:
                    15:79:eb:af:52:d7:bc:25:6a:40:17:be:2a:f7:14:
                    ff:44:4c:08:0a:53:7c:dd:fe:6b:a5:7d:32:e2:14:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A1:2D:20:7B:4A:94:F0:C9:D1:9E:DC:83:19:76:8D:45:1A:A9:68
            X509v3 Authority Key Identifier:
                keyid:13:67:EF:A8:AE:36:CC:F2:B1:26:74:73:58:BA:15:C6:2F:3C:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/323430363a623734303a3a2f33322d3332203d3e20313431313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:b740::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:00:ca:c6:cc:d9:b6:f8:d2:01:c2:84:51:5c:cb:69:ca:3d:
         bd:49:6a:3a:66:1c:1d:5a:ef:02:91:6e:ef:a4:77:a3:f0:67:
         ee:c9:04:39:6a:50:56:ba:0b:3e:5d:12:6b:17:bb:84:24:ba:
         8d:cc:8e:b3:02:ac:91:b1:9a:83:dd:b9:68:21:c6:8b:87:04:
         58:4b:83:cd:3f:09:25:d6:da:6f:a5:28:bf:df:46:cc:a3:61:
         56:84:b9:9d:79:77:a4:4a:cc:7b:9c:f4:29:ce:b1:82:95:0c:
         1f:3f:e8:de:91:82:6b:a1:e4:a2:20:a5:c1:5e:3d:2a:7a:12:
         e4:02:9e:c9:4f:6d:e1:94:97:d5:5d:eb:9c:fd:08:11:9d:a6:
         d3:aa:de:80:c6:49:e3:4a:67:50:8a:5e:9d:91:a6:e9:5c:64:
         3d:10:33:f4:f6:9c:75:9d:50:f9:15:9d:c3:d2:bf:77:2b:fb:
         d1:42:8b:98:8d:2b:15:ae:e2:02:da:ef:ac:2b:29:6d:94:05:
         01:2a:f1:98:35:3d:2e:91:54:43:1a:41:47:9d:29:50:12:98:
         d4:97:3b:90:ac:18:47:0a:9c:88:93:83:99:15:8b:94:31:82:
         3e:dd:79:1e:86:40:3f:08:42:a3:4b:84:9a:20:0d:4a:4e:b0:
         55:f5:2e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:04:23 2026 by rpki-client