Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a3a2f33322d3332203d3e203338353035.roa
File:                     323430313a316430303a3a2f33322d3332203d3e203338353035.roa (raw, json)
Hash identifier:          U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=
Subject key identifier:   F1:B5:B2:00:82:68:CE:33:2C:7E:AC:44:D8:9D:42:0A:39:33:BB:C2
Certificate issuer:       /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Certificate serial:       469DCDAF39135222A8EA3AD17382A64A75333A80
Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a3a2f33322d3332203d3e203338353035.roa
Signing time:             Sun 03 May 2026 02:47:40 +0000
ROA not before:           Sun 03 May 2026 02:42:40 +0000
ROA not after:            Sun 02 May 2027 02:47:40 +0000
asID:                     38505
IP address blocks:        2401:1d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
                          rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9d:cd:af:39:13:52:22:a8:ea:3a:d1:73:82:a6:4a:75:33:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
        Validity
            Not Before: May  3 02:42:40 2026 GMT
            Not After : May  2 02:47:40 2027 GMT
        Subject: CN=F1B5B2008268CE332C7EAC44D89D420A3933BBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:75:cb:88:54:ce:33:5a:92:c2:ec:cc:08:
                    17:88:e4:cd:c1:67:b2:e2:c8:b3:b9:86:1e:c9:03:
                    06:2f:a0:4c:c0:58:99:8d:6c:38:1c:1c:7d:0c:05:
                    e8:0b:c3:67:3e:d7:84:d5:fd:0b:1a:87:81:27:da:
                    55:30:27:15:56:df:84:49:de:86:70:b7:f3:28:01:
                    8c:20:7e:17:dd:9d:39:17:bc:40:04:ce:9b:a2:4b:
                    81:37:d2:de:6a:53:5d:27:2b:21:c7:0a:c5:b4:07:
                    87:db:ba:72:a5:58:5b:56:dc:70:e1:e7:dc:ed:82:
                    7b:d4:db:02:65:f9:95:94:2b:39:b8:54:ee:05:e0:
                    3b:2c:72:0a:39:f0:c6:cf:27:b9:9f:30:e7:32:21:
                    15:20:de:ea:ef:56:d4:9e:99:c5:d8:65:23:71:ee:
                    f8:ea:81:41:74:4e:4c:02:1a:da:5b:d6:68:ef:ac:
                    65:3f:9b:61:2f:b5:f3:27:76:60:9e:ab:24:33:21:
                    1f:b6:ac:85:57:9a:d2:e4:42:0d:ed:15:81:1d:10:
                    5c:43:08:57:7b:27:5e:b6:3e:b0:09:72:ab:80:ce:
                    31:d5:70:93:2a:a6:02:76:98:ad:99:3a:c7:5d:df:
                    c4:b4:58:03:e6:87:16:36:49:75:95:db:f8:f1:1e:
                    fc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:B2:00:82:68:CE:33:2C:7E:AC:44:D8:9D:42:0A:39:33:BB:C2
            X509v3 Authority Key Identifier:
                keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a3a2f33322d3332203d3e203338353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:61:33:1c:34:51:52:6d:23:ad:8c:4c:da:e0:93:8e:c1:40:
         3f:62:4c:c5:41:e2:4d:31:f7:cf:f6:37:7c:2c:51:4a:4f:4d:
         c7:4b:31:c3:a1:15:0d:cd:43:86:f9:34:19:0c:27:be:15:00:
         fe:d9:33:44:44:a5:18:10:54:19:fa:b2:06:9a:72:70:4d:02:
         27:46:b9:23:b1:45:35:85:c4:c3:55:5d:d9:98:66:aa:d4:2c:
         10:c1:5d:0a:ff:3b:43:7e:f0:f4:41:43:45:dc:d2:b5:9f:25:
         9c:ce:42:6e:be:78:62:8e:d4:90:3f:6a:a6:9b:96:f5:54:22:
         dc:66:e6:b3:90:25:fb:3b:18:0b:97:26:c5:86:f0:3e:b3:f2:
         e8:ff:9a:67:7b:f6:fb:9b:d2:18:06:45:52:6c:24:d0:6e:4d:
         7a:ce:24:51:3f:9c:a2:ab:6f:ca:b0:da:0a:5a:73:46:97:16:
         92:c9:a9:78:f0:36:5c:23:37:63:9e:48:f7:c7:1a:bd:f2:73:
         cb:03:6c:81:6f:89:61:70:7c:d0:be:f2:40:a4:09:61:c8:21:
         06:b1:6d:2b:a9:f0:ad:e8:54:db:ad:fe:b5:9e:6d:7b:83:84:
         7f:d9:0f:fc:00:b5:11:e6:af:67:15:37:b5:34:cf:06:ac:39:
         ea:08:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:09 2026 by rpki-client