Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/323430343a343230303a3a2f33322d3438203d3e203234353336.roa
File:                     323430343a343230303a3a2f33322d3438203d3e203234353336.roa (raw, json)
Hash identifier:          w2QzoBugkWwznABo08e8C9mrV5vt2BSnI3bUz3mBQlk=
Subject key identifier:   86:6C:0E:80:2F:EF:32:3C:3E:19:FE:96:BC:62:AF:38:C3:D0:7D:A9
Certificate issuer:       /CN=6793AC144F0FC8CA106AEDD0D4FE2409466E363F
Certificate serial:       1706724739A4AAAADCFF07A5A5EBF84B56E14A0F
Authority key identifier: 67:93:AC:14:4F:0F:C8:CA:10:6A:ED:D0:D4:FE:24:09:46:6E:36:3F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6793AC144F0FC8CA106AEDD0D4FE2409466E363F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/323430343a343230303a3a2f33322d3438203d3e203234353336.roa
Signing time:             Sun 03 May 2026 02:48:32 +0000
ROA not before:           Sun 03 May 2026 02:43:32 +0000
ROA not after:            Sun 02 May 2027 02:48:32 +0000
asID:                     24536
IP address blocks:        2404:4200::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/6793AC144F0FC8CA106AEDD0D4FE2409466E363F.crl
                          rsync://rpki-rsync.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/6793AC144F0FC8CA106AEDD0D4FE2409466E363F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6793AC144F0FC8CA106AEDD0D4FE2409466E363F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:06:72:47:39:a4:aa:aa:dc:ff:07:a5:a5:eb:f8:4b:56:e1:4a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6793AC144F0FC8CA106AEDD0D4FE2409466E363F
        Validity
            Not Before: May  3 02:43:32 2026 GMT
            Not After : May  2 02:48:32 2027 GMT
        Subject: CN=866C0E802FEF323C3E19FE96BC62AF38C3D07DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:d1:aa:89:5e:4d:50:f7:17:3e:3b:3d:98:
                    bc:c8:1c:a3:61:61:37:ef:0f:74:6a:42:a4:76:a6:
                    cc:5a:5d:22:26:76:ff:f8:52:9d:dc:a6:79:c7:bf:
                    41:6d:60:78:aa:85:c4:ac:32:2a:e9:ef:75:c9:a3:
                    5f:eb:b7:a4:f5:d8:3d:5b:68:bf:69:22:ba:0e:ba:
                    b4:79:3f:d7:08:35:11:e2:20:8a:4c:1d:35:67:2c:
                    74:d9:81:a8:32:0f:06:6a:1e:6c:c3:bb:f1:0f:b2:
                    e4:bd:f2:43:e8:42:89:04:52:8e:db:e9:a9:1b:ae:
                    98:c0:b8:58:99:41:17:43:26:ad:a8:15:62:c0:58:
                    ba:9f:6b:af:26:d8:6c:d1:28:0f:4d:09:7e:8b:29:
                    7f:53:51:ed:a1:3e:25:7a:c9:36:60:44:cf:d9:39:
                    e6:53:ef:94:16:91:59:ad:57:8e:81:dc:b7:66:ca:
                    3f:01:c0:54:1e:db:ad:69:32:b8:9a:40:e5:5f:a7:
                    ee:2f:e4:2a:bf:97:0d:2b:65:bd:8d:5e:73:e6:9d:
                    d3:b4:48:70:4f:7f:74:20:0d:61:88:e5:09:c6:7d:
                    26:d5:39:e2:2c:75:c7:fb:1f:a8:ab:59:92:d0:2f:
                    13:a8:32:e0:13:24:34:4f:64:2f:52:07:65:41:5e:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6C:0E:80:2F:EF:32:3C:3E:19:FE:96:BC:62:AF:38:C3:D0:7D:A9
            X509v3 Authority Key Identifier:
                keyid:67:93:AC:14:4F:0F:C8:CA:10:6A:ED:D0:D4:FE:24:09:46:6E:36:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/6793AC144F0FC8CA106AEDD0D4FE2409466E363F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6793AC144F0FC8CA106AEDD0D4FE2409466E363F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/323430343a343230303a3a2f33322d3438203d3e203234353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:1c:a0:4d:72:c4:0b:91:df:d9:f2:13:01:ec:24:5a:62:
         d8:6d:94:ca:68:8e:e1:79:16:9a:61:2d:de:a9:c3:64:f0:c9:
         9a:6e:2b:9f:bb:24:27:2b:9c:9d:20:8e:b0:14:b0:cc:4a:e3:
         3f:cf:92:04:3b:b0:9d:65:d8:e0:52:f9:af:25:42:c9:28:6e:
         02:a2:0d:ee:88:16:53:68:10:76:e3:2e:4d:c4:a4:8a:72:0e:
         a5:96:5a:e7:d0:52:e6:dc:69:22:51:6b:e1:2c:c5:9e:22:6a:
         eb:29:ed:bb:68:81:14:20:46:80:55:1b:69:da:72:06:da:42:
         ef:3f:d2:ac:d2:00:db:42:5a:ca:41:6b:75:1e:15:90:00:2a:
         30:26:b8:20:dc:8c:2e:b6:b1:63:98:23:54:9e:d7:64:ca:b7:
         52:80:92:bd:59:87:58:3a:78:eb:ea:23:26:39:f2:06:df:e3:
         ef:df:3c:18:91:c1:56:0f:1e:0d:ad:69:b9:26:8b:57:02:9e:
         66:e2:39:d8:96:b2:21:e7:73:ee:13:99:48:82:b0:3b:61:1e:
         f8:bb:96:13:69:db:f0:03:9c:41:b6:60:d5:2d:95:6e:36:af:
         0b:b7:f4:b2:05:82:35:f9:c6:dc:a8:f7:47:9d:64:7a:7d:43:
         bb:8c:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:12 2026 by rpki-client