Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/323430333a653630303a3a2f33322d3332203d3e203538333736.roa
File:                     323430333a653630303a3a2f33322d3332203d3e203538333736.roa (raw, json)
Hash identifier:          d/Fq+IffZJ+OozrZYhdBokPyli+2KVods0E+Vb13ir4=
Subject key identifier:   2B:76:F0:37:B5:30:E0:66:12:4C:61:BA:2F:75:D5:ED:B0:31:1B:2C
Certificate issuer:       /CN=0A0BE818C9E480D5B3C1387F48406FDF75525054
Certificate serial:       749697C510532D42DB1EFA519CF9A3D0E79B1F23
Authority key identifier: 0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/323430333a653630303a3a2f33322d3332203d3e203538333736.roa
Signing time:             Sun 03 May 2026 02:49:00 +0000
ROA not before:           Sun 03 May 2026 02:44:00 +0000
ROA not after:            Sun 02 May 2027 02:49:00 +0000
asID:                     58376
IP address blocks:        2403:e600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl
                          rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:96:97:c5:10:53:2d:42:db:1e:fa:51:9c:f9:a3:d0:e7:9b:1f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0BE818C9E480D5B3C1387F48406FDF75525054
        Validity
            Not Before: May  3 02:44:00 2026 GMT
            Not After : May  2 02:49:00 2027 GMT
        Subject: CN=2B76F037B530E066124C61BA2F75D5EDB0311B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:0a:2b:d0:3d:1a:16:0e:d8:fb:52:a5:77:
                    64:10:d2:68:3a:75:49:4b:ac:31:a7:6e:d7:58:3e:
                    c2:3f:83:87:56:49:0f:ae:f4:bb:07:1c:2c:de:46:
                    d9:5c:7b:7e:f9:c9:a1:4a:63:62:a7:93:0c:dc:51:
                    15:e4:5e:50:e0:21:a2:84:0f:64:41:c4:c8:fe:a8:
                    fc:98:03:c3:59:52:75:1a:1e:83:66:6e:52:70:c1:
                    b2:5e:6c:d7:8d:7f:01:be:73:1a:88:73:b8:0e:4f:
                    3f:27:1c:65:bd:2c:62:83:3f:01:24:f8:88:4a:2c:
                    31:6e:b7:b0:dc:2c:7c:3e:cb:2f:5f:b5:a3:09:f9:
                    60:84:90:04:24:c6:b6:12:88:7b:6f:d0:80:b4:0f:
                    ea:ed:93:be:4d:e4:ae:4d:5d:89:31:df:2c:65:26:
                    14:a6:61:74:a9:86:38:85:ac:30:d2:84:59:fe:84:
                    11:7d:2e:f0:de:fe:b6:77:b0:a7:12:2a:31:22:b8:
                    f1:72:47:b6:43:48:66:5c:e1:26:d8:64:7c:2e:39:
                    0e:a0:a0:d0:fd:85:3b:5b:13:8f:91:d8:76:3f:a5:
                    42:68:19:50:49:71:f1:d0:46:71:07:98:70:91:5a:
                    1b:2a:c0:e9:53:23:39:97:55:31:a5:00:41:91:e4:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:76:F0:37:B5:30:E0:66:12:4C:61:BA:2F:75:D5:ED:B0:31:1B:2C
            X509v3 Authority Key Identifier:
                keyid:0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/323430333a653630303a3a2f33322d3332203d3e203538333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:e600::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:ee:a8:36:5c:ac:4d:45:7e:8e:03:6e:7f:27:8b:33:06:7a:
         f9:8d:1c:87:4d:87:27:c6:78:7b:78:e4:c4:49:e0:d9:3c:2d:
         51:ae:cb:fc:f5:8e:42:12:7d:99:08:41:d2:83:bc:a3:58:6d:
         85:e3:a7:25:63:02:43:28:e6:f3:1f:2e:73:f8:68:4c:49:ec:
         0f:ed:73:d4:16:aa:b8:27:7a:85:59:19:56:2e:d8:58:31:c5:
         06:44:58:8c:a2:43:a1:f2:5b:4d:59:a2:2f:97:86:3b:5e:db:
         d1:ff:8e:9c:d5:0d:56:13:14:92:bd:18:23:31:fc:8e:8e:bf:
         56:50:7b:9b:8c:78:fb:21:cd:7d:5a:bc:89:fe:52:02:5a:f4:
         53:b0:3d:9b:63:54:42:87:af:9d:e9:b3:53:f3:93:dd:00:1e:
         21:39:b4:5d:cf:12:e3:0a:6d:3e:eb:e7:f4:de:07:c8:85:d3:
         42:f0:c7:66:32:49:35:34:d6:a8:f7:45:ea:a1:e3:b6:a5:8f:
         50:5b:ea:99:3f:93:c4:f7:a8:2c:93:6c:26:74:f4:db:f4:5c:
         33:96:69:de:13:4a:9e:b0:cc:a6:29:cf:70:76:7f:2b:d3:c3:
         18:46:fe:55:c4:1d:2d:2f:8d:92:e8:b2:6b:d1:04:e3:21:a4:
         b6:0c:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:29 2026 by rpki-client