Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa
File:                     323430323a313230303a3a2f33322d3438203d3e203234353233.roa (raw, json)
Hash identifier:          79pyzvq7PlzmwMv56PeM1vSxs4VK3SzdUl+NKPr2R1E=
Subject key identifier:   9C:4A:EA:0A:8F:AE:99:6F:73:69:12:24:B7:4B:9C:3C:E2:67:05:48
Certificate issuer:       /CN=9541F7A7495AA8918A6FE15016CB396EF2733922
Certificate serial:       454AB922D385FE528ABE8AA2623454B10ABAF035
Authority key identifier: 95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa
Signing time:             Sun 03 May 2026 02:49:53 +0000
ROA not before:           Sun 03 May 2026 02:44:53 +0000
ROA not after:            Sun 02 May 2027 02:49:53 +0000
asID:                     24523
IP address blocks:        2402:1200::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl
                          rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4a:b9:22:d3:85:fe:52:8a:be:8a:a2:62:34:54:b1:0a:ba:f0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9541F7A7495AA8918A6FE15016CB396EF2733922
        Validity
            Not Before: May  3 02:44:53 2026 GMT
            Not After : May  2 02:49:53 2027 GMT
        Subject: CN=9C4AEA0A8FAE996F73691224B74B9C3CE2670548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:c2:8e:ec:d8:20:45:23:0b:6b:7f:76:fd:
                    9d:6c:3d:66:56:4b:a7:7a:cd:e4:da:b7:2f:31:fa:
                    2e:e7:39:13:e0:6c:a3:69:85:c2:1a:bf:ba:a1:b0:
                    99:9c:a9:6f:ab:76:98:1b:78:bb:54:5b:11:02:92:
                    40:f7:5d:5a:b4:71:70:87:e5:01:c8:1a:64:87:4d:
                    bf:0b:fc:57:e5:65:6a:b7:71:71:38:3b:1e:c3:ea:
                    bf:9c:01:c1:b4:41:ae:7e:12:6f:59:4d:41:f7:42:
                    8f:55:58:e4:20:60:15:8b:9b:ea:13:3a:e5:7b:8f:
                    a5:0b:a2:81:c5:d1:81:9a:d4:88:8a:14:d9:ba:8e:
                    b4:f6:31:88:04:d1:b6:8a:d9:ec:31:bc:ae:50:77:
                    c1:b9:94:10:38:6d:0f:76:c7:44:63:5d:51:00:ba:
                    52:09:73:7a:87:45:af:80:0b:7a:8b:bf:cb:19:af:
                    6a:d9:aa:5b:72:30:78:75:ef:fa:89:be:9f:e8:4e:
                    1c:72:ed:a7:41:d7:b1:a4:12:ae:ea:d5:07:b8:ed:
                    99:ab:64:7f:c4:64:47:46:8d:cf:05:9d:54:35:9b:
                    14:f2:96:28:f9:f0:af:7f:76:78:e4:f9:4c:b9:c3:
                    6e:6b:c2:ec:f0:b3:97:69:ff:bb:06:6e:fc:c3:54:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:EA:0A:8F:AE:99:6F:73:69:12:24:B7:4B:9C:3C:E2:67:05:48
            X509v3 Authority Key Identifier:
                keyid:95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1200::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:80:05:f3:b9:3a:24:45:f2:a0:0f:75:61:96:2a:3c:5d:26:
         77:49:4b:34:b6:2c:64:9f:e7:73:d4:29:c4:43:99:44:5e:46:
         21:31:70:8e:3a:7c:73:de:b1:5d:b5:73:10:37:27:6f:60:3c:
         e3:98:c3:b8:f5:6b:f9:85:b6:45:a5:cf:c0:b9:1a:a6:3b:8e:
         71:f4:bb:04:7c:d7:a6:34:42:e8:54:22:d9:28:ba:da:da:51:
         ca:77:d6:2c:f0:81:d6:85:ff:bf:f5:7b:bd:1b:5b:d9:af:16:
         f2:f6:c7:7e:91:6d:09:bc:f6:f2:52:ea:82:e7:c8:96:6a:7b:
         1c:99:96:a4:a7:da:fb:da:ba:c1:f9:8c:be:a7:95:9e:f6:aa:
         00:c2:ac:39:53:bc:1b:44:ca:9e:95:87:ad:7f:f9:08:d0:5b:
         ab:4b:d8:94:98:4a:a7:72:68:8a:ef:bd:e0:b2:26:95:10:f6:
         62:f4:80:2f:76:27:b9:63:11:ca:73:a0:f9:e0:e8:53:dc:e4:
         a3:bf:f4:bf:46:85:8c:8f:41:f8:72:1c:11:95:c5:a7:0e:7a:
         d9:00:c5:8e:77:a4:4d:ac:af:89:ab:ae:c2:6f:20:b4:de:9d:
         b8:f2:97:fe:7d:63:e9:71:c3:42:9c:c3:ee:62:c9:03:9f:ee:
         8f:c4:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:05 2026 by rpki-client