Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa
File:                     323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa (raw, json)
Hash identifier:          jZfpgRC0d5fkEjm8vD7qc9gZsnKZQYBh0EboO+Uho7s=
Subject key identifier:   AC:9C:93:CA:18:B5:25:02:0B:1F:62:B4:8B:44:9E:FA:4B:38:32:51
Certificate issuer:       /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Certificate serial:       6E6EE8F96FDFE33F90B7FDEF60AB74D825BB881E
Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa
Signing time:             Sun 03 May 2026 02:52:10 +0000
ROA not before:           Sun 03 May 2026 02:47:10 +0000
ROA not after:            Sun 02 May 2027 02:52:10 +0000
asID:                     131736
IP address blocks:        2404:2cc0:48::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
                          rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6e:e8:f9:6f:df:e3:3f:90:b7:fd:ef:60:ab:74:d8:25:bb:88:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
        Validity
            Not Before: May  3 02:47:10 2026 GMT
            Not After : May  2 02:52:10 2027 GMT
        Subject: CN=AC9C93CA18B525020B1F62B48B449EFA4B383251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d6:2a:14:19:d1:cf:6b:29:b7:5c:9c:21:0e:
                    ed:6c:90:53:51:e0:42:20:e1:6b:66:1d:67:d2:3f:
                    79:c6:4c:47:64:ba:0b:74:e8:8e:e9:6f:11:56:20:
                    f8:7a:09:75:63:e6:86:36:3a:98:79:96:af:8b:63:
                    1d:27:34:fe:78:65:bf:bd:d6:d1:d2:4b:a7:ca:b1:
                    87:79:54:25:20:d9:d8:b3:a1:f8:12:93:0a:ab:24:
                    3c:5d:f9:3b:a8:57:13:b0:d0:a5:78:3b:28:43:6d:
                    51:5f:50:cb:c9:42:8a:76:9e:80:12:23:42:1a:d3:
                    bb:16:7e:96:7f:7d:93:31:29:8c:ca:86:97:b6:eb:
                    e2:e7:0e:9b:93:9e:66:15:d2:7e:44:73:7f:74:4a:
                    0b:f8:c2:5d:b7:96:51:78:00:a1:68:be:3b:52:a6:
                    a2:42:b0:11:88:04:92:05:ae:62:e9:38:eb:fa:26:
                    1e:6b:3a:0d:aa:a2:5a:2f:06:95:29:a5:de:82:76:
                    67:60:3d:c0:2a:05:4c:84:a4:5b:58:ee:6c:e3:3f:
                    8e:79:83:09:73:cf:e7:c9:fe:34:e0:e6:05:78:92:
                    c8:2f:e1:ba:7f:0a:5c:b0:f8:ba:5e:0c:29:9b:ee:
                    09:b6:b7:63:62:e6:60:d8:93:36:27:25:b2:8a:1f:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9C:93:CA:18:B5:25:02:0B:1F:62:B4:8B:44:9E:FA:4B:38:32:51
            X509v3 Authority Key Identifier:
                keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2cc0:48::/46

    Signature Algorithm: sha256WithRSAEncryption
         23:a8:87:0d:71:ff:89:d4:84:80:da:06:db:cd:3e:d6:9e:a9:
         15:69:a3:1f:cc:41:ee:28:6e:53:fa:67:13:ec:ca:48:64:cd:
         64:8e:5f:be:39:e6:e3:14:1b:0f:03:22:cf:6d:fd:bd:2f:e3:
         1c:a5:38:6f:aa:b7:84:5a:aa:a4:c9:1c:61:db:9a:71:aa:e4:
         8b:1c:8e:fe:fe:f5:1e:30:55:96:42:40:8b:89:e3:67:a1:7d:
         14:f2:78:d9:8a:ad:60:57:be:72:f2:90:53:77:0e:c5:f0:3e:
         f7:e5:f0:b5:18:a7:69:04:1f:b1:3b:80:98:b1:54:56:1c:9e:
         60:80:17:7e:12:77:62:ef:53:b9:eb:95:26:55:7d:96:b6:4a:
         1b:3e:da:73:89:15:cc:62:0d:4f:31:8a:90:d1:f4:62:e2:44:
         46:21:18:58:9b:56:86:39:54:03:96:48:6f:4a:26:e9:1f:33:
         d3:02:2e:64:54:72:e9:04:1f:1d:02:9d:6d:9f:85:75:cb:ee:
         51:f6:c3:d8:24:06:96:27:51:cf:c7:98:4b:75:9c:74:14:a5:
         a7:fc:af:9f:5f:16:db:4f:ed:b4:4c:f4:44:f0:0d:63:1d:0b:
         4d:4a:fd:5f:25:3b:1a:7e:94:9f:54:4c:b3:02:d4:87:b0:62:
         ad:5b:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:39 2026 by rpki-client