Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3a2f33322d3438203d3e20313338313239.roa
File:                     323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (raw, json)
Hash identifier:          vPnthX3ZKaJ+Om2tDL5pqCsTmxjDnskK6/QauLHvJlo=
Subject key identifier:   0E:18:89:D1:C0:35:14:36:BF:F8:A5:B1:C9:BF:A5:51:57:9C:C7:56
Certificate issuer:       /CN=182BF87982E8CCFFF878A12F60C3610A27EB6374
Certificate serial:       219D60ADF8AAB0A5FBAE27B9268EE2EB3DB9C3D1
Authority key identifier: 18:2B:F8:79:82:E8:CC:FF:F8:78:A1:2F:60:C3:61:0A:27:EB:63:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3a2f33322d3438203d3e20313338313239.roa
Signing time:             Sun 03 May 2026 02:52:45 +0000
ROA not before:           Sun 03 May 2026 02:47:45 +0000
ROA not after:            Sun 02 May 2027 02:52:45 +0000
asID:                     138129
IP address blocks:        2404:4240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.crl
                          rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9d:60:ad:f8:aa:b0:a5:fb:ae:27:b9:26:8e:e2:eb:3d:b9:c3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182BF87982E8CCFFF878A12F60C3610A27EB6374
        Validity
            Not Before: May  3 02:47:45 2026 GMT
            Not After : May  2 02:52:45 2027 GMT
        Subject: CN=0E1889D1C0351436BFF8A5B1C9BFA551579CC756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:80:10:24:46:bb:c3:e8:0e:6a:30:01:ac:
                    96:f7:4b:8d:cc:7b:26:5c:78:c7:6d:2f:6b:0f:24:
                    70:8a:01:96:35:01:76:4a:30:cc:0f:2e:40:11:21:
                    de:79:46:a5:5e:22:f7:31:9d:f3:15:04:5a:2f:06:
                    a9:56:cc:c6:70:d0:2e:7e:45:ac:ba:5b:04:be:ab:
                    17:58:66:8e:56:6c:1a:5f:98:cd:26:c7:64:e6:d3:
                    ca:1d:96:66:c6:7f:af:9c:c9:e4:c5:c5:37:00:f4:
                    ee:38:fa:4b:6e:2b:4b:40:50:db:8d:71:4e:96:c5:
                    23:20:8f:21:5c:a7:3d:0d:b3:5f:09:6b:19:b4:23:
                    ea:2d:d8:31:99:50:5e:a3:8e:94:11:58:79:f7:4f:
                    00:1a:f9:07:0b:cf:4a:c0:b3:1f:96:85:47:a6:ce:
                    31:6a:10:ed:69:99:1e:86:b1:47:c9:72:c9:22:6d:
                    81:72:e7:38:e8:5b:ba:67:03:9b:7e:21:69:99:71:
                    46:89:ba:18:0a:4e:e6:2e:d3:11:dc:e1:c8:8b:e9:
                    37:c4:21:b2:5e:c6:63:39:8b:c1:dc:59:27:23:8f:
                    1b:05:1b:77:40:e7:c0:09:67:b4:bd:ca:15:b3:cd:
                    df:b8:fc:d3:97:5f:84:bb:e2:87:1d:3f:f5:22:9b:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:18:89:D1:C0:35:14:36:BF:F8:A5:B1:C9:BF:A5:51:57:9C:C7:56
            X509v3 Authority Key Identifier:
                keyid:18:2B:F8:79:82:E8:CC:FF:F8:78:A1:2F:60:C3:61:0A:27:EB:63:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3a2f33322d3438203d3e20313338313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4240::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:e1:d1:f2:e6:65:dc:bf:d0:fe:54:ef:c2:ff:64:83:1a:f0:
         8c:e9:06:98:7c:71:2a:33:42:0c:cd:10:32:7e:c2:15:d3:65:
         a5:fb:8c:63:4d:aa:a5:e3:83:bc:1f:f7:7d:6d:1d:cb:23:e8:
         95:b4:a8:f4:d4:7f:a9:7a:39:9c:b8:0b:50:55:57:81:70:1b:
         b7:05:99:4b:d1:cc:ae:6e:4f:c9:4b:c0:a8:bc:a2:5f:56:64:
         21:9e:f1:29:b8:95:6e:a6:77:4e:74:e7:d5:54:37:b3:38:54:
         f6:c7:38:71:6a:42:fd:fd:c9:88:f8:fc:b0:e7:36:06:2b:50:
         2b:d6:ef:16:a9:0e:b8:80:ad:77:3e:59:0f:0b:02:32:da:8b:
         ae:9f:c2:11:88:50:56:ff:ac:26:69:a0:24:a2:c5:b6:c3:2e:
         3a:d2:59:11:6c:d6:63:e9:25:0b:13:98:22:4e:7e:58:37:6b:
         cb:08:3e:91:20:20:ad:db:77:3a:63:a9:bc:22:f6:cf:0a:8d:
         28:c5:8f:6a:40:cb:2d:e1:ef:2b:43:7d:38:48:1a:aa:90:a1:
         21:ae:02:b8:cb:77:d5:d7:37:55:f9:ab:56:85:e5:4b:f7:ef:
         3e:00:05:f2:75:3c:62:d1:0d:14:72:45:3f:5f:a1:78:9b:11:
         23:7f:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:56 2026 by rpki-client