Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa
File:                     323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier:          lue+qbDlTK8oVnigyB8upc57ElW1RteDV+iRS2CqRWY=
Subject key identifier:   07:3B:3A:90:E2:5C:65:06:BD:ED:AD:BB:4E:59:02:D2:CA:28:B3:4E
Certificate issuer:       /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial:       3616323378D14E5DC5CEA4D32145BC056DB1F388
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa
Signing time:             Sun 03 May 2026 02:54:01 +0000
ROA not before:           Sun 03 May 2026 02:49:01 +0000
ROA not after:            Sun 02 May 2027 02:54:01 +0000
asID:                     139972
IP address blocks:        2405:c440:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
                          rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:16:32:33:78:d1:4e:5d:c5:ce:a4:d3:21:45:bc:05:6d:b1:f3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
        Validity
            Not Before: May  3 02:49:01 2026 GMT
            Not After : May  2 02:54:01 2027 GMT
        Subject: CN=073B3A90E25C6506BDEDADBB4E5902D2CA28B34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:94:6b:02:2d:5e:23:31:67:ca:51:8b:b7:
                    f4:a4:19:74:a2:7f:ed:0f:f1:2f:70:41:1b:35:3c:
                    67:11:cf:8e:01:d0:ec:0d:6c:d1:11:a2:14:60:a8:
                    e5:ba:fe:f9:b9:7b:24:ee:88:ab:30:34:a4:2d:3d:
                    0c:53:93:ee:b0:68:ca:d4:86:4c:48:9b:15:4a:b4:
                    65:2d:92:b5:27:02:d6:fe:e2:bd:8d:03:1f:c8:42:
                    7f:1f:9a:2d:59:72:05:6b:31:13:0c:90:88:e2:f0:
                    6d:fc:58:25:27:16:ef:2b:f1:f8:2b:0b:22:cc:fb:
                    85:d5:63:1d:e0:75:1f:7e:e4:95:0b:0b:c9:28:5d:
                    6e:62:f1:df:0c:4e:68:86:38:82:30:e3:92:a6:a8:
                    c0:68:86:14:ca:0e:21:d9:95:6f:fe:29:e2:bb:c9:
                    c3:f8:ea:cd:09:6a:3d:d5:83:0c:f3:2b:21:64:7e:
                    f2:62:df:09:0b:40:88:f0:c9:d9:96:9c:12:5e:2e:
                    dc:10:a4:57:d0:d0:6f:e5:be:d9:96:13:bc:02:df:
                    7a:56:c2:55:c6:52:98:8e:0a:9c:be:11:b5:26:0d:
                    33:3b:44:2d:19:f0:3c:a6:ab:08:cd:c2:8e:0e:4c:
                    2d:b2:2d:79:7e:0d:7d:f7:b2:92:f7:bb:40:87:33:
                    78:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3B:3A:90:E2:5C:65:06:BD:ED:AD:BB:4E:59:02:D2:CA:28:B3:4E
            X509v3 Authority Key Identifier:
                keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c440:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:93:c3:d5:c6:3c:6a:72:93:e9:ed:42:c5:50:07:db:c6:80:
         23:57:4a:8d:1f:1f:a4:4e:36:01:ac:0f:d1:d7:c4:77:d2:42:
         79:05:1f:66:2a:8f:b1:e7:fb:e9:d6:0f:17:c3:92:1f:91:f7:
         ee:e5:40:f7:80:ee:ad:f8:bc:7d:51:12:e7:56:ca:17:b0:14:
         0d:60:7b:a9:6e:cf:fd:c9:0c:e9:10:50:4f:a8:87:46:75:3f:
         40:58:ca:d7:a3:bf:58:da:84:40:a5:04:8d:49:ff:da:67:4c:
         0e:4f:e8:04:d0:05:9c:0c:dd:f7:80:16:7f:86:91:55:e9:ff:
         96:7e:72:d2:fd:56:90:90:df:e6:5a:d0:38:75:61:5d:84:ec:
         75:60:7b:71:60:40:c3:fd:55:a9:ee:e1:5a:71:51:92:be:93:
         86:0b:9a:09:79:43:76:cd:96:74:30:7b:8f:c9:5e:e1:01:2a:
         bb:82:a1:59:af:b8:c7:68:1e:95:8f:6e:4a:88:d9:32:e2:45:
         28:dc:93:13:d8:9d:ef:c8:68:65:91:2b:a2:26:d8:95:6d:17:
         fb:54:f3:01:da:1f:d3:c3:1c:c6:c0:de:f5:cf:e3:92:80:3c:
         9a:bd:a1:3c:df:65:e5:42:35:54:07:8f:dd:bb:79:c3:90:cd:
         9a:3e:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:06 2026 by rpki-client