Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa
File:                     323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier:          F4qXlNeW0qMmxaj0GytT6W5hjXADsYd42e+bOrj63To=
Subject key identifier:   71:1A:EF:98:71:77:06:B6:65:DC:89:39:7F:ED:46:71:F4:33:D9:F2
Certificate issuer:       /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial:       6794F8594021B12F857425BFEC65AC8B922913AB
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa
Signing time:             Sun 03 May 2026 02:53:58 +0000
ROA not before:           Sun 03 May 2026 02:48:58 +0000
ROA not after:            Sun 02 May 2027 02:53:58 +0000
asID:                     139972
IP address blocks:        2405:c440:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
                          rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:94:f8:59:40:21:b1:2f:85:74:25:bf:ec:65:ac:8b:92:29:13:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
        Validity
            Not Before: May  3 02:48:58 2026 GMT
            Not After : May  2 02:53:58 2027 GMT
        Subject: CN=711AEF98717706B665DC89397FED4671F433D9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:ef:a9:84:41:9d:d5:e1:9e:e7:ca:3a:3e:
                    45:cc:00:2b:a5:48:88:a5:f9:81:64:71:a9:11:36:
                    0c:11:3e:d1:db:c9:6c:f2:e8:28:68:d5:4b:24:87:
                    a6:99:a1:7c:48:2b:0a:87:fb:0c:af:a7:72:95:d0:
                    a0:f6:49:0f:c2:12:a1:dd:ed:8d:ee:7a:b0:a3:62:
                    79:87:3f:74:ac:20:0c:3a:b8:79:38:f9:18:5f:f0:
                    c8:5e:20:61:34:6f:fc:74:96:e3:75:28:18:6d:b3:
                    82:15:a0:1b:94:0d:8f:da:cd:ee:b6:15:57:cb:6c:
                    d1:d6:57:7d:16:59:28:19:17:b4:d9:f3:6a:7f:27:
                    3b:c4:4a:2d:00:2c:3a:5f:8b:c8:75:de:65:24:28:
                    31:f5:12:8d:ba:2c:cc:45:49:ef:1d:09:27:dd:4c:
                    b9:07:46:fa:93:fd:2b:64:66:78:63:09:1f:1f:98:
                    7f:a8:ba:f6:6c:41:b5:da:2c:34:03:69:12:cd:64:
                    6f:ed:93:c1:ff:b3:a8:9d:a6:bc:b0:75:d5:bd:88:
                    23:04:f7:34:cd:cb:dc:ef:64:43:cc:5a:18:c5:0e:
                    75:62:3a:c7:46:c4:12:1d:cc:bd:07:b5:67:19:45:
                    82:30:8d:c1:31:7c:76:4c:07:ca:ab:eb:23:9e:67:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:EF:98:71:77:06:B6:65:DC:89:39:7F:ED:46:71:F4:33:D9:F2
            X509v3 Authority Key Identifier:
                keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c440:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:f8:e6:45:ff:f2:c2:03:a0:e3:3f:6e:f1:2f:a1:4b:e7:
         58:29:15:9c:11:1a:4e:5f:5b:e4:b0:9c:c7:10:72:1b:e7:80:
         1d:4a:d8:9d:c3:5c:eb:93:5b:a2:0c:6a:d7:6a:c8:e5:da:74:
         ed:e2:3b:9b:b0:9f:06:b5:80:28:aa:25:0d:c7:78:24:44:c9:
         d0:54:73:0c:ec:c0:b8:b0:d5:ba:55:12:50:af:7f:d9:07:9d:
         57:1c:b9:63:dd:8b:c6:9a:60:e8:b4:a7:3e:63:38:f1:50:fe:
         f0:4b:25:aa:22:8f:79:66:0a:9f:28:16:66:f5:70:8d:a4:62:
         50:34:33:5c:de:7b:68:c7:99:0e:35:55:e3:b2:4f:74:9d:75:
         45:14:91:1c:8b:7d:63:81:fc:68:93:98:8e:63:0e:2d:04:a0:
         93:c4:1f:e4:dc:25:6e:c5:e0:af:9d:38:76:9b:15:a2:9f:c3:
         bf:ae:bb:12:5d:9e:62:e2:ff:1a:6c:3a:92:c1:1f:a8:84:84:
         81:e5:83:d8:85:7f:e5:08:d3:19:00:04:8f:bb:ec:32:8f:59:
         e8:c3:6b:9e:80:d4:14:3c:44:38:21:12:34:e1:6e:d8:ac:3f:
         25:91:3f:8b:df:e6:63:23:8c:4b:57:eb:4e:96:98:55:05:a5:
         ce:94:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:44 2026 by rpki-client