Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a3a2f34382d3438203d3e20313339393732.roa
File:                     323430353a633434303a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier:          GmyelAbGRQ5SP8uRB6uS1B5fEbf73mIPEGvTxHlDalw=
Subject key identifier:   C3:73:86:0D:0C:12:E0:ED:7C:08:D8:45:A1:D5:98:F8:11:D6:71:84
Certificate issuer:       /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial:       34E0B3941CED20C0B35C4EB78EEC134EAD7128AC
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a3a2f34382d3438203d3e20313339393732.roa
Signing time:             Sun 03 May 2026 02:53:57 +0000
ROA not before:           Sun 03 May 2026 02:48:57 +0000
ROA not after:            Sun 02 May 2027 02:53:57 +0000
asID:                     139972
IP address blocks:        2405:c440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
                          rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e0:b3:94:1c:ed:20:c0:b3:5c:4e:b7:8e:ec:13:4e:ad:71:28:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
        Validity
            Not Before: May  3 02:48:57 2026 GMT
            Not After : May  2 02:53:57 2027 GMT
        Subject: CN=C373860D0C12E0ED7C08D845A1D598F811D67184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:eb:a2:ae:83:5e:cc:79:57:eb:ad:62:a3:
                    c3:73:ee:43:99:51:2e:7d:e4:fd:32:5f:cb:cd:12:
                    3b:1b:ce:cd:53:ed:ac:15:a9:d5:71:ae:30:75:df:
                    f0:74:38:ca:b2:69:e6:49:a8:43:5c:48:53:4d:1b:
                    2c:e1:3f:69:4b:42:4d:33:2a:f2:90:7d:33:df:f5:
                    ad:79:f5:e4:2b:f1:e4:49:30:b6:3f:b1:59:dd:d3:
                    f3:67:ef:b9:88:5a:f4:3d:99:49:a4:95:3d:52:84:
                    7e:ac:1e:a8:fa:ad:54:7a:80:3e:d6:52:a2:04:bb:
                    b7:2e:d3:5f:b4:3b:ae:95:ff:cd:3c:0a:f7:2d:c5:
                    60:ea:e4:51:b3:36:3b:16:f5:1f:ce:77:29:63:76:
                    25:a0:a9:54:aa:8a:bd:06:05:8b:66:c3:b2:20:e3:
                    4e:dc:ed:bd:58:0f:1a:56:e1:74:88:67:97:57:51:
                    50:36:36:94:92:89:6b:4a:83:fe:35:01:9e:6b:a8:
                    97:0b:af:db:08:c9:b6:bb:aa:e4:44:ce:29:60:aa:
                    76:11:56:eb:cd:84:d6:c7:f5:8d:e9:a3:62:4f:22:
                    20:c0:00:14:a7:60:35:19:27:a3:ed:82:4e:a9:1c:
                    52:b8:96:3d:fb:21:55:12:4f:1b:af:a0:d1:4d:e7:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:86:0D:0C:12:E0:ED:7C:08:D8:45:A1:D5:98:F8:11:D6:71:84
            X509v3 Authority Key Identifier:
                keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a3a2f34382d3438203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c440::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:ef:0c:3e:cd:0f:2b:a3:f9:5a:72:fb:16:21:ee:93:cf:
         7a:83:81:39:9f:cc:20:e8:50:d4:3e:9b:96:7e:31:28:5d:aa:
         d8:3c:f8:ba:38:48:9c:c3:23:c8:69:f6:53:f7:c1:c7:ec:a5:
         8b:23:1b:f6:8d:76:c6:92:a2:b7:c7:87:76:86:fd:2e:6c:41:
         13:a7:b7:01:3c:15:71:d5:b0:20:24:ce:bf:9d:f4:13:db:21:
         61:77:00:ca:58:f6:78:f8:a3:c0:10:ac:6b:c9:9d:43:b1:6b:
         9c:a1:81:06:36:26:d7:db:48:43:05:30:10:ba:7f:36:29:cf:
         a0:48:75:1f:a5:45:3d:f2:85:0e:be:19:1a:19:f0:c1:16:b6:
         6c:8f:a4:2c:26:5e:21:4e:4f:b6:03:e9:a1:a4:19:b3:a7:29:
         42:9e:63:7e:16:33:0b:3b:76:88:e3:9b:24:59:6b:38:ec:68:
         79:b5:79:9d:e5:4e:d6:12:39:fa:94:69:f5:f3:29:22:2a:86:
         f7:3a:16:b5:05:87:6a:34:a2:0a:e9:9b:ba:47:74:a9:7b:20:
         23:33:18:6e:b5:19:75:f2:fc:a6:5b:72:64:91:68:3b:69:44:
         e9:bf:fd:2c:86:46:86:55:99:2a:d6:73:95:ae:7c:52:f3:3b:
         62:7f:5e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:18 2026 by rpki-client