Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa
File:                     323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier:          y68zFHghkSdjU7J3SSHx7a8FsoE9RE4A/YK0EM7QaeE=
Subject key identifier:   3E:A1:1B:E5:41:B7:AB:84:E4:E7:CA:6A:DE:FB:99:76:19:B1:1F:9F
Certificate issuer:       /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial:       5EA2ED2C6EA2BD25D5B48B6F9B85A4618CD493B3
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa
Signing time:             Sun 03 May 2026 02:54:00 +0000
ROA not before:           Sun 03 May 2026 02:49:00 +0000
ROA not after:            Sun 02 May 2027 02:54:00 +0000
asID:                     139972
IP address blocks:        2405:c440:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
                          rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a2:ed:2c:6e:a2:bd:25:d5:b4:8b:6f:9b:85:a4:61:8c:d4:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
        Validity
            Not Before: May  3 02:49:00 2026 GMT
            Not After : May  2 02:54:00 2027 GMT
        Subject: CN=3EA11BE541B7AB84E4E7CA6ADEFB997619B11F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:9e:64:f2:fb:80:18:5b:a7:1d:ed:96:6e:
                    70:e0:1e:e4:88:f0:b6:01:f9:bd:bb:69:93:4b:d2:
                    d3:a8:71:25:a1:72:66:24:19:26:0e:cc:97:22:0e:
                    da:a8:1d:6f:96:31:75:cd:ce:a9:67:bc:e5:98:45:
                    1b:9e:80:0c:bc:b6:e0:78:f3:3e:d4:9a:7e:8d:1b:
                    e3:c2:fb:d5:35:50:e9:5d:c3:d1:75:a5:40:26:95:
                    98:ba:4a:32:7c:dc:4b:55:b2:ef:95:57:ba:7b:b7:
                    5f:82:c3:a9:f6:ea:08:7f:a4:d7:44:13:c4:e8:26:
                    56:ad:31:a6:25:10:42:85:5f:a1:27:42:54:22:e9:
                    35:96:32:a1:a4:32:04:10:65:ac:b2:11:46:8e:25:
                    37:46:09:fd:be:2d:4b:88:c3:e8:7c:2b:7e:76:84:
                    a2:2e:42:97:fd:45:63:8f:f8:3e:59:f7:7c:c0:f3:
                    68:96:10:9a:8c:91:34:ba:9d:e4:9b:c2:6e:7e:4c:
                    26:83:b7:b6:c3:b3:f7:a4:c9:a8:9d:b6:c2:56:b2:
                    92:b3:91:81:66:4b:f2:05:b7:34:d7:47:52:45:59:
                    b1:80:6a:52:f0:b7:59:c5:08:19:d4:67:38:6a:f5:
                    53:9d:da:3e:49:08:ed:da:d6:39:0e:6a:40:d9:49:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A1:1B:E5:41:B7:AB:84:E4:E7:CA:6A:DE:FB:99:76:19:B1:1F:9F
            X509v3 Authority Key Identifier:
                keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c440:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:6b:50:d2:a9:80:1c:31:23:a7:89:76:b9:1b:b7:91:0c:e8:
         6e:11:ff:5f:7f:92:15:c3:0a:81:b9:ae:f4:60:73:03:7e:6d:
         e6:04:9b:39:53:eb:8f:10:9e:0a:f2:a7:e2:19:f0:7f:a9:9d:
         24:c6:ec:b8:59:aa:c4:f3:bd:1b:2e:5c:f4:30:00:62:8f:73:
         0f:ac:f1:3d:38:cd:f6:75:a8:45:d6:5c:a2:63:7f:42:12:bf:
         63:ea:19:97:c7:d3:78:75:2a:8c:33:19:c0:ea:74:ab:b5:15:
         b5:f6:a6:5e:0e:3c:0b:8e:ba:b9:0d:b2:b2:a5:f1:b3:a1:49:
         e0:17:87:4a:10:9c:e3:97:2f:9e:a6:b2:26:dc:1e:e4:3e:b9:
         93:b8:da:01:e3:96:55:54:d3:b0:92:b5:fb:5e:c0:6b:ea:18:
         f6:d8:1a:9b:70:81:93:55:76:6f:db:f6:09:51:dc:ff:08:3e:
         1a:a2:88:2d:09:e1:17:10:72:81:4d:ac:8f:13:ad:b2:7b:d4:
         75:ca:67:4d:df:03:24:43:89:f5:75:52:16:97:c5:51:52:b1:
         77:43:ef:1f:9a:69:89:0c:39:97:3f:75:c4:d0:a0:3c:2d:01:
         45:80:42:cc:b8:b5:f7:22:09:91:5a:99:3e:08:c7:ff:b0:49:
         f6:88:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:53 2026 by rpki-client