Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa
File:                     323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier:          IcB4hGK3v9ZmrWAht51ow3fFRasuFAdj4nAaGG7o+CM=
Subject key identifier:   ED:FE:9D:67:D8:EE:55:8D:AB:73:4B:56:8B:C8:EC:6D:07:F3:B4:4E
Certificate issuer:       /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial:       39FF231866BAD491061BAE1BF1741C6C7679F2EF
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa
Signing time:             Sun 03 May 2026 02:56:16 +0000
ROA not before:           Sun 03 May 2026 02:51:16 +0000
ROA not after:            Sun 02 May 2027 02:56:16 +0000
asID:                     141968
IP address blocks:        2407:6ac0:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
                          rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ff:23:18:66:ba:d4:91:06:1b:ae:1b:f1:74:1c:6c:76:79:f2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
        Validity
            Not Before: May  3 02:51:16 2026 GMT
            Not After : May  2 02:56:16 2027 GMT
        Subject: CN=EDFE9D67D8EE558DAB734B568BC8EC6D07F3B44E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:ff:0c:cb:b6:ec:56:0a:52:b6:25:19:61:
                    32:83:05:97:9b:5d:29:83:63:65:79:aa:f9:9a:c9:
                    ca:71:31:c4:34:52:79:d0:d3:c6:c4:7a:84:60:f3:
                    03:aa:70:72:a5:8b:aa:de:56:57:01:e0:0c:d9:a3:
                    f6:73:72:2f:d5:78:d3:f3:74:40:94:30:73:ad:0e:
                    90:8f:ec:88:76:72:a5:d7:3e:a5:31:64:9e:d2:8b:
                    be:c5:d4:ca:2c:db:3b:09:ee:32:a1:f7:90:49:83:
                    ea:06:78:14:6f:f4:dd:00:f1:6b:1c:e4:e2:41:ec:
                    7e:17:ed:fa:64:3a:12:b4:74:75:a2:c3:6e:a0:65:
                    a5:59:6d:a9:22:d3:fa:d6:cb:1e:fd:dc:6f:b2:c6:
                    93:ec:d9:c9:c2:f9:be:a5:81:06:d4:06:70:84:2a:
                    3b:6f:0e:cf:7d:fa:86:42:f1:c4:4a:6f:69:27:eb:
                    f1:35:89:39:6a:ec:2d:75:e2:1d:b4:fd:68:c0:2a:
                    94:7e:8f:33:e4:d0:7a:4c:2b:ed:3d:17:ef:83:d9:
                    32:36:6e:4c:28:f4:9e:ec:05:74:c2:00:bc:f3:2e:
                    d0:dc:76:fb:01:1e:71:2d:4c:e9:2e:61:13:ce:71:
                    af:22:6d:05:ce:73:1e:15:fb:e3:c1:79:97:13:d7:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FE:9D:67:D8:EE:55:8D:AB:73:4B:56:8B:C8:EC:6D:07:F3:B4:4E
            X509v3 Authority Key Identifier:
                keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6ac0:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:38:01:8f:c1:1b:42:a9:6c:ed:2a:e8:cf:fd:e7:01:17:bd:
         ff:29:d9:ec:74:51:69:81:54:01:59:c3:99:2a:15:5f:58:49:
         93:ec:c7:f2:9f:49:40:e2:2e:e4:76:ae:49:1a:7b:c4:fe:07:
         a8:b2:9a:ae:b9:ed:9d:37:bd:a9:62:19:2c:2b:0c:6b:21:0e:
         8f:62:b5:7e:67:e9:a2:44:fd:9f:f7:39:43:cd:3f:85:b4:82:
         4b:8d:23:3d:6a:88:56:e5:85:20:59:4e:f0:3c:05:6a:c8:09:
         31:8f:fb:7a:e8:98:09:8a:ef:78:d7:ed:80:8a:34:ef:2b:bf:
         5c:f8:28:e9:a3:db:2f:53:bc:6b:5e:f6:fb:f1:b4:c3:7c:13:
         6f:3f:09:5c:1f:50:a4:bb:b1:0f:ba:21:40:da:3b:a7:2d:22:
         db:f1:f3:27:ea:2a:f7:fc:39:04:95:21:a9:af:d1:5c:45:15:
         f1:67:b2:ec:34:5c:e0:d3:eb:db:0c:a6:a0:af:e7:4f:30:e3:
         05:6e:58:cf:9d:d6:bb:ab:0d:82:db:da:dc:2e:98:5a:a6:69:
         e0:13:9e:64:9c:cb:8b:47:5f:93:82:3c:b0:75:f3:05:62:b9:
         44:ec:db:26:24:59:50:a6:80:57:65:5d:a0:55:2e:76:3d:b9:
         02:ed:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:08 2026 by rpki-client