Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa
File:                     323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier:          8/WtzvalY+UjdRN/awqnO7En0ObKFVi4IQgF1lJZ4J0=
Subject key identifier:   BC:E9:E5:E9:1E:B6:16:BB:4F:F2:60:19:C5:26:1F:40:4F:AE:8B:E3
Certificate issuer:       /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial:       56D5D7DCC3216A35369B435EBB67B9BB738CFE05
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa
Signing time:             Sun 03 May 2026 02:56:15 +0000
ROA not before:           Sun 03 May 2026 02:51:15 +0000
ROA not after:            Sun 02 May 2027 02:56:15 +0000
asID:                     141968
IP address blocks:        2407:6ac0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
                          rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d5:d7:dc:c3:21:6a:35:36:9b:43:5e:bb:67:b9:bb:73:8c:fe:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
        Validity
            Not Before: May  3 02:51:15 2026 GMT
            Not After : May  2 02:56:15 2027 GMT
        Subject: CN=BCE9E5E91EB616BB4FF26019C5261F404FAE8BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:2a:9c:b3:46:5b:c7:1b:22:f5:0a:ba:40:
                    d9:3a:73:03:b6:b9:56:ff:d3:77:c9:85:b4:4c:4d:
                    a2:fb:03:81:36:43:02:2c:d7:ee:5a:bb:c7:49:a2:
                    aa:f5:b1:f7:b2:07:33:94:db:33:0e:aa:44:5a:51:
                    e6:7b:e7:14:3e:0c:e5:17:59:38:14:40:e7:a2:c5:
                    a3:d2:5b:13:6d:b0:f0:b6:6f:09:b0:a8:29:4d:37:
                    2a:01:26:c9:da:5d:84:05:75:5b:49:f6:ef:a3:26:
                    ed:f6:8b:ca:5f:c6:99:c1:52:7b:50:8a:19:26:0e:
                    8e:52:21:e0:c2:4c:b7:3b:d2:1f:70:e4:4f:ec:ef:
                    ff:f2:e3:7f:a7:f4:51:ef:c0:23:94:73:6c:e7:df:
                    3e:9e:ed:7d:95:6d:7f:e6:f9:bd:be:c9:8f:10:2d:
                    b0:df:15:c2:b3:32:5c:a0:c8:5b:16:1b:76:4a:80:
                    d1:8a:04:ee:2c:13:f6:80:85:20:4f:1f:d1:16:a7:
                    b5:d6:a0:02:9f:6d:0d:b9:c3:50:6f:53:9f:e8:cd:
                    d3:11:24:ba:b4:e9:bc:44:e9:bc:55:02:8f:aa:1c:
                    1f:36:fc:86:15:a1:4e:80:57:41:41:3f:dc:d1:df:
                    2a:6e:6e:7e:43:75:cb:7f:5a:7c:9d:4c:ea:e3:60:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E9:E5:E9:1E:B6:16:BB:4F:F2:60:19:C5:26:1F:40:4F:AE:8B:E3
            X509v3 Authority Key Identifier:
                keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6ac0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:7b:5b:0e:96:a0:7c:f3:7f:31:51:15:94:d4:a7:42:ce:fc:
         ca:ff:e9:78:87:4c:8e:3f:cf:f0:7e:65:2a:64:1c:e0:d1:30:
         0b:b0:02:fe:32:90:6c:8f:54:48:fc:77:95:b9:90:ca:fc:57:
         fd:cb:5d:76:2e:b6:da:4d:0e:d9:47:23:cd:c6:a3:4e:33:1a:
         e9:af:0b:c2:a5:1f:a7:36:01:9c:8f:1d:0d:29:05:9b:72:f5:
         5b:e6:42:b3:7c:cf:e2:64:06:b1:c0:e9:be:15:2d:c1:6b:ff:
         ed:37:13:67:30:05:6f:32:f9:1e:e4:be:56:21:bb:27:0e:3a:
         eb:f1:38:3f:d4:73:02:58:52:f7:d2:c3:3d:9b:68:eb:05:4d:
         67:e0:79:dd:64:20:52:64:87:d5:29:72:f3:45:5d:91:0e:80:
         b6:0a:b3:0c:d2:6a:08:7b:e4:a5:7d:ca:ae:e6:da:e9:c7:f0:
         0d:e3:67:60:45:cd:96:3f:bf:e7:58:2a:a6:58:58:de:51:db:
         e2:61:69:2e:74:17:62:0b:c6:28:ed:d1:a0:9d:bb:35:17:66:
         2e:ff:92:df:17:aa:3a:e1:22:08:cc:21:ea:37:bc:59:42:e7:
         b9:13:41:37:33:0c:8d:a3:7d:6f:99:5f:ba:44:f1:49:4b:99:
         9b:a2:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:52 2026 by rpki-client