Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa
File:                     323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier:          TYeKvyyE7tAq8MrpNee2w5v+sScpqs071es7y7huqR4=
Subject key identifier:   DD:F5:E4:04:AB:44:A5:CE:C3:95:3B:3C:2A:FF:9B:90:FD:73:2E:94
Certificate issuer:       /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial:       518BC4027138173568E7F65159032CCA890B21C7
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa
Signing time:             Sun 03 May 2026 02:56:14 +0000
ROA not before:           Sun 03 May 2026 02:51:14 +0000
ROA not after:            Sun 02 May 2027 02:56:14 +0000
asID:                     141968
IP address blocks:        2407:6ac0:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
                          rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8b:c4:02:71:38:17:35:68:e7:f6:51:59:03:2c:ca:89:0b:21:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
        Validity
            Not Before: May  3 02:51:14 2026 GMT
            Not After : May  2 02:56:14 2027 GMT
        Subject: CN=DDF5E404AB44A5CEC3953B3C2AFF9B90FD732E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:f1:5d:f5:3b:d8:77:0b:18:73:c2:51:f5:
                    af:7e:9e:26:6e:ca:18:fe:f2:68:85:35:87:2e:58:
                    cc:a2:07:c5:b4:96:74:a9:14:61:42:00:4e:b2:50:
                    69:d5:2c:f5:24:63:1c:25:6d:b2:fe:8e:af:67:bc:
                    05:8a:ab:3d:67:7f:bd:ce:d6:2e:37:44:9d:cc:35:
                    b9:ee:71:46:fc:10:ec:62:ea:0e:31:d8:8f:c7:b1:
                    72:79:30:1d:b8:0b:f5:fa:05:be:1e:d3:7f:fd:fa:
                    c1:0e:29:5d:38:35:f0:d6:46:55:32:7b:86:1e:c9:
                    64:dc:ef:5f:41:78:26:e0:c4:3e:b1:85:6a:9e:80:
                    d0:f9:fb:de:7a:44:2b:b0:c7:6e:83:f3:4c:20:a0:
                    f6:dc:27:12:ec:f6:6f:43:35:04:8f:73:71:bc:8a:
                    e0:83:e0:b8:b3:93:9e:9e:51:b1:93:23:06:60:1e:
                    79:de:fb:7d:fb:e4:d4:f8:57:9d:94:6b:b5:71:14:
                    d8:58:3f:d9:53:d1:c0:36:1a:e0:b8:d4:a2:95:fc:
                    14:98:f8:fa:91:7c:76:7c:9f:c0:7b:be:b6:18:43:
                    e8:23:3e:0f:5d:f6:de:b0:ed:8a:7b:f8:96:36:71:
                    0c:9f:b3:30:35:33:21:a9:01:d6:99:8c:4e:da:6c:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F5:E4:04:AB:44:A5:CE:C3:95:3B:3C:2A:FF:9B:90:FD:73:2E:94
            X509v3 Authority Key Identifier:
                keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6ac0:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:b1:44:4b:ac:15:95:82:d4:1f:d1:52:9b:71:89:dc:8d:6f:
         97:90:66:bd:b3:0d:df:57:37:48:92:b7:75:7a:87:a6:7f:3d:
         db:66:57:a2:97:97:eb:2c:47:ac:fb:f9:b0:9d:78:2e:40:5d:
         f7:8e:bc:2b:2a:f0:1b:8b:0d:be:86:68:7c:ed:37:5c:77:ed:
         14:72:1e:53:8c:7e:69:19:f9:b1:93:72:8e:93:b5:c9:5a:65:
         a5:f5:da:8a:41:5e:e8:32:3c:18:03:85:4e:d6:68:ae:be:ad:
         8a:b4:43:0d:67:66:ee:77:d0:1a:54:71:17:da:8e:ca:02:73:
         52:4a:7f:29:60:a7:b5:02:76:87:5d:89:f2:1e:8d:21:db:2e:
         9b:13:11:0a:2b:a4:8c:48:18:27:97:88:f4:e1:3f:b2:b4:f4:
         52:01:e7:e5:24:fe:6a:65:2b:3d:33:27:0b:a7:5c:80:23:c3:
         eb:9f:ae:fb:5a:5b:9b:27:ff:70:b7:ad:b2:68:23:d5:c6:f0:
         8f:1c:6a:6f:bc:c1:0b:93:55:0e:6e:4e:a7:61:15:8e:c1:84:
         12:a9:af:dd:c2:1b:0f:9a:dc:ca:c0:05:69:60:22:fd:82:2c:
         0e:c3:ad:30:7e:24:de:d5:b4:7d:b1:3d:04:7f:39:c4:c6:e3:
         a8:6d:31:24
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUUYvEAnE4FzVo5/ZRWQMsyokLIccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRGN0EwMDhEOUJCRTlENUQ1MzkzMzY0MjVENEI4RkQz
NjhEQkIyMjAeFw0yNjA1MDMwMjUxMTRaFw0yNzA1MDIwMjU2MTRaMDMxMTAvBgNV
BAMTKERERjVFNDA0QUI0NEE1Q0VDMzk1M0IzQzJBRkY5QjkwRkQ3MzJFOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfmfFd9TvYdwsYc8JR9a9+niZu
yhj+8miFNYcuWMyiB8W0lnSpFGFCAE6yUGnVLPUkYxwlbbL+jq9nvAWKqz1nf73O
1i43RJ3MNbnucUb8EOxi6g4x2I/HsXJ5MB24C/X6Bb4e03/9+sEOKV04NfDWRlUy
e4YeyWTc719BeCbgxD6xhWqegND5+956RCuwx26D80wgoPbcJxLs9m9DNQSPc3G8
iuCD4Lizk56eUbGTIwZgHnne+3375NT4V52Ua7VxFNhYP9lT0cA2GuC41KKV/BSY
+PqRfHZ8n8B7vrYYQ+gjPg9d9t6w7Yp7+JY2cQyfszA1MyGpAdaZjE7abL7FAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU3fXkBKtEpc7DlTs8Kv+bkP1zLpQwHwYDVR0j
BBgwFoAUVPegCNm76dXVOTNkJdS4/TaNuyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTM2YTIxNzEtMTJhMC00ZTAxLWJjYWItYmUzYjZiODM2ZjVkLzAvNTRGN0EwMDhE
OUJCRTlENUQ1MzkzMzY0MjVENEI4RkQzNjhEQkIyMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NEY3QTAwOEQ5QkJFOUQ1RDUzOTMzNjQyNUQ0QjhGRDM2OERC
QjIyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i
Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzkzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAkw
DQYJKoZIhvcNAQELBQADggEBAJixREusFZWC1B/RUptxidyNb5eQZr2zDd9XN0iS
t3V6h6Z/PdtmV6KXl+ssR6z7+bCdeC5AXfeOvCsq8BuLDb6GaHztN1x37RRyHlOM
fmkZ+bGTco6TtclaZaX12opBXugyPBgDhU7WaK6+rYq0Qw1nZu530BpUcRfajsoC
c1JKfylgp7UCdoddifIejSHbLpsTEQorpIxIGCeXiPThP7K09FIB5+Uk/mplKz0z
JwunXIAjw+ufrvtaW5sn/3C3rbJoI9XG8I8cam+8wQuTVQ5uTqdhFY7BhBKpr93C
Gw+a3MrABWlgIv2CLA7DrTB+JN7VtH2xPQR/OcTG46htMSQ=
-----END CERTIFICATE-----
Generated at Wed May 13 04:15:55 2026 by rpki-client