Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa
File:                     323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (raw, json)
Hash identifier:          c/+B9i/CScu7h8jGuv1JRMe6ArsSJVjID5tIfBJTEZE=
Subject key identifier:   5E:5A:24:7D:4A:7B:AE:0E:71:1B:01:4B:9E:81:59:29:18:D5:E1:54
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       FDE9AAEDD191C07728125E11F26C48D6D53D3E
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa
Signing time:             Sun 03 May 2026 02:56:57 +0000
ROA not before:           Sun 03 May 2026 02:51:57 +0000
ROA not after:            Sun 02 May 2027 02:56:57 +0000
asID:                     132647
IP address blocks:        2402:ee80:56::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fd:e9:aa:ed:d1:91:c0:77:28:12:5e:11:f2:6c:48:d6:d5:3d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: May  3 02:51:57 2026 GMT
            Not After : May  2 02:56:57 2027 GMT
        Subject: CN=5E5A247D4A7BAE0E711B014B9E81592918D5E154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:fa:90:c7:8d:a4:e5:29:86:77:8d:b3:0f:
                    64:cc:bb:3c:63:fa:c7:1b:fa:f6:4a:1d:b4:eb:5a:
                    94:2a:4c:2e:ed:a9:a6:94:08:5f:15:bc:bd:60:b1:
                    94:11:09:35:e1:97:ae:da:8a:a7:eb:a8:e5:8b:39:
                    47:c8:a5:74:35:89:68:6b:66:fc:cd:2c:63:da:36:
                    cd:bc:d3:6f:45:96:30:85:14:a9:28:b9:bb:d7:8b:
                    8c:24:23:32:2f:23:d1:68:55:85:42:53:68:2b:54:
                    67:3e:4b:eb:5b:4c:aa:d8:be:58:32:d8:d6:d1:3a:
                    bb:26:64:3a:e2:0f:45:69:00:27:59:60:ac:3f:b3:
                    83:55:09:19:ef:e4:98:f2:d5:85:d7:a4:57:93:4e:
                    7d:84:b4:df:a4:90:db:63:a5:b5:9d:63:87:10:a1:
                    cb:bd:6d:fa:52:37:c9:62:6c:ba:73:9c:03:d6:8e:
                    62:1b:de:37:9e:0c:47:4d:92:9a:25:61:d0:1a:9f:
                    d0:dc:17:0e:eb:8c:38:42:30:1b:f0:e7:0b:9f:73:
                    0c:a3:87:27:82:c6:39:c5:87:cc:2f:bd:ec:bf:cc:
                    d3:6e:f0:f3:8f:66:f5:05:d5:3a:5e:bb:dd:78:a8:
                    91:4d:3a:c5:b5:c1:c9:d0:05:f8:53:c9:43:c8:c7:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5A:24:7D:4A:7B:AE:0E:71:1B:01:4B:9E:81:59:29:18:D5:E1:54
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ee80:56::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:d1:6f:f1:85:07:23:39:86:62:83:de:84:86:1d:ad:e0:44:
         9e:46:85:20:6a:1f:c5:ab:79:a6:cd:19:19:2e:b4:74:eb:16:
         ad:c4:41:bf:31:93:27:2a:dd:5e:f0:40:3b:ea:f3:e8:a9:99:
         ec:24:19:90:4f:16:c3:77:b5:48:f1:5f:f8:05:0d:9e:18:f2:
         11:7f:12:2c:2f:91:42:a0:7f:71:3b:b4:6e:93:3c:71:5b:d3:
         0e:df:13:34:be:ec:98:5c:8d:2d:7a:a9:ef:4e:47:ab:2c:de:
         6b:82:37:13:4e:55:17:48:ea:b2:d4:4f:43:7d:25:69:6e:d3:
         b9:29:9d:ca:ca:64:bf:fb:8d:99:f5:70:7c:09:88:45:b6:ae:
         06:2c:2f:1f:6d:35:bf:f7:a3:ca:66:f1:f5:4a:65:3d:51:e2:
         ec:41:30:08:9d:4d:27:71:2c:c6:6d:7d:a1:2c:7f:e1:bf:94:
         36:4c:69:1c:9c:ca:61:26:0c:c1:88:15:01:10:83:26:9b:fb:
         bf:e2:b4:d0:da:5f:a9:e0:59:4b:a6:01:30:fc:e7:4b:5b:6a:
         49:ca:12:4a:ea:79:67:24:33:1a:1f:d0:40:8b:37:5b:9d:ab:
         e7:4c:7f:7e:e1:59:2c:b5:a7:6f:46:ef:f0:7b:8d:7d:54:f8:
         7c:4e:23:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:29 2026 by rpki-client