Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f33322d3438203d3e20313332363437.roa
File:                     323430323a656538303a3a2f33322d3438203d3e20313332363437.roa (raw, json)
Hash identifier:          PfU7mv6IN/K07oNWG+0wCm4fLi1KFnoKFqJbJk9QcX4=
Subject key identifier:   1E:C3:2E:45:6E:EA:51:67:3B:67:57:D7:D7:45:73:FB:E9:02:10:85
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       F77F477A54DBAF24D5AF4510141F56340D5118
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f33322d3438203d3e20313332363437.roa
Signing time:             Sun 03 May 2026 02:57:03 +0000
ROA not before:           Sun 03 May 2026 02:52:03 +0000
ROA not after:            Sun 02 May 2027 02:57:03 +0000
asID:                     132647
IP address blocks:        2402:ee80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f7:7f:47:7a:54:db:af:24:d5:af:45:10:14:1f:56:34:0d:51:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: May  3 02:52:03 2026 GMT
            Not After : May  2 02:57:03 2027 GMT
        Subject: CN=1EC32E456EEA51673B6757D7D74573FBE9021085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:99:f1:75:86:4d:0d:08:67:d6:20:0f:f7:
                    cf:8c:43:f2:65:72:32:f6:b1:fb:1f:89:a0:85:53:
                    ed:69:fb:f1:99:aa:b0:23:b4:e9:ae:7d:16:cd:a7:
                    5d:dd:63:75:22:1e:6a:41:c1:cf:3d:55:40:60:a7:
                    a6:46:88:8b:15:26:cd:0c:17:be:96:8d:c6:db:30:
                    0a:54:66:58:db:29:33:11:c6:d3:d5:b7:1a:ba:03:
                    d5:a8:55:18:40:08:a8:84:a2:35:2f:0f:09:f7:9c:
                    75:2e:bc:52:b9:7e:60:34:90:22:44:a9:79:16:ff:
                    96:54:75:34:02:6d:72:39:a3:e8:b4:d7:39:10:76:
                    d6:bb:c7:d3:c8:9e:15:06:4e:82:b6:7c:cc:e7:2d:
                    68:8b:f7:5c:d9:1c:80:f7:10:fe:50:cd:a9:a6:b6:
                    4b:61:c8:9b:57:35:8c:fc:20:90:81:44:52:72:f1:
                    33:a9:d8:7b:0b:a5:56:13:39:c2:4a:5a:d5:db:0f:
                    68:fe:9e:92:ae:a1:5b:1e:ad:32:55:37:1f:5e:46:
                    49:54:87:3d:e1:db:20:f5:63:bf:f4:47:de:de:49:
                    5c:45:2d:be:19:d0:4e:4a:ed:5c:b5:f0:2d:86:f6:
                    9e:2c:8a:a9:8a:14:81:54:3d:76:55:af:98:c0:82:
                    99:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C3:2E:45:6E:EA:51:67:3B:67:57:D7:D7:45:73:FB:E9:02:10:85
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f33322d3438203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ee80::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:4f:2d:08:30:a2:98:1c:34:b8:2a:36:69:95:54:3b:f4:e0:
         16:8c:1c:37:fb:6f:ba:83:4c:66:c8:9c:8c:3c:71:9f:cb:fd:
         57:e2:a7:92:9f:0d:1b:72:9b:3b:c8:86:3f:7a:e6:fb:74:f7:
         44:a1:8e:b8:51:d8:d6:33:a2:06:1f:1b:73:29:16:94:0f:7e:
         04:dd:3e:23:1f:cf:5d:49:b2:85:73:7c:df:b5:22:8a:33:0a:
         b8:59:b5:f7:a0:f0:59:ed:36:99:04:08:28:ff:df:ec:93:ab:
         78:57:45:9f:df:09:3e:47:d4:d8:34:fd:ad:3b:fe:a2:c2:57:
         36:50:59:9e:10:75:39:71:7e:67:23:43:f6:37:f6:b2:08:07:
         1d:db:e4:cf:ae:9b:e4:4b:d8:4b:cd:cc:a9:19:7a:aa:cd:dd:
         82:78:f5:77:48:0f:1f:36:8a:49:01:e2:69:4c:10:55:c8:22:
         8c:9f:b8:8a:d0:3f:d4:cd:4d:26:3a:8b:a6:1a:c2:6a:b0:98:
         3f:c0:c8:64:e6:1a:90:2f:92:4d:f7:c8:a9:5a:f4:28:2c:85:
         de:e5:9c:b6:4c:59:91:db:f3:f9:1c:4a:44:6b:cd:d0:29:ea:
         29:fa:f5:36:23:0f:df:28:38:09:1f:ee:d2:c7:fb:34:6c:3e:
         83:8d:5d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:06 2026 by rpki-client