Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f34382d3438203d3e20313332363437.roa
File:                     323430323a656538303a3a2f34382d3438203d3e20313332363437.roa (raw, json)
Hash identifier:          d2p1pz6iSVKmhRvc7KcXU5ZyLMfCL4gLganI40S2YnI=
Subject key identifier:   E7:FC:20:85:27:E9:10:9C:FF:88:31:5A:6F:A1:ED:32:FA:C6:76:C0
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       3629616EB768A9918D90C80B11FF198D4781FBC5
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f34382d3438203d3e20313332363437.roa
Signing time:             Sun 03 May 2026 02:57:00 +0000
ROA not before:           Sun 03 May 2026 02:52:00 +0000
ROA not after:            Sun 02 May 2027 02:57:00 +0000
asID:                     132647
IP address blocks:        2402:ee80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:29:61:6e:b7:68:a9:91:8d:90:c8:0b:11:ff:19:8d:47:81:fb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: May  3 02:52:00 2026 GMT
            Not After : May  2 02:57:00 2027 GMT
        Subject: CN=E7FC208527E9109CFF88315A6FA1ED32FAC676C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:c2:73:13:7b:eb:2d:1a:98:72:c1:71:ab:
                    26:84:e8:4a:ad:ac:2f:11:d1:22:5b:07:71:20:70:
                    2d:6f:c9:93:09:45:c8:0d:1f:45:c4:5d:72:58:73:
                    13:a8:8e:47:56:94:3d:8e:8d:28:dc:88:df:18:32:
                    aa:5a:57:38:8e:fe:0b:a4:d0:43:58:57:33:30:59:
                    5a:ff:45:ca:df:28:a4:ab:da:22:b8:97:40:38:25:
                    85:35:75:95:55:72:e2:83:3b:f6:0f:48:f0:00:ae:
                    45:58:43:e0:4f:55:4c:29:b4:94:0e:4b:cc:3a:63:
                    88:78:38:d4:e3:f4:0c:2d:69:d5:24:cb:e5:ac:77:
                    a0:f9:22:36:89:73:a3:1c:ed:8b:5e:a0:c8:96:0c:
                    ae:1e:8f:e5:36:5e:3a:b7:37:25:b7:cc:0e:66:70:
                    17:ff:32:b5:71:d4:ef:ab:45:20:f4:14:2c:27:71:
                    ed:69:a6:c6:5e:ad:b2:ee:75:cc:b9:88:dc:1d:7c:
                    b9:b1:b5:10:56:39:f9:c4:1e:33:f7:23:04:98:c9:
                    ad:b1:24:8c:1b:4d:d1:78:98:bf:24:67:c7:94:fd:
                    4f:82:a6:f9:81:e7:81:f6:89:e7:e9:20:b4:63:68:
                    62:37:a2:0a:58:4d:16:40:fd:05:d4:b5:10:64:84:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FC:20:85:27:E9:10:9C:FF:88:31:5A:6F:A1:ED:32:FA:C6:76:C0
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f34382d3438203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ee80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:4c:00:a6:6e:89:0a:24:d4:39:7d:8a:4d:8c:61:77:5e:ca:
         68:3c:de:29:28:f9:83:ee:17:6d:79:68:cc:65:7a:c9:dd:8d:
         c4:e3:d1:d9:33:b2:41:89:6b:0e:76:95:e9:2b:a6:ec:0a:cd:
         3c:aa:cb:d7:28:ef:e7:76:bb:30:00:be:27:8d:30:90:fb:02:
         af:f3:c4:a1:ec:99:67:6d:4c:d8:dc:f9:9c:72:c9:4a:8e:4b:
         e5:26:c6:ba:44:5d:51:e7:c2:e1:64:42:9d:5a:6a:31:3f:15:
         8c:36:72:13:d4:84:cd:59:cd:a0:c4:57:cb:51:10:73:8a:82:
         72:3f:02:71:b9:7d:cf:4c:b7:c9:e2:6a:54:eb:cf:07:45:7c:
         7b:23:1b:7b:2a:b6:a3:17:9e:6a:3e:a0:c3:86:e6:8d:f4:72:
         9d:92:2c:3e:9c:e7:58:52:14:be:3d:38:81:24:ae:a3:41:43:
         db:ce:db:22:d6:ca:08:3b:04:12:df:55:3c:d9:67:21:1e:6d:
         82:99:fc:2c:01:b8:3e:3c:e6:b3:3b:9d:ef:a0:d0:1b:3b:eb:
         a2:7b:3c:dc:87:7e:e7:2e:39:8b:82:12:f3:38:a8:e5:40:40:
         b0:36:f2:ed:f3:5b:36:78:6a:1d:3d:b0:81:4c:9c:ee:a8:be:
         ec:68:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:53 2026 by rpki-client