Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa
File:                     323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (raw, json)
Hash identifier:          EAVIC7zwho1aCdIDVakXoAbpjUpz2w2Y3LxfSakp/FM=
Subject key identifier:   95:C1:49:6D:3A:6A:1F:AD:47:8D:D6:92:80:69:AA:32:7A:46:0B:5D
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       03AAACE9F9002A3EBFFF3694BBBB22B7D92A1C46
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa
Signing time:             Sun 03 May 2026 02:57:27 +0000
ROA not before:           Sun 03 May 2026 02:52:27 +0000
ROA not after:            Sun 02 May 2027 02:57:27 +0000
asID:                     24206
IP address blocks:        2402:ab00:cafe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:aa:ac:e9:f9:00:2a:3e:bf:ff:36:94:bb:bb:22:b7:d9:2a:1c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: May  3 02:52:27 2026 GMT
            Not After : May  2 02:57:27 2027 GMT
        Subject: CN=95C1496D3A6A1FAD478DD6928069AA327A460B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:22:8b:2b:29:e1:b8:fa:d4:c6:62:c3:f4:49:
                    7a:61:c5:da:60:2b:9d:b0:49:17:b0:55:11:30:20:
                    93:27:b5:4c:b9:95:ad:32:55:83:0f:ae:ff:2c:fb:
                    f0:bc:88:03:b0:55:8d:5b:c4:c7:b3:d5:e1:51:d0:
                    4f:52:a1:f4:15:6c:83:42:cb:05:80:75:fb:13:f9:
                    6a:6f:83:49:91:bd:75:bd:16:7f:35:a6:d3:15:53:
                    72:eb:e5:66:c8:19:b3:ce:f9:7f:d7:c2:3e:b2:d9:
                    ac:7e:2f:e9:5a:e8:aa:af:40:bb:8e:e3:0f:6f:e5:
                    8c:68:9f:f8:a4:e9:44:d4:09:1d:fe:7d:f6:7f:c8:
                    aa:32:3f:58:76:10:6f:a3:83:0c:67:07:f0:13:df:
                    16:1e:2a:4a:fb:e3:8d:bf:f8:66:da:9e:4f:5b:95:
                    1a:32:2c:05:4d:da:d0:e4:ea:04:c9:e8:43:6e:36:
                    ba:60:5c:7b:c0:1e:d0:8e:d8:9e:ac:49:e7:2f:10:
                    88:87:5b:33:d8:f4:4a:1b:92:04:43:57:ff:96:33:
                    c0:10:67:d1:01:7a:06:df:ac:7d:bc:f9:f5:a1:41:
                    bc:dc:bb:b3:f9:45:52:c6:9c:c7:b4:4d:44:90:8f:
                    55:3e:58:de:57:99:3a:a5:47:5b:01:24:74:5a:20:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C1:49:6D:3A:6A:1F:AD:47:8D:D6:92:80:69:AA:32:7A:46:0B:5D
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ab00:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:47:d6:7c:11:1d:7f:bc:7d:2f:30:59:73:28:94:a2:b0:84:
         2f:3a:d6:16:a7:70:0e:27:7b:76:e2:6e:86:6f:4a:79:7f:be:
         b9:2f:aa:82:23:65:73:ca:88:fc:25:04:98:47:af:be:50:4c:
         8f:88:ad:82:95:7d:76:89:6c:c0:f3:63:fa:fa:8d:71:2b:28:
         f1:37:cc:3d:8d:ac:8e:d1:db:1a:f3:0e:e2:98:d4:24:2d:5d:
         52:91:18:21:60:f0:4a:19:3a:00:cf:c1:2d:e3:6a:d7:4a:96:
         81:49:f6:bd:28:4e:96:64:a0:97:85:68:4d:67:b0:36:05:a3:
         f6:cc:60:07:2c:07:e9:0c:cb:8f:81:f5:56:c4:e1:1d:01:80:
         af:6e:ac:60:86:b4:b6:b9:ce:d0:2a:dc:df:a0:ee:5d:b5:f6:
         be:c7:1e:fa:6e:36:18:68:74:ad:e5:28:95:98:66:9d:02:7a:
         72:8f:0e:75:a7:bc:5d:b8:3f:13:2d:e2:3e:13:c8:ea:c8:47:
         18:b8:26:03:21:0e:ad:65:84:1e:ce:8e:23:5b:6e:f0:70:63:
         22:ef:24:fa:c8:8e:02:29:2c:26:67:00:5a:cf:ca:e7:ac:1b:
         f9:2c:0b:29:7b:d9:f4:47:b9:d1:4a:0e:20:9e:c6:e4:50:d9:
         ee:47:98:00
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUA6qs6fkAKj6//zaUu7sit9kqHEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZCNjc4QUU4REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFE
NEQ2OThEODAeFw0yNjA1MDMwMjUyMjdaFw0yNzA1MDIwMjU3MjdaMDMxMTAvBgNV
BAMTKDk1QzE0OTZEM0E2QTFGQUQ0NzhERDY5MjgwNjlBQTMyN0E0NjBCNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIosrKeG4+tTGYsP0SXphxdpg
K52wSRewVREwIJMntUy5la0yVYMPrv8s+/C8iAOwVY1bxMez1eFR0E9SofQVbINC
ywWAdfsT+Wpvg0mRvXW9Fn81ptMVU3Lr5WbIGbPO+X/Xwj6y2ax+L+la6KqvQLuO
4w9v5Yxon/ik6UTUCR3+ffZ/yKoyP1h2EG+jgwxnB/AT3xYeKkr7442/+Gbank9b
lRoyLAVN2tDk6gTJ6ENuNrpgXHvAHtCO2J6sSecvEIiHWzPY9EobkgRDV/+WM8AQ
Z9EBegbfrH28+fWhQbzcu7P5RVLGnMe0TUSQj1U+WN5XmTqlR1sBJHRaIN0ZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlcFJbTpqH61HjdaSgGmqMnpGC10wHwYDVR0j
BBgwFoAU5rZ4ro3IQzmd9TRhB2TYcdTWmNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTc5MjJmODktM2U5Yi00YjIxLTkxODYtYTY0OGMyZGEzZjdiLzAvRTZCNjc4QUU4
REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFENEQ2OThEOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNkI2NzhBRThEQzg0MzM5OURGNTM0NjEwNzY0RDg3MUQ0RDY5
OEQ4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05
MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzQzMDMyM2E2MTYyMzAzMDNhNjM2MTY2NjUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM0MzIzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKr
AMr+MA0GCSqGSIb3DQEBCwUAA4IBAQCJR9Z8ER1/vH0vMFlzKJSisIQvOtYWp3AO
J3t24m6Gb0p5f765L6qCI2Vzyoj8JQSYR6++UEyPiK2ClX12iWzA82P6+o1xKyjx
N8w9jayO0dsa8w7imNQkLV1SkRghYPBKGToAz8Et42rXSpaBSfa9KE6WZKCXhWhN
Z7A2BaP2zGAHLAfpDMuPgfVWxOEdAYCvbqxghrS2uc7QKtzfoO5dtfa+xx76bjYY
aHSt5SiVmGadAnpyjw51p7xduD8TLeI+E8jqyEcYuCYDIQ6tZYQezo4jW27wcGMi
7yT6yI4CKSwmZwBaz8rnrBv5LAspe9n0R7nRSg4gnsbkUNnuR5gA
-----END CERTIFICATE-----
Generated at Wed May 13 10:23:01 2026 by rpki-client