Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa
File:                     323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (raw, json)
Hash identifier:          UEjlhJPDkogb1qqoZt4nQF0B03NRjWPLFpd+k3aP3g8=
Subject key identifier:   34:9D:4A:15:C5:15:4E:2D:B9:1C:0D:92:6D:52:D7:8B:8E:AC:1C:78
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       4133D2731264B7BA234B6B9DAFBD0F4541689A7C
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa
Signing time:             Sun 03 May 2026 02:57:30 +0000
ROA not before:           Sun 03 May 2026 02:52:30 +0000
ROA not after:            Sun 02 May 2027 02:57:30 +0000
asID:                     24206
IP address blocks:        2402:ab00:cf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:33:d2:73:12:64:b7:ba:23:4b:6b:9d:af:bd:0f:45:41:68:9a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: May  3 02:52:30 2026 GMT
            Not After : May  2 02:57:30 2027 GMT
        Subject: CN=349D4A15C5154E2DB91C0D926D52D78B8EAC1C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:1c:bd:1e:f8:91:15:dc:29:f2:c0:e9:3d:
                    2e:4c:ee:d3:8e:a5:63:53:f7:4c:a9:f0:0a:c0:39:
                    33:c2:c0:f3:5c:49:47:fa:e8:0b:d7:a4:77:31:c6:
                    60:e6:1e:8d:4d:5c:2f:9e:2b:ce:a2:cf:d0:d6:fe:
                    bf:be:66:04:e3:6e:d9:74:ac:de:64:de:da:ce:c4:
                    05:0a:f8:98:a4:e4:95:fb:9a:61:07:06:83:62:2d:
                    5c:23:02:d4:c7:16:49:23:03:29:6f:77:1a:d7:5f:
                    e9:5f:2a:6d:e0:ec:80:1c:14:bc:28:5a:ba:1d:ab:
                    c8:39:42:a9:cc:bb:66:99:0a:a0:8f:3d:e1:30:1b:
                    38:c9:c7:8b:24:14:af:79:51:0c:7f:7c:93:5d:1f:
                    19:49:d6:ae:aa:ec:d0:d9:75:3d:80:11:d9:12:85:
                    e6:d3:c9:b5:a0:8d:a4:bc:0b:06:35:fb:78:68:c1:
                    d9:65:fa:43:63:26:9c:19:81:53:56:4c:10:8b:a3:
                    37:e9:b4:0c:46:1c:44:e8:96:18:80:b5:0a:0c:2f:
                    34:82:6c:e5:56:d3:f4:8b:7f:7c:07:b1:31:ea:82:
                    af:e1:b8:c9:b4:bb:97:7c:43:f5:20:ab:c0:44:11:
                    99:c6:05:c6:a7:cb:af:02:25:1d:f4:c9:d3:50:04:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9D:4A:15:C5:15:4E:2D:B9:1C:0D:92:6D:52:D7:8B:8E:AC:1C:78
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ab00:cf::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:7e:5d:25:cc:08:ec:39:cb:d5:7e:74:74:a2:ee:46:e5:
         e7:0e:ba:d9:db:45:c9:f3:dc:df:9f:7a:58:3e:1e:9c:e4:c5:
         33:5c:81:99:63:c3:79:f9:15:a0:31:57:3f:15:d2:6d:de:ef:
         c5:e8:bf:e8:7e:38:b4:14:a4:9d:56:7b:27:99:7c:50:af:d4:
         d3:3e:14:d3:e8:89:50:c3:4b:23:f5:34:bc:db:a2:47:39:42:
         83:fc:c1:0a:73:dc:f2:a4:26:cb:ab:8e:2c:7d:b9:2f:d9:ef:
         5b:0f:e7:67:cc:8f:01:73:e5:01:5e:e9:2d:cd:32:f3:81:b9:
         52:52:86:d0:2d:32:f1:a5:94:94:06:42:1f:59:df:6a:15:da:
         f6:a5:29:23:5d:9b:7c:02:42:9d:cd:6d:19:52:de:e3:fb:5b:
         f2:62:83:3a:1f:ce:35:cf:96:8b:5c:b2:1d:eb:56:06:c3:39:
         06:e2:47:83:19:b5:a6:fe:e3:9a:03:f8:5b:36:f4:99:91:ca:
         5e:5c:ed:e2:7d:bf:4b:40:67:e7:41:c4:bc:01:e1:da:c4:62:
         95:2a:b9:78:5b:d0:30:c8:08:4a:fd:44:7d:d6:0f:24:8e:af:
         4f:96:e6:93:00:9d:60:f8:3e:4b:ea:cc:4f:ab:91:0e:d5:d8:
         7f:63:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:22 2026 by rpki-client