Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa
File:                     323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (raw, json)
Hash identifier:          iSYg7oaleP+0hM8Q7VQjTSubDCUgtN9XxBOQbAjqvPc=
Subject key identifier:   7D:C3:7C:E1:AB:7F:9B:64:22:7D:7C:6A:47:42:79:E4:8A:84:83:53
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       34619204896CC2FFFAFF89319DB48F44B57CEB36
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa
Signing time:             Sun 03 May 2026 02:57:34 +0000
ROA not before:           Sun 03 May 2026 02:52:34 +0000
ROA not after:            Sun 02 May 2027 02:57:34 +0000
asID:                     24206
IP address blocks:        2402:ab00:ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:61:92:04:89:6c:c2:ff:fa:ff:89:31:9d:b4:8f:44:b5:7c:eb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: May  3 02:52:34 2026 GMT
            Not After : May  2 02:57:34 2027 GMT
        Subject: CN=7DC37CE1AB7F9B64227D7C6A474279E48A848353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:17:2a:bd:f4:e7:d8:d5:3f:62:fb:d8:a1:
                    43:5f:8f:34:41:56:43:c7:e6:e5:dc:e3:c1:69:79:
                    da:e1:b7:07:b6:b8:cc:86:c1:4e:4f:6b:ee:ae:30:
                    50:e2:77:2e:22:f9:4e:27:c9:ab:4c:7b:ce:96:e0:
                    42:90:10:f8:54:7c:ff:46:39:d9:08:23:ff:ae:e3:
                    67:80:ee:4e:0e:84:58:69:bb:42:9b:ca:d6:a1:4b:
                    04:09:94:40:b9:7f:84:59:ec:c4:26:2d:d3:70:a7:
                    c3:3a:19:57:f5:80:34:1c:6d:42:fd:68:97:33:e3:
                    61:e7:2c:30:18:ab:5c:63:e2:e0:76:cf:fe:8b:84:
                    ee:11:c4:8b:d7:e4:7b:aa:92:13:a4:88:d0:d3:3b:
                    a4:f5:51:e9:cb:55:51:2f:13:78:aa:64:65:94:74:
                    77:8c:cb:c9:53:31:ef:d8:5b:09:64:b0:3a:bf:b3:
                    9e:6f:6f:a6:c1:65:f8:a5:70:49:8a:6a:dd:a5:9b:
                    52:70:e0:15:d2:f2:3f:c6:42:6a:91:e4:16:26:7c:
                    00:71:9e:d3:4a:b8:e3:55:f6:30:75:f2:66:ae:0f:
                    a2:86:86:4b:c0:7c:da:02:4b:14:a2:a2:c7:68:bf:
                    53:da:6b:11:69:79:cf:64:bb:1a:de:49:3d:8a:64:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C3:7C:E1:AB:7F:9B:64:22:7D:7C:6A:47:42:79:E4:8A:84:83:53
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ab00:ef::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:b9:25:8d:54:6a:8e:fc:28:00:ac:1f:13:10:ca:99:62:d6:
         95:1f:25:cf:be:8c:f3:74:c6:36:ed:98:f8:ff:be:83:0a:a8:
         a7:e3:e5:20:e1:78:61:e2:1b:ac:ac:0e:63:fa:87:c6:60:b2:
         c7:69:75:65:ee:e5:d6:4c:9f:02:d4:f3:29:58:d2:59:7c:a7:
         16:6c:ff:94:ec:19:46:7e:eb:22:32:fe:0a:ba:c4:55:95:ec:
         93:a7:29:54:ee:31:5e:31:89:b2:96:31:cb:fa:12:d4:80:08:
         dc:0b:0d:ce:c4:1f:12:eb:84:89:21:75:c9:85:d7:25:cb:e1:
         90:a4:e1:c9:c6:3c:b8:a1:d0:58:65:7a:4f:be:d4:70:0e:b7:
         9a:3b:58:85:85:a0:d8:15:43:0e:43:36:1f:bb:6f:ee:c4:8c:
         79:d6:77:cf:f9:77:71:bb:57:e4:88:ab:01:4c:d4:c3:c9:ae:
         7e:70:d1:c9:f5:39:4b:4b:b2:52:ab:1e:b7:98:6b:c5:ff:e0:
         26:d9:b9:e4:df:1c:b2:b2:65:59:df:2e:1e:eb:85:08:0e:ce:
         4c:d9:be:39:94:e3:53:2b:63:18:cc:a0:b3:5f:19:17:95:92:
         62:72:56:f6:73:48:e2:d4:ed:7c:9e:aa:f6:66:2f:3d:7b:ec:
         3e:fb:ce:fe
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUNGGSBIlswv/6/4kxnbSPRLV86zYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZCNjc4QUU4REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFE
NEQ2OThEODAeFw0yNjA1MDMwMjUyMzRaFw0yNzA1MDIwMjU3MzRaMDMxMTAvBgNV
BAMTKDdEQzM3Q0UxQUI3RjlCNjQyMjdEN0M2QTQ3NDI3OUU0OEE4NDgzNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mxcqvfTn2NU/YvvYoUNfjzRB
VkPH5uXc48Fpedrhtwe2uMyGwU5Pa+6uMFDidy4i+U4nyatMe86W4EKQEPhUfP9G
OdkII/+u42eA7k4OhFhpu0KbytahSwQJlEC5f4RZ7MQmLdNwp8M6GVf1gDQcbUL9
aJcz42HnLDAYq1xj4uB2z/6LhO4RxIvX5HuqkhOkiNDTO6T1UenLVVEvE3iqZGWU
dHeMy8lTMe/YWwlksDq/s55vb6bBZfilcEmKat2lm1Jw4BXS8j/GQmqR5BYmfABx
ntNKuONV9jB18mauD6KGhkvAfNoCSxSiosdov1PaaxFpec9kuxreST2KZMOVAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUfcN84at/m2QifXxqR0J55IqEg1MwHwYDVR0j
BBgwFoAU5rZ4ro3IQzmd9TRhB2TYcdTWmNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTc5MjJmODktM2U5Yi00YjIxLTkxODYtYTY0OGMyZGEzZjdiLzAvRTZCNjc4QUU4
REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFENEQ2OThEOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNkI2NzhBRThEQzg0MzM5OURGNTM0NjEwNzY0RDg3MUQ0RDY5
OEQ4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05
MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzQzMDMyM2E2MTYyMzAzMDNhNjU2NjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQzMjMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqsAAO8w
DQYJKoZIhvcNAQELBQADggEBAGK5JY1Uao78KACsHxMQypli1pUfJc++jPN0xjbt
mPj/voMKqKfj5SDheGHiG6ysDmP6h8ZgssdpdWXu5dZMnwLU8ylY0ll8pxZs/5Ts
GUZ+6yIy/gq6xFWV7JOnKVTuMV4xibKWMcv6EtSACNwLDc7EHxLrhIkhdcmF1yXL
4ZCk4cnGPLih0Fhlek++1HAOt5o7WIWFoNgVQw5DNh+7b+7EjHnWd8/5d3G7V+SI
qwFM1MPJrn5w0cn1OUtLslKrHreYa8X/4CbZueTfHLKyZVnfLh7rhQgOzkzZvjmU
41MrYxjMoLNfGReVkmJyVvZzSOLU7XyeqvZmLz177D77zv4=
-----END CERTIFICATE-----
Generated at Wed May 13 03:56:07 2026 by rpki-client