Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/323430373a366638303a3a2f33322d3438203d3e20313335343737.roa
File:                     323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (raw, json)
Hash identifier:          P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=
Subject key identifier:   6F:96:EA:C5:A4:59:B6:19:73:56:9B:8A:08:A7:A1:DC:7F:C6:62:91
Certificate issuer:       /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Certificate serial:       73CB716F19900ED168FD917C9E48F5AEA7D6EE63
Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/323430373a366638303a3a2f33322d3438203d3e20313335343737.roa
Signing time:             Sun 03 May 2026 02:57:38 +0000
ROA not before:           Sun 03 May 2026 02:52:38 +0000
ROA not after:            Sun 02 May 2027 02:57:38 +0000
asID:                     135477
IP address blocks:        2407:6f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
                          rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cb:71:6f:19:90:0e:d1:68:fd:91:7c:9e:48:f5:ae:a7:d6:ee:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
        Validity
            Not Before: May  3 02:52:38 2026 GMT
            Not After : May  2 02:57:38 2027 GMT
        Subject: CN=6F96EAC5A459B61973569B8A08A7A1DC7FC66291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:c0:40:36:49:1f:b8:e4:3f:b1:f9:2c:af:
                    ab:30:01:e8:17:0f:10:4c:92:ee:71:df:44:57:a7:
                    59:45:68:d0:e0:f6:30:65:46:53:ed:31:8d:40:ba:
                    59:c9:7d:2c:c4:2d:b4:d0:ac:7e:bb:7f:b6:5d:02:
                    ac:17:7c:cd:1d:34:cd:17:f9:52:41:0e:5c:e1:05:
                    0d:96:37:82:a2:eb:10:5b:07:db:72:c5:2e:35:86:
                    3a:08:af:a0:4a:de:d3:b2:14:1b:8d:77:d6:fb:5a:
                    d7:d4:3e:8a:cb:e8:07:90:8c:a5:fc:72:f2:98:2e:
                    68:8b:3d:a5:09:5c:ba:24:a0:a1:0b:0f:01:b6:b3:
                    6a:9a:3a:e3:92:3f:de:05:e8:2e:9a:bf:c9:ed:98:
                    ae:4d:45:03:df:1f:08:bc:c1:6c:2f:db:0c:c8:b4:
                    e2:1d:46:f0:bc:68:cc:2e:55:02:63:3f:d8:9c:ea:
                    26:ef:9d:8c:54:f0:fb:30:b6:fb:ea:48:e9:76:1e:
                    4e:b3:c7:eb:40:b0:b0:4b:30:e4:c7:f3:65:70:31:
                    e3:e1:1e:4c:28:6b:02:25:14:78:79:29:6f:10:bd:
                    d7:ba:e2:d2:e0:f2:4c:dc:d2:8c:cf:fd:8e:ed:5c:
                    71:9b:7a:f2:ae:aa:21:d0:57:39:f3:b1:9d:1e:8b:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:96:EA:C5:A4:59:B6:19:73:56:9B:8A:08:A7:A1:DC:7F:C6:62:91
            X509v3 Authority Key Identifier:
                keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/323430373a366638303a3a2f33322d3438203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:1f:89:ba:7b:7e:a6:aa:02:07:0f:cf:a2:b2:17:3c:d3:e2:
         95:a5:bd:72:3e:ba:53:17:a9:7c:fe:7c:6d:91:62:c8:ac:82:
         97:37:ad:7b:a0:a3:3f:d0:da:09:0f:df:ec:53:99:6a:21:f9:
         60:21:f6:69:f5:87:aa:40:12:53:e9:50:d8:bc:32:40:46:cb:
         b5:6b:34:c3:df:28:64:aa:d0:13:2e:55:07:4c:c3:54:1e:09:
         21:45:22:7f:f8:81:09:67:94:bd:70:34:c5:17:f0:1a:2e:7d:
         c9:35:48:3f:68:c5:72:3f:28:07:53:89:38:96:50:3b:83:ea:
         c5:62:05:8a:ad:b6:e1:73:27:40:a8:da:da:79:44:30:6f:d9:
         66:94:13:6a:4a:1c:a3:ba:85:1b:2c:f6:c8:52:12:21:f2:e0:
         8e:ff:35:f6:0c:f7:23:91:34:29:78:1b:bd:68:2b:41:ec:3b:
         52:c1:0e:fd:f1:bd:69:34:0a:a7:8e:bd:7d:fb:7e:01:c3:3f:
         46:68:6e:d1:93:e4:41:06:a0:3b:e6:ab:90:86:a0:86:f5:78:
         44:d9:10:01:6a:20:58:45:73:3c:b4:c6:c5:f3:f8:ab:b9:a9:
         eb:95:54:83:bb:fa:35:4c:1a:96:8f:25:59:f8:47:7b:67:c1:
         0d:30:80:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:44 2026 by rpki-client