Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa
File:                     323430333a666338303a3a2f33342d3334203d3e203633353031.roa (raw, json)
Hash identifier:          uJwj+UdEgll/6REXwIL81Bgk1EK9mYIoHouDi4N9/p0=
Subject key identifier:   73:97:5F:B0:1C:15:E0:80:69:6C:A9:10:BB:E6:9A:72:23:2C:EB:0F
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       1230D9DA96BC2E05893BD621D045CF6C4915E78D
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:05 +0000
ROA not before:           Sun 03 May 2026 02:54:05 +0000
ROA not after:            Sun 02 May 2027 02:59:05 +0000
asID:                     63501
IP address blocks:        2403:fc80::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:30:d9:da:96:bc:2e:05:89:3b:d6:21:d0:45:cf:6c:49:15:e7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:05 2026 GMT
            Not After : May  2 02:59:05 2027 GMT
        Subject: CN=73975FB01C15E080696CA910BBE69A72232CEB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:de:cd:ec:df:84:a5:fd:36:f0:8d:15:1f:
                    94:fd:69:c9:75:4d:37:2f:85:f2:ae:28:b1:c1:42:
                    05:82:1f:b5:b9:39:df:4d:3d:a4:70:da:f4:75:f3:
                    a8:ad:3a:a2:f8:eb:5a:cb:b9:db:e0:ad:37:ba:b2:
                    95:19:76:e7:a1:be:3c:d8:81:10:f5:09:46:9a:c5:
                    32:84:ef:38:35:c9:e1:0a:cd:b0:b2:72:29:78:02:
                    6e:ba:8d:5d:7a:7b:32:c4:20:80:65:90:27:c1:e1:
                    d1:42:a4:e7:26:da:80:41:43:bc:e1:1e:3e:79:07:
                    d0:bd:d1:f9:2b:5c:c0:9c:52:3f:c9:54:b9:9f:49:
                    60:e5:4e:81:a4:32:03:8b:35:a6:ac:96:1a:e7:1c:
                    fb:2a:37:bb:ae:e4:8c:9c:38:e4:34:1d:0b:be:78:
                    ac:46:02:04:74:0a:c1:1a:d6:b7:60:5a:1e:b5:3b:
                    ce:6c:b5:27:ec:0e:8c:f8:07:5b:b4:b3:31:17:b5:
                    22:56:03:7d:c1:48:ca:58:08:e8:26:f8:93:dc:b0:
                    a8:c5:26:af:10:02:30:73:46:15:5b:38:42:cb:8a:
                    de:49:50:bb:7f:f3:ca:99:84:83:5d:93:64:45:a2:
                    ae:36:74:27:09:e4:5e:dc:88:9a:9d:c7:68:09:96:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:97:5F:B0:1C:15:E0:80:69:6C:A9:10:BB:E6:9A:72:23:2C:EB:0F
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:b0:fb:57:0b:30:32:13:71:c9:22:0e:d5:a1:9d:6c:0e:
         dd:28:30:3e:0f:d3:9f:ee:57:04:7d:eb:bc:29:c8:b5:41:07:
         57:ad:11:14:c2:33:5b:ae:17:69:ea:46:76:c5:3b:7f:2f:64:
         2f:f5:44:77:60:5b:c4:15:08:53:8b:91:60:44:e2:f5:14:a7:
         e8:77:45:2d:ba:e9:14:a7:25:ce:20:ac:f1:30:6c:e5:ea:63:
         8a:f0:65:f2:ad:03:d1:d6:5e:64:8f:8d:2b:18:bd:28:75:5f:
         fb:69:e3:4d:17:8f:3c:48:00:64:80:60:63:38:99:97:cc:1e:
         62:41:66:a2:f2:5d:ea:6f:ee:39:37:c2:32:e0:8a:c1:f8:a3:
         23:aa:26:52:83:af:c0:e0:85:53:f9:2c:85:07:54:f5:3c:27:
         80:66:3b:66:0b:1a:1a:f2:3d:b1:8b:7f:81:10:d1:43:51:61:
         e7:61:58:a4:33:1b:08:4d:d4:34:61:fb:ab:8f:53:3c:0a:29:
         2d:5f:09:fb:d7:d1:66:68:aa:cd:d1:27:02:da:1f:a4:7b:af:
         b7:58:60:89:1d:c9:f4:0c:68:86:52:26:58:02:08:f2:28:1c:
         55:20:ce:74:9c:16:1a:1f:01:ee:77:ce:a5:3c:13:0d:6f:e0:
         e2:ec:61:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:52 2026 by rpki-client