Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/323430323a366163303a3a2f33332d3333203d3e20313337333036.roa
File:                     323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (raw, json)
Hash identifier:          80JDffhOqKbZ05eh6nF84ipieFeMFx1jGKSA0CuNti4=
Subject key identifier:   A0:A0:4A:1F:BD:C3:DB:1A:CA:34:C0:BE:BB:C8:97:84:47:D9:2B:E2
Certificate issuer:       /CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96
Certificate serial:       13A591B0D8D3D5644299FE81765A62D0D08ACF7D
Authority key identifier: B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/323430323a366163303a3a2f33332d3333203d3e20313337333036.roa
Signing time:             Sun 03 May 2026 03:02:31 +0000
ROA not before:           Sun 03 May 2026 02:57:31 +0000
ROA not after:            Sun 02 May 2027 03:02:31 +0000
asID:                     137306
IP address blocks:        2402:6ac0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl
                          rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a5:91:b0:d8:d3:d5:64:42:99:fe:81:76:5a:62:d0:d0:8a:cf:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96
        Validity
            Not Before: May  3 02:57:31 2026 GMT
            Not After : May  2 03:02:31 2027 GMT
        Subject: CN=A0A04A1FBDC3DB1ACA34C0BEBBC8978447D92BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:07:c0:ef:a3:fa:1d:ad:13:9c:64:8a:93:
                    bb:b0:9f:0f:53:da:6c:b2:3d:5d:2a:9c:53:2e:a4:
                    15:81:c7:7f:32:4b:5e:f0:58:46:d8:3f:e1:7a:3a:
                    d8:86:7c:45:86:eb:f4:3a:c4:ed:60:20:0a:e1:c2:
                    b0:96:1f:2c:7a:6b:59:28:f6:ba:61:18:33:3c:fb:
                    51:c4:8f:2f:42:91:74:5e:fc:12:5c:1b:8f:bd:28:
                    95:69:ad:91:40:db:82:75:c4:d4:2e:8c:6c:99:ef:
                    d6:54:00:ef:2a:a2:28:62:d0:4d:e2:32:67:c5:6a:
                    97:3e:ff:e3:cf:2d:6d:16:bb:b6:11:5b:f1:cc:b7:
                    1d:bb:4f:cb:01:09:cd:b8:09:5e:10:a5:6c:a4:5c:
                    1f:98:6d:25:dc:a6:04:8d:34:5b:05:08:5f:e1:25:
                    9a:5e:2f:95:5e:52:3b:16:b2:82:8c:e2:21:71:2b:
                    7e:16:a4:7a:5a:b2:6b:e8:8f:0b:ea:4b:53:55:4e:
                    d4:a0:a9:68:76:76:12:5f:20:84:c3:ef:d0:b1:7a:
                    0e:1c:28:b3:f3:b6:ba:df:78:7f:80:fa:41:d5:9e:
                    9f:be:de:7f:1e:a5:fd:92:ad:e7:6e:db:25:11:70:
                    1a:13:68:fa:5f:91:0c:6a:75:82:64:c5:54:df:54:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A0:4A:1F:BD:C3:DB:1A:CA:34:C0:BE:BB:C8:97:84:47:D9:2B:E2
            X509v3 Authority Key Identifier:
                keyid:B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/323430323a366163303a3a2f33332d3333203d3e20313337333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6ac0::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:de:5f:be:e9:b4:c8:72:18:99:b0:35:94:ea:68:83:26:a7:
         78:25:81:6b:fb:c7:80:a4:a2:85:f9:9a:bd:30:27:b1:1d:07:
         39:f8:9c:aa:51:f2:13:b5:2c:00:18:0b:e7:e4:d2:5a:34:b3:
         c7:ed:a9:81:e9:67:65:13:97:cf:17:d5:aa:d8:a8:52:2a:fa:
         c4:86:64:ee:04:0b:5a:e8:88:37:3f:dc:9a:8e:60:4a:20:ef:
         35:9c:46:b4:f8:e1:8f:62:4e:fa:e8:2c:78:02:02:89:3c:6a:
         cc:93:4c:23:92:b7:2a:ab:7e:a5:6c:b0:53:e9:54:c7:fa:9d:
         78:65:ab:48:22:6b:e7:77:a8:a2:09:50:92:1a:ea:c1:31:3c:
         03:3b:ae:16:57:91:e2:00:8a:69:81:77:67:58:d9:a1:6e:db:
         3c:3e:0a:f0:8e:dc:b4:c9:cd:d7:f7:9b:76:ba:ea:4c:60:df:
         ca:d3:08:7f:79:89:72:e9:94:50:13:f9:67:4b:27:6a:07:2e:
         27:10:bb:03:a1:3e:0a:bc:97:9c:e5:e8:88:d7:91:34:00:27:
         b6:34:52:93:a8:e3:47:43:7a:ad:72:ad:e3:66:6a:78:c0:57:
         7d:a7:07:b8:ab:24:81:ee:98:aa:69:28:b7:da:15:2e:3a:ca:
         64:83:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:32 2026 by rpki-client