Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f33322d3438203d3e203538333936.roa
File:                     323430303a396338303a3a2f33322d3438203d3e203538333936.roa (raw, json)
Hash identifier:          /ZR2Wmx8v5LSyzEH2Pl73ZaKPDz1ytePaIaN3xWd0I0=
Subject key identifier:   E4:05:C8:89:85:5B:B1:19:A6:B6:3B:13:4D:64:46:CF:AD:02:64:B7
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       4ADBB0DD00FB93F1D60EC0F2CC3E487DCCED75F3
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f33322d3438203d3e203538333936.roa
Signing time:             Sun 03 May 2026 03:02:35 +0000
ROA not before:           Sun 03 May 2026 02:57:35 +0000
ROA not after:            Sun 02 May 2027 03:02:35 +0000
asID:                     58396
IP address blocks:        2400:9c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:db:b0:dd:00:fb:93:f1:d6:0e:c0:f2:cc:3e:48:7d:cc:ed:75:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: May  3 02:57:35 2026 GMT
            Not After : May  2 03:02:35 2027 GMT
        Subject: CN=E405C889855BB119A6B63B134D6446CFAD0264B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:6f:d8:59:be:08:a4:ec:44:a9:50:9c:28:
                    8e:89:08:34:f8:1a:1a:2a:3f:1e:43:d5:c4:2c:44:
                    7a:35:25:44:b3:ce:14:bc:a5:62:86:5b:c3:56:38:
                    76:59:30:34:8a:cf:3f:64:9a:db:1f:9d:19:99:90:
                    a3:46:15:58:76:7b:5f:5e:6a:70:6a:a3:5c:8b:7a:
                    b2:36:31:75:f2:f1:45:ce:c4:c2:19:01:28:19:00:
                    ab:a4:a9:ec:1b:bb:98:f8:cd:81:51:4d:4c:c5:f7:
                    16:01:18:8c:30:89:88:cf:8b:5a:7e:c3:cd:70:5f:
                    c7:fa:21:76:41:b0:79:2a:51:85:20:2a:c6:5f:65:
                    33:8c:46:eb:b5:b1:d0:56:08:35:f5:8d:a7:6c:4d:
                    d9:48:5b:05:dc:dc:42:58:62:07:77:f2:67:e6:25:
                    be:bf:e8:37:49:21:b2:44:ae:05:33:fb:8c:75:a9:
                    c0:1d:5b:a0:92:d5:30:20:de:9e:c3:b5:f6:1c:dd:
                    35:da:7c:0e:17:26:8b:96:27:2c:53:cb:b5:8a:e0:
                    33:3c:7a:00:48:fe:e0:5d:9d:01:4f:c1:cc:1b:11:
                    c7:cb:a2:91:05:7c:45:b8:8f:8e:1b:54:99:62:8d:
                    2d:83:42:a3:a4:de:0b:95:d7:d4:bb:66:a2:bf:f4:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:C8:89:85:5B:B1:19:A6:B6:3B:13:4D:64:46:CF:AD:02:64:B7
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f33322d3438203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:88:19:cb:dd:d5:98:72:fb:d3:75:5b:66:39:9f:46:29:
         6d:a6:1f:84:96:7e:3f:29:ad:5a:6c:bf:1f:4b:51:f1:7b:af:
         ec:95:57:12:53:05:b2:51:2e:9a:ea:1d:f1:c7:50:25:5a:00:
         8a:72:3d:31:5c:ac:6b:f7:e7:b3:40:e3:56:68:b5:3e:9c:8a:
         ea:c5:5e:c0:c3:cc:6e:e4:ca:49:b7:c9:0f:ad:92:1b:ae:8f:
         02:4f:b6:c8:b5:b0:8f:0a:38:29:fc:db:fc:d7:78:1f:00:f8:
         6d:06:35:ba:ee:25:a5:63:ee:c8:cc:7c:dd:64:8b:2c:13:20:
         67:3a:a3:43:d0:41:10:7c:51:e0:8a:a6:fc:64:f1:b7:a9:95:
         d5:ea:b2:58:bc:ae:69:76:26:e5:5a:f6:a1:24:4c:6e:64:ba:
         ae:93:b4:ed:20:0d:7c:73:c9:7b:3b:a4:4f:a9:86:48:b5:9c:
         f9:a2:34:ec:8e:b8:dc:06:f6:42:57:4a:59:4b:05:12:2e:b0:
         12:18:0b:69:e6:c2:0a:99:11:b2:c6:cc:38:e3:93:a6:4a:f8:
         c8:67:08:e8:a7:d4:0f:1b:4e:65:fc:dc:0e:df:bf:de:3a:ce:
         97:69:36:e3:d8:a2:8b:a3:ba:ee:4a:b7:c1:79:3c:b6:0e:00:
         df:70:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:43 2026 by rpki-client