Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa
File:                     323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (raw, json)
Hash identifier:          rp6/R1Wlz48G+rpBFS/l32yNHFJy7R2P6b7HlLCGNqQ=
Subject key identifier:   69:07:2A:43:9A:A4:AF:70:13:41:04:31:02:26:7E:0C:E0:09:51:75
Certificate issuer:       /CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
Certificate serial:       4A4766CEECCCC78C34647CEC770B59FE1D4E3126
Authority key identifier: C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa
Signing time:             Sun 03 May 2026 03:03:14 +0000
ROA not before:           Sun 03 May 2026 02:58:14 +0000
ROA not after:            Sun 02 May 2027 03:03:14 +0000
asID:                     138887
IP address blocks:        2405:c40::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl
                          rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:47:66:ce:ec:cc:c7:8c:34:64:7c:ec:77:0b:59:fe:1d:4e:31:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
        Validity
            Not Before: May  3 02:58:14 2026 GMT
            Not After : May  2 03:03:14 2027 GMT
        Subject: CN=69072A439AA4AF701341043102267E0CE0095175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:ce:8d:73:c2:56:d7:73:31:e8:37:4b:08:
                    91:49:54:dd:c8:3a:9e:ef:7d:7d:cb:7b:94:fd:f6:
                    84:20:7f:1d:b9:9a:30:f4:3b:88:1c:9a:10:19:48:
                    e3:d6:e4:ce:61:59:aa:f6:85:66:28:4b:ec:4e:0e:
                    8c:0a:15:ce:78:ec:6f:53:dd:bf:b6:bc:2b:05:2f:
                    7a:a2:8f:98:34:b0:51:0c:15:31:4b:fb:33:2e:9b:
                    3e:d4:3c:8a:a5:36:ae:33:a8:5a:a9:dc:94:71:5f:
                    9e:5c:4f:8f:f7:4d:20:ad:3e:7c:2c:a5:58:01:57:
                    b9:fb:4d:05:63:6f:bf:4c:3d:28:95:33:72:7a:ac:
                    ce:82:ca:e6:8d:c5:c4:eb:da:d9:61:df:65:f7:64:
                    bf:cb:03:5d:7c:b9:e8:80:30:a0:7b:d2:27:1a:e7:
                    cb:67:de:7f:51:ab:84:e0:d4:df:3a:c9:ca:64:5e:
                    d4:d0:d1:3d:65:68:e4:cd:b5:49:cd:9e:75:38:20:
                    ff:d5:c5:9e:ad:03:8b:b7:58:2a:45:51:22:c6:08:
                    e5:b0:8e:d6:1f:3f:13:30:7a:2d:1e:fd:25:9e:59:
                    4d:d2:64:de:1a:1a:a6:21:15:0e:7e:2c:2d:ee:61:
                    b0:df:12:ad:94:b5:b3:c6:34:19:ae:c1:be:3c:f0:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:07:2A:43:9A:A4:AF:70:13:41:04:31:02:26:7E:0C:E0:09:51:75
            X509v3 Authority Key Identifier:
                keyid:C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c40::/36

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:0c:93:51:e9:11:8b:44:71:20:7d:c8:a9:2c:f6:36:51:
         f2:ad:9e:c9:d4:52:2f:bd:f0:e6:6a:b5:a1:ca:78:ce:99:62:
         09:1d:8d:9a:1c:22:db:e3:59:78:c1:31:cc:ef:0b:5d:ef:06:
         75:b7:33:c2:da:15:75:d6:3a:04:cf:8b:f4:4e:ca:b4:ab:3f:
         39:4a:38:b8:59:c0:c9:26:3b:fb:2e:33:06:2f:18:c5:7a:95:
         a8:ef:d2:14:90:38:6f:14:c4:41:94:07:58:89:9b:49:20:6a:
         f4:f2:fe:0c:cf:29:c6:77:77:1c:09:82:5c:39:41:42:6e:2f:
         36:38:fc:41:f5:3d:7a:10:ad:8d:ff:af:46:d5:ba:c1:1c:1d:
         86:4c:85:d8:9c:28:6f:3f:c0:b6:08:c9:76:59:6c:82:13:3c:
         39:23:53:aa:0a:6b:a6:19:b2:22:9a:4b:fc:c1:05:c3:3e:36:
         46:22:70:38:a5:e1:fb:86:43:57:eb:71:83:0d:e9:a9:f1:e1:
         46:24:6e:bc:c9:5a:95:ac:dc:73:44:26:83:61:d3:45:f4:35:
         11:1e:fc:11:b2:44:9e:27:d3:1a:94:f1:a3:6b:b3:2f:4e:5d:
         d8:32:1e:aa:98:76:73:c0:b0:31:d8:13:da:d6:a0:b0:d9:37:
         f7:15:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:25 2026 by rpki-client