Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa
File:                     323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa (raw, json)
Hash identifier:          jHrKWWZukLMZ3J2401GmiEuzkAvQx3pBL2xKoO7CBis=
Subject key identifier:   EC:2B:25:52:59:20:4A:6C:CE:5F:61:AF:98:E2:37:A0:F4:E5:70:E3
Certificate issuer:       /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial:       48592CFA65DA32D9A92BC352C1936C3C21175CB5
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa
Signing time:             Sun 03 May 2026 03:05:11 +0000
ROA not before:           Sun 03 May 2026 03:00:11 +0000
ROA not after:            Sun 02 May 2027 03:05:11 +0000
asID:                     38156
IP address blocks:        2405:a540:100a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
                          rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:59:2c:fa:65:da:32:d9:a9:2b:c3:52:c1:93:6c:3c:21:17:5c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
        Validity
            Not Before: May  3 03:00:11 2026 GMT
            Not After : May  2 03:05:11 2027 GMT
        Subject: CN=EC2B255259204A6CCE5F61AF98E237A0F4E570E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3a:de:67:37:63:f7:42:b5:cc:f1:83:23:08:
                    43:9e:1e:1a:76:d2:e6:79:5e:eb:7f:d9:14:eb:df:
                    22:f3:0c:f7:6f:df:cd:c1:cc:98:fa:e8:c1:c5:a1:
                    b2:ad:60:e4:64:1e:f3:0d:a6:3d:c1:bc:75:bd:dc:
                    1b:ee:51:75:6c:43:16:f4:3d:08:b0:ae:66:ca:58:
                    b6:f3:60:6d:1a:fc:99:d6:40:b5:38:6f:6b:95:cd:
                    2f:2c:0b:c9:db:6e:9b:a6:b4:e4:88:93:a3:ae:a1:
                    bc:73:b2:46:99:ff:d4:16:28:c2:0a:9d:3e:e5:ba:
                    89:40:6c:aa:ad:49:27:06:98:ce:e1:96:48:08:57:
                    2c:6d:32:a2:0e:25:2b:a8:70:90:c1:1f:a1:d1:66:
                    da:ce:94:f8:b3:61:45:e6:4d:f1:14:95:58:9e:bc:
                    1e:82:ec:88:11:d1:0f:7c:89:f3:a3:4d:43:63:a6:
                    a3:03:6e:53:e5:7c:1b:fe:dd:a3:06:47:13:9b:5f:
                    92:81:27:0d:1b:ab:75:63:03:de:8e:86:62:0b:a4:
                    84:d1:03:77:f4:63:4e:9a:13:48:1c:8f:a7:69:27:
                    dc:e2:d5:e8:3c:77:62:b6:d3:2e:d1:ec:0f:89:2a:
                    d9:d1:b2:e7:19:f4:7c:a0:23:e8:9f:8c:d2:ce:f0:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2B:25:52:59:20:4A:6C:CE:5F:61:AF:98:E2:37:A0:F4:E5:70:E3
            X509v3 Authority Key Identifier:
                keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a540:100a::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:24:40:79:be:fc:88:d6:01:10:69:87:93:4c:0d:9e:54:d4:
         1d:4b:86:77:a8:f8:43:f5:a0:4d:f4:31:31:23:9c:e9:57:90:
         b7:24:08:62:03:86:96:a9:0f:81:36:da:95:d5:9a:a5:5a:fc:
         9c:e9:db:ab:2a:c5:0b:89:da:02:eb:ab:d3:d5:28:ac:83:4b:
         9f:7d:04:71:26:1b:03:e6:9d:7a:8a:0d:95:2d:a7:ef:56:f9:
         f3:f8:34:11:4d:48:0c:ff:f5:9d:ab:7e:94:09:30:f3:77:9e:
         53:31:55:5b:1b:76:ff:00:8e:7a:83:9d:b7:07:d8:91:36:f0:
         c9:60:83:24:08:1b:a5:29:03:72:46:2c:cb:6f:6a:e0:97:b9:
         cd:a4:65:13:08:e5:4d:3b:92:b2:35:87:4d:df:89:5a:26:3e:
         4d:50:54:f0:03:8d:3a:cb:fe:5c:80:73:9c:14:2e:49:4a:ab:
         0c:7d:0d:fb:8c:56:cd:d7:a9:16:76:dc:9b:c9:72:4f:1d:6d:
         35:ca:db:40:70:4f:93:d7:a2:12:6a:d5:bb:bb:7b:07:ee:4f:
         33:41:98:40:ec:8c:7c:da:8b:66:18:e7:54:f8:8b:78:c6:7c:
         f8:e5:70:95:60:b1:f0:5a:26:dd:30:63:a3:c8:21:39:f3:35:
         93:6c:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:26 2026 by rpki-client