Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/323430323a633330303a3a2f33322d3438203d3e203535363533.roa
File:                     323430323a633330303a3a2f33322d3438203d3e203535363533.roa (raw, json)
Hash identifier:          UIaj9X3lfb9VOoNSMQt3FPXNkkUvi5Cnj1c6MU0v1/8=
Subject key identifier:   F8:31:C1:1C:62:17:2D:56:1C:AC:4A:E8:93:58:AB:25:5C:71:CC:2A
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       6828FE99E6559D781748F0B236259CDB84008E0F
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/323430323a633330303a3a2f33322d3438203d3e203535363533.roa
Signing time:             Sun 03 May 2026 03:06:25 +0000
ROA not before:           Sun 03 May 2026 03:01:25 +0000
ROA not after:            Sun 02 May 2027 03:06:25 +0000
asID:                     55653
IP address blocks:        2402:c300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:28:fe:99:e6:55:9d:78:17:48:f0:b2:36:25:9c:db:84:00:8e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: May  3 03:01:25 2026 GMT
            Not After : May  2 03:06:25 2027 GMT
        Subject: CN=F831C11C62172D561CAC4AE89358AB255C71CC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:c5:06:76:d1:e7:ad:35:c5:e2:e0:3b:35:
                    84:20:c8:d1:08:a0:f8:d3:18:eb:67:5f:14:3d:d5:
                    1f:59:3e:03:22:fb:63:38:84:a8:85:32:46:e8:56:
                    77:65:3f:78:7b:d6:0d:b8:e2:88:c8:09:8d:e7:0a:
                    57:29:09:61:fb:8f:69:27:b0:a2:c6:ee:c6:aa:11:
                    b5:44:d7:c5:a7:0d:9d:9c:40:fd:83:65:72:3e:a1:
                    b3:24:3d:97:e4:fc:10:61:30:1e:b1:cb:90:fa:d1:
                    9f:62:61:55:05:e2:a6:fb:4d:31:be:53:f8:d2:74:
                    59:9c:8f:7d:58:f7:c5:42:2e:fa:49:c2:9d:e2:27:
                    b5:dc:14:50:30:7f:d1:2c:a1:ed:4a:a5:f0:62:fc:
                    f7:da:da:1e:56:b2:c7:2c:e8:a2:09:c6:36:c9:20:
                    f8:53:77:e6:5f:94:3d:51:79:4f:5b:33:fa:0d:93:
                    ab:d7:0a:c9:f1:22:4a:04:a7:0f:18:98:74:0f:8e:
                    61:86:6f:ba:e9:b3:9a:6a:0d:70:97:3a:dc:ae:0f:
                    32:53:98:ee:53:42:62:e8:a7:db:b3:b1:89:1d:1e:
                    99:ed:ba:b9:e3:9c:1d:ab:61:03:da:9f:e0:f4:7f:
                    45:82:b8:8e:2a:4d:22:6b:40:ae:bb:23:44:52:74:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:31:C1:1C:62:17:2D:56:1C:AC:4A:E8:93:58:AB:25:5C:71:CC:2A
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/323430323a633330303a3a2f33322d3438203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c300::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:ff:42:37:fe:c9:da:8a:6c:62:05:03:c5:02:36:1b:21:82:
         97:4d:a9:f4:29:d0:99:e2:80:83:74:e0:88:09:2a:2f:61:3e:
         26:51:7b:9b:a6:e5:e7:f0:70:b7:24:15:93:a8:6c:ac:c8:cd:
         5e:ac:e3:89:bc:fd:0e:62:c8:d4:d1:e4:7b:05:6a:d2:ec:f4:
         3c:10:ae:b7:ec:2d:f8:8d:22:fd:09:8d:3d:af:31:45:27:69:
         18:c8:0c:6b:35:4a:64:58:97:b1:00:9f:76:23:7d:ad:2a:38:
         0b:f4:f1:f9:95:40:60:5f:3a:84:23:5b:30:ba:77:f4:b8:cd:
         aa:f9:9c:43:67:bb:90:6d:9b:92:a5:1c:6e:13:8d:f8:d1:0f:
         1e:78:a9:d3:f8:b9:c3:b4:3e:75:21:ba:ca:8c:6c:81:65:cf:
         ad:53:c9:74:8e:2f:50:bc:c0:d3:cc:95:96:2b:d8:e5:2c:4c:
         20:e7:e8:bc:a5:d5:36:b0:0e:ff:6b:a6:a8:63:fe:ac:a7:c7:
         1d:f0:5f:d6:76:2a:29:64:bf:b3:0f:2a:b4:df:4d:df:f4:28:
         a2:5d:17:68:da:3d:91:4b:b8:52:27:92:0c:87:a3:cd:e0:de:
         08:91:bd:13:76:03:21:58:c5:dd:5d:a6:02:ea:c1:41:a8:8e:
         ca:33:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:44 2026 by rpki-client