Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa
File:                     323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (raw, json)
Hash identifier:          LCoG5MBtVr1gnp0Cb9QG4F/kZ9BcJIu/HLJgqKdyZtQ=
Subject key identifier:   80:15:97:84:89:8D:CC:E4:82:17:2F:D6:BA:03:AB:6F:7F:09:27:C2
Certificate issuer:       /CN=4E0311031DBA1471A97F3183416162430EA78405
Certificate serial:       180D6DAFC715643D9BA90777DFF473FB908A437B
Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa
Signing time:             Sun 03 May 2026 03:06:47 +0000
ROA not before:           Sun 03 May 2026 03:01:47 +0000
ROA not after:            Sun 02 May 2027 03:06:47 +0000
asID:                     149736
IP address blocks:        2401:48e0:4001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl
                          rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0d:6d:af:c7:15:64:3d:9b:a9:07:77:df:f4:73:fb:90:8a:43:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405
        Validity
            Not Before: May  3 03:01:47 2026 GMT
            Not After : May  2 03:06:47 2027 GMT
        Subject: CN=80159784898DCCE482172FD6BA03AB6F7F0927C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9d:6b:67:f9:86:57:3c:df:c2:62:43:a4:2a:
                    09:b9:34:bd:8f:42:e5:3b:5e:bd:26:78:2f:e2:69:
                    38:89:28:77:b9:ad:bb:e6:df:91:a7:d8:f1:ce:77:
                    e3:44:4c:af:6e:96:8f:1d:bc:ff:64:ae:80:6b:db:
                    95:b3:d1:9d:13:24:a8:10:d6:d1:93:ee:6e:93:fc:
                    c6:5c:aa:39:63:b6:f4:b3:c9:3e:4b:e9:d8:c9:dc:
                    27:61:81:3c:a0:ee:ba:49:76:6e:60:ec:d0:4a:fa:
                    0c:ac:2c:ea:2d:fc:20:32:1f:ad:3c:43:4b:7d:4e:
                    3e:c0:c4:0b:8f:0c:50:f9:4d:7b:11:e2:f5:c4:e9:
                    61:fa:fc:80:7e:3b:64:9d:80:ca:61:33:30:20:f8:
                    d9:15:48:89:a5:b6:0c:cc:16:36:e4:24:e7:42:a1:
                    88:1a:e3:e1:9b:90:ce:30:8f:b7:0b:25:5d:29:bc:
                    90:46:6e:83:ac:33:28:3c:ce:0d:b7:21:93:c5:d3:
                    f8:48:8f:1a:91:85:d6:df:f5:2e:43:5b:8f:1d:15:
                    15:4a:0e:5a:e7:8d:dd:60:94:98:41:f4:6b:6f:21:
                    6f:6c:3d:b5:04:ce:55:5c:25:b5:86:e3:c3:70:a3:
                    48:34:b5:a0:13:c2:7c:7d:1d:47:c7:a5:ba:3e:a6:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:15:97:84:89:8D:CC:E4:82:17:2F:D6:BA:03:AB:6F:7F:09:27:C2
            X509v3 Authority Key Identifier:
                keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:48e0:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:63:2d:47:49:1f:38:69:31:49:6e:5f:5b:98:ba:6b:8f:
         55:5d:d3:ae:63:42:90:ef:e4:a9:df:14:63:33:08:72:00:26:
         9f:3f:a4:19:de:35:ce:ee:3f:03:39:8f:ba:c3:b3:09:b5:ab:
         c2:f1:5a:88:20:77:40:03:65:52:e3:2f:8c:ab:a3:4b:e1:8c:
         3f:96:bd:0f:1e:6a:67:77:92:45:13:52:b5:21:04:11:f8:aa:
         38:c4:a6:b6:fb:7c:be:1e:90:7f:07:00:8a:18:16:f3:ff:64:
         8b:8e:16:6c:40:c9:b3:26:f9:0b:b6:02:54:51:fc:c5:fb:8f:
         02:8e:74:25:03:47:bc:26:ae:c3:db:2b:a5:25:7c:6e:4f:62:
         87:86:30:0b:c5:3d:a3:17:62:8c:86:5b:c6:a5:ac:27:e0:5f:
         02:99:71:70:da:8a:44:98:0d:83:93:2d:04:71:26:c1:ab:36:
         de:04:11:90:9f:45:85:25:92:d0:3d:21:88:36:09:8d:26:9e:
         c4:09:c8:66:02:ff:00:ef:03:b3:34:5d:5d:e7:5c:63:ae:1c:
         ec:47:70:bd:ac:62:14:46:ae:bf:b3:af:58:75:d5:31:00:5b:
         64:88:21:20:e4:5c:cf:a6:fb:83:69:46:c5:a4:96:a0:cb:3d:
         5d:81:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:32 2026 by rpki-client