Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/323430323a613130303a3a2f33322d3332203d3e203435323839.roa
File:                     323430323a613130303a3a2f33322d3332203d3e203435323839.roa (raw, json)
Hash identifier:          XiVsdam82vnDzv3JMHx/F/L9OyD20RlHDfFmGKOXSAk=
Subject key identifier:   C6:56:7F:17:3A:8F:FA:E6:A4:DE:00:98:54:09:1C:FC:B8:2E:77:9E
Certificate issuer:       /CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
Certificate serial:       0F063C3B1124D6E943196D7CBCC70D00209AB6D7
Authority key identifier: 6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/323430323a613130303a3a2f33322d3332203d3e203435323839.roa
Signing time:             Sun 03 May 2026 03:07:17 +0000
ROA not before:           Sun 03 May 2026 03:02:17 +0000
ROA not after:            Sun 02 May 2027 03:07:17 +0000
asID:                     45289
IP address blocks:        2402:a100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl
                          rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:06:3c:3b:11:24:d6:e9:43:19:6d:7c:bc:c7:0d:00:20:9a:b6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
        Validity
            Not Before: May  3 03:02:17 2026 GMT
            Not After : May  2 03:07:17 2027 GMT
        Subject: CN=C6567F173A8FFAE6A4DE009854091CFCB82E779E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4d:07:14:0a:58:8c:c8:31:17:10:f0:de:24:
                    71:7a:cd:cd:7c:c1:6c:81:a8:3e:83:a0:68:b4:8b:
                    92:fd:42:47:ad:d1:26:6c:4f:d6:00:ce:ce:8d:d4:
                    40:b9:2e:c0:94:19:83:e2:00:01:5f:21:62:12:1d:
                    81:04:be:74:dc:de:ab:a4:e7:2b:ab:20:6d:1a:63:
                    ad:a5:69:d4:91:76:e8:27:89:1c:f9:1e:79:96:64:
                    80:b6:fa:ba:1d:55:bc:29:87:5a:9d:8b:b5:df:63:
                    b9:a9:b6:bd:db:45:83:8e:00:34:46:86:60:83:db:
                    2b:70:e2:4e:04:12:ca:1f:94:64:92:cf:04:63:dc:
                    6a:84:cc:d5:35:b9:9d:9e:e4:8f:dd:b6:c6:50:40:
                    50:58:96:09:3a:8f:84:2e:ea:65:72:45:f9:8d:ff:
                    69:d7:37:5d:3d:0c:86:dd:40:96:2b:d3:f1:38:e7:
                    48:a1:fd:ca:d9:c5:05:26:40:91:ca:6f:a3:ef:e7:
                    d2:89:26:f1:7b:1d:2c:b7:a9:06:60:ed:c4:6e:c2:
                    3d:fa:f0:61:4c:44:01:46:05:0e:b6:da:1f:0d:b9:
                    1b:70:25:db:2a:86:e5:bf:de:a4:da:88:cc:fb:e8:
                    a0:57:9a:75:2d:24:06:43:7b:3a:b8:c8:bc:91:57:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:56:7F:17:3A:8F:FA:E6:A4:DE:00:98:54:09:1C:FC:B8:2E:77:9E
            X509v3 Authority Key Identifier:
                keyid:6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/323430323a613130303a3a2f33322d3332203d3e203435323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:a100::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:35:c2:b6:de:58:cd:27:ed:e6:00:e9:b7:21:27:bf:e1:e9:
         6c:86:8c:06:61:35:c7:21:d2:c0:f6:89:e5:53:ee:b8:78:6a:
         b8:b6:7b:a6:67:6d:1f:91:81:ee:4b:7c:88:f9:19:4f:0c:7f:
         a3:42:5e:02:f3:63:3e:dc:f0:a5:61:4c:89:3a:2c:c1:66:4f:
         50:05:e4:9d:dd:7e:0b:8e:87:e3:09:ed:d6:2f:b0:6a:56:da:
         0d:e2:cb:60:4e:3b:b5:28:60:91:b0:2d:6f:a1:a3:48:ae:74:
         60:5b:7d:aa:27:cb:c0:d3:b2:1f:05:d5:ea:05:63:0d:0c:7d:
         6f:40:5f:41:69:c2:63:eb:28:24:f9:49:24:73:46:c1:86:8b:
         67:a4:65:fb:38:d8:0f:96:46:77:39:3f:c0:dd:1e:16:b4:64:
         4a:ad:4a:f1:62:81:9a:86:79:bc:f6:62:25:7f:cf:ec:07:7d:
         ea:7a:8b:66:18:c6:10:90:9e:00:1e:7e:bd:d9:70:6c:9b:f8:
         03:83:5b:ec:e5:9b:65:6f:d1:97:78:d8:92:30:d8:89:8f:6a:
         2d:dc:39:0c:73:8e:ef:c3:1a:c3:b3:66:55:45:1d:d4:7e:c1:
         cc:e6:b2:cc:a2:dd:d8:02:ec:50:55:76:bf:b5:04:c5:33:33:
         81:98:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:40:15 2026 by rpki-client