Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/323430343a343863303a3a2f33322d3332203d3e20313338313334.roa
File:                     323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (raw, json)
Hash identifier:          an5beHJBQCXe1O6nJramlD3hI7Qm5QXG3JLpnD/aNxM=
Subject key identifier:   D2:62:7E:6E:E0:6A:2C:4E:A5:B2:0B:8F:EC:AE:53:31:DB:28:BF:F7
Certificate issuer:       /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Certificate serial:       74F25F756AD2221D43B963E4D945BA6FFD5187CF
Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/323430343a343863303a3a2f33322d3332203d3e20313338313334.roa
Signing time:             Sun 03 May 2026 03:07:29 +0000
ROA not before:           Sun 03 May 2026 03:02:29 +0000
ROA not after:            Sun 02 May 2027 03:07:29 +0000
asID:                     138134
IP address blocks:        2404:48c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
                          rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f2:5f:75:6a:d2:22:1d:43:b9:63:e4:d9:45:ba:6f:fd:51:87:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
        Validity
            Not Before: May  3 03:02:29 2026 GMT
            Not After : May  2 03:07:29 2027 GMT
        Subject: CN=D2627E6EE06A2C4EA5B20B8FECAE5331DB28BFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:97:8c:c1:f4:50:9a:a7:a1:c3:81:0f:60:
                    83:92:7d:85:a5:15:a2:9d:79:27:bb:9b:19:d3:3d:
                    9c:71:e2:4c:2a:29:14:a9:7d:2b:f5:a9:87:ba:e2:
                    90:7e:4b:83:c3:dd:bb:de:24:c3:5f:61:d0:81:d0:
                    79:22:c3:6a:3e:f8:e8:c3:95:a9:a1:ba:f9:99:2f:
                    a4:0a:db:c8:ee:58:cd:1e:ac:23:30:5a:34:66:71:
                    46:c2:ed:36:28:f1:00:bd:59:15:df:63:d5:7d:0f:
                    eb:65:01:6e:21:16:ee:6b:bf:ac:64:5e:4b:65:9d:
                    4a:e0:2a:04:ec:c8:35:cc:2d:01:be:d0:2c:c2:35:
                    24:5d:c5:50:8f:19:f2:8b:85:ec:bc:b3:b3:4c:75:
                    2f:76:9e:aa:87:9d:a5:58:27:0e:6c:f0:76:da:32:
                    7f:e4:a7:7e:6c:b4:59:8c:42:ed:93:0e:c7:4f:43:
                    76:fd:f0:5a:53:30:04:c8:01:e6:9a:88:0b:79:ad:
                    1e:60:0c:c7:74:80:7b:2b:01:64:c7:dc:88:a2:7f:
                    ce:3d:00:7f:a5:18:b0:ad:88:21:76:51:04:e9:9c:
                    33:a0:12:23:f5:00:d1:20:85:40:b0:39:fa:5a:9c:
                    fc:a4:b0:33:2f:6f:2a:b3:b8:56:92:00:d7:e6:b6:
                    3d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:62:7E:6E:E0:6A:2C:4E:A5:B2:0B:8F:EC:AE:53:31:DB:28:BF:F7
            X509v3 Authority Key Identifier:
                keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/323430343a343863303a3a2f33322d3332203d3e20313338313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:f9:72:36:7e:3f:bc:ec:12:c4:0f:e6:4a:c2:d0:ad:fc:
         8b:e8:2a:a0:b5:24:87:31:4b:54:e2:db:ef:d3:87:d2:88:16:
         62:b3:b0:75:c5:db:a0:03:7b:d8:51:09:68:e2:75:e0:c0:89:
         da:60:76:ff:1b:52:34:bf:ed:7d:59:ed:5d:f1:73:e2:e6:11:
         e8:60:55:0f:a2:f5:93:56:08:fa:a8:fb:be:58:a4:17:26:76:
         4b:1f:80:0c:57:f4:d9:e5:70:c0:8f:32:21:f8:4d:d3:4a:7d:
         44:db:31:d9:77:2e:d5:9f:ae:23:6a:10:0c:fa:eb:1c:aa:19:
         85:93:69:99:6a:be:48:83:7a:c2:ae:5f:d6:9e:d6:3e:dc:31:
         93:ae:94:91:f3:f7:44:80:8f:af:4b:a8:0e:de:92:e0:1f:89:
         a2:d7:28:39:63:1c:f1:69:e1:fc:dc:73:7a:a9:6b:41:ed:b3:
         0d:6c:c8:87:5b:04:64:dd:de:73:ed:8a:f8:da:7c:9c:d6:f0:
         05:c4:d7:79:71:67:64:f6:51:07:77:97:bc:75:2b:da:da:36:
         8f:f0:8a:fe:03:f9:8c:65:6e:93:ad:da:2b:88:fc:e3:ea:e5:
         cf:3b:20:24:41:f3:3f:9c:1e:dc:9c:6b:22:ec:b0:50:94:6f:
         a1:87:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:15 2026 by rpki-client