Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a3a2f33342d3334203d3e20313331373137.roa
File:                     323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (raw, json)
Hash identifier:          wcqHrqI3rqZ/cg1ulVOK7tcT1pphG3X5jdB33VoSub8=
Subject key identifier:   47:58:DC:09:75:34:4A:BD:26:0E:0A:B1:96:F4:DE:CD:B6:9A:07:F9
Certificate issuer:       /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial:       61D0786EBD1B0AC583B1E01EDA39DAFB9BD0B2C0
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a3a2f33342d3334203d3e20313331373137.roa
Signing time:             Sun 03 May 2026 03:08:06 +0000
ROA not before:           Sun 03 May 2026 03:03:06 +0000
ROA not after:            Sun 02 May 2027 03:08:06 +0000
asID:                     131717
IP address blocks:        2401:10c0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
                          rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d0:78:6e:bd:1b:0a:c5:83:b1:e0:1e:da:39:da:fb:9b:d0:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
        Validity
            Not Before: May  3 03:03:06 2026 GMT
            Not After : May  2 03:08:06 2027 GMT
        Subject: CN=4758DC0975344ABD260E0AB196F4DECDB69A07F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:d2:ad:06:20:b5:2d:63:16:e2:a3:43:5c:
                    5a:1e:68:1c:7e:b3:ca:44:be:91:cc:c7:b8:21:bb:
                    62:57:f6:3f:d2:7b:9f:48:04:f0:3a:57:32:af:71:
                    c3:41:c9:81:28:32:4d:7f:5a:f0:4d:ad:ad:c0:ef:
                    e4:9c:12:46:eb:d9:9e:d7:72:d9:b8:69:01:12:d5:
                    bf:9f:44:a3:ec:de:38:8c:1b:81:b5:21:3a:49:a8:
                    03:ed:f5:54:28:b6:b0:4e:bd:15:4f:de:63:87:99:
                    17:a1:ed:c9:28:40:df:84:43:ca:20:aa:91:b8:f7:
                    3a:78:e1:f9:ea:43:fe:96:7d:be:a0:76:7a:bf:37:
                    64:d0:b8:df:c3:ca:c0:30:ef:36:82:8a:ab:98:4b:
                    e6:42:92:d8:57:0a:68:bc:bb:62:8e:4e:d9:01:a4:
                    eb:92:d5:1c:49:40:6d:81:32:f2:9b:64:ba:ca:b4:
                    e7:03:7c:45:d6:3c:fa:7d:d3:53:83:b5:41:c9:1f:
                    6e:62:66:c0:12:97:ab:e5:57:c3:ef:b6:6d:46:88:
                    9c:20:ba:30:20:fe:1a:48:62:6c:f1:7b:78:11:b3:
                    c2:91:35:27:b0:df:94:8d:dc:9c:7b:5c:ce:24:36:
                    2f:a7:bc:54:00:db:db:91:a9:85:3e:7a:f9:79:35:
                    ad:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:58:DC:09:75:34:4A:BD:26:0E:0A:B1:96:F4:DE:CD:B6:9A:07:F9
            X509v3 Authority Key Identifier:
                keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a3a2f33342d3334203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:10c0::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:b5:96:09:5a:ae:04:03:52:ff:8c:11:c3:f6:7f:7c:b8:
         12:55:37:1d:cc:d8:90:80:a3:8f:cf:65:42:2c:06:77:81:72:
         c7:7c:ae:7e:11:2e:f4:f2:2b:81:f6:07:8b:22:7e:81:2a:ca:
         c5:b7:4b:c8:dc:c3:66:55:cd:28:77:19:71:b0:e6:87:ce:85:
         e4:cb:04:e3:65:01:67:45:47:89:3b:6a:7a:e4:64:7c:5a:cc:
         b6:13:30:60:e3:af:46:45:94:7b:b4:68:6c:c5:65:47:4f:b9:
         8d:95:ae:21:16:1c:0c:60:05:4b:d7:f8:03:16:53:8a:d8:73:
         51:3c:9a:46:3b:2a:ef:e9:41:42:2a:a0:33:d7:ee:49:70:fe:
         c9:0d:b6:fa:05:34:fb:1c:26:eb:5c:b5:2d:35:c9:95:12:5e:
         b5:bc:5e:f9:9b:b9:14:aa:be:4a:98:98:3a:62:99:94:7f:a6:
         d4:d6:9e:66:c7:ca:9c:5d:ce:e5:19:0c:6d:e1:ef:2a:ba:49:
         92:e4:7e:2a:87:ec:e6:f8:21:55:7b:93:d4:41:69:4b:1a:93:
         89:79:d3:cd:5a:6f:9c:a2:d6:f7:9f:93:15:10:eb:d6:ac:4b:
         3f:97:bc:2e:0b:41:4e:73:b3:ab:f9:8c:8d:07:d0:c7:44:c3:
         0f:e4:89:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:24 2026 by rpki-client