Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa
File:                     323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa (raw, json)
Hash identifier:          ZDiFkcumHYkuWYUBaPK86t3Am+BHd46fhGXEEhnKxDM=
Subject key identifier:   B7:57:79:1C:DF:75:A2:EC:F7:1F:8B:B3:60:13:94:AB:01:8E:F3:AF
Certificate issuer:       /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial:       6951B11AFF391ECEBB2D4D0116050ABC4DA54E64
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa
Signing time:             Sun 03 May 2026 03:08:23 +0000
ROA not before:           Sun 03 May 2026 03:03:23 +0000
ROA not after:            Sun 02 May 2027 03:08:23 +0000
asID:                     137363
IP address blocks:        2402:fdc0:1373::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
                          rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:51:b1:1a:ff:39:1e:ce:bb:2d:4d:01:16:05:0a:bc:4d:a5:4e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
        Validity
            Not Before: May  3 03:03:23 2026 GMT
            Not After : May  2 03:08:23 2027 GMT
        Subject: CN=B757791CDF75A2ECF71F8BB3601394AB018EF3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:a8:c8:74:d5:ec:af:31:fa:02:f9:7a:2f:
                    2b:c2:5d:28:44:40:f4:d1:cc:7e:76:3b:19:41:31:
                    85:f4:cb:f1:3e:e4:a0:4b:b5:06:89:36:66:bd:35:
                    ce:da:c5:a0:42:d1:9f:c3:70:02:5f:6d:9d:5f:4d:
                    eb:f3:b5:e4:15:bc:0f:6e:51:c4:4e:27:32:bd:de:
                    2b:c1:f6:f7:23:ce:fd:91:17:fc:5b:22:29:bf:01:
                    2b:83:68:e7:95:b1:87:df:a5:f0:e3:fc:0b:83:56:
                    63:05:fb:7d:54:ad:93:34:2d:fa:5a:68:28:af:f1:
                    6c:7a:e1:98:ea:a8:c9:ad:04:30:f5:8a:a4:66:28:
                    e1:1f:c8:50:8e:8c:21:7d:29:1e:ac:34:28:55:aa:
                    3d:1a:52:06:4f:12:a0:98:d0:2e:76:99:ad:a0:d2:
                    63:64:5d:92:8f:01:29:a3:2e:bc:1c:de:dc:b6:18:
                    5b:e4:d7:f1:a1:ee:72:16:dc:ba:47:e1:70:85:05:
                    b9:c8:e2:02:4b:9d:d8:fb:2a:49:25:a7:85:e7:7e:
                    cf:b4:3d:b6:35:58:58:29:d5:7d:d7:a6:41:31:6f:
                    44:15:1b:07:a6:78:e6:a3:63:8d:31:a9:62:0b:d9:
                    ed:1c:aa:ac:c5:e8:35:d2:c6:9b:e1:8e:10:69:eb:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:57:79:1C:DF:75:A2:EC:F7:1F:8B:B3:60:13:94:AB:01:8E:F3:AF
            X509v3 Authority Key Identifier:
                keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:fdc0:1373::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:46:e6:59:75:c2:3b:9a:76:26:7f:36:76:4a:c2:b9:10:a8:
         b5:e6:50:d9:93:73:8a:00:ca:54:11:db:d1:c6:7f:eb:f5:34:
         e8:40:03:0b:ed:b2:82:c3:08:5e:e0:7d:1d:6d:34:de:31:47:
         11:d5:a7:95:55:23:be:f1:e4:6e:12:21:76:fb:fd:61:d1:cb:
         02:77:87:e0:3d:b6:7f:45:81:75:2c:b1:fa:d6:cd:20:bd:90:
         0a:90:0c:04:c3:14:91:16:38:f9:f0:85:7f:58:60:71:04:96:
         e6:25:7b:d4:5d:4b:af:7a:2f:af:4b:36:12:9c:40:e7:ab:6a:
         4f:2c:c2:ba:21:b0:4f:12:a5:ae:42:c8:78:82:38:9d:7c:be:
         5e:a2:15:96:e5:2b:56:16:82:55:3b:95:ab:ab:20:37:35:7d:
         af:6e:5f:5b:02:d9:58:20:6e:ca:28:b4:3d:0f:70:23:b8:38:
         3e:6f:86:c3:3a:e5:cc:ed:c1:a3:03:75:92:ae:21:00:3f:34:
         52:35:45:2d:1f:cf:ed:4a:1f:fb:20:50:d6:1c:8f:3c:1f:cc:
         5e:b0:28:df:c8:87:92:d9:29:9f:c2:eb:9d:e8:33:fa:72:7a:
         cb:19:ba:16:34:2b:9a:36:f9:5a:5a:03:92:36:2c:af:87:43:
         56:ac:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:51 2026 by rpki-client