Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a3a2f33322d3438203d3e20313337333633.roa
File:                     323430323a666463303a3a2f33322d3438203d3e20313337333633.roa (raw, json)
Hash identifier:          Z7H/OfXP8qxT4Zi/m6gpjjp2JZ6eagoR20N4vstB3k0=
Subject key identifier:   9B:7B:BF:79:CA:18:83:C7:7D:1A:A1:18:D9:04:E0:62:5F:05:F7:30
Certificate issuer:       /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial:       1585DF814BA05EDC9D12CF715E93FE45F541F631
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a3a2f33322d3438203d3e20313337333633.roa
Signing time:             Sun 03 May 2026 03:08:17 +0000
ROA not before:           Sun 03 May 2026 03:03:17 +0000
ROA not after:            Sun 02 May 2027 03:08:17 +0000
asID:                     137363
IP address blocks:        2402:fdc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
                          rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:85:df:81:4b:a0:5e:dc:9d:12:cf:71:5e:93:fe:45:f5:41:f6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
        Validity
            Not Before: May  3 03:03:17 2026 GMT
            Not After : May  2 03:08:17 2027 GMT
        Subject: CN=9B7BBF79CA1883C77D1AA118D904E0625F05F730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:87:f0:07:75:60:93:3a:f4:52:55:3d:5e:95:
                    70:3d:8c:67:ab:1e:47:4a:61:bc:28:65:f3:a2:4d:
                    3c:33:6a:cf:6a:08:d1:5d:20:10:82:fd:a8:20:a7:
                    73:1f:6f:83:b1:99:b4:fb:f9:e8:12:d1:4f:7a:e7:
                    56:36:6a:e4:f2:96:ce:fe:4b:6f:ad:99:56:3a:0a:
                    85:0c:66:85:9d:c7:ca:1e:b0:ca:ea:bf:39:db:51:
                    3a:fc:5d:f9:e8:f7:52:ea:bb:1a:51:70:0f:3e:96:
                    40:b8:8f:ad:cf:0c:18:1d:a9:80:ff:85:95:04:0c:
                    60:47:3f:30:7e:f4:6f:86:88:ae:a3:f2:19:58:37:
                    83:65:a6:18:2d:a2:23:7f:e3:1a:7c:66:97:a0:7f:
                    b9:a4:5a:e5:15:cd:89:d6:62:ea:a5:30:55:9c:2d:
                    5d:f8:b1:99:6b:17:70:5f:06:cd:bd:6e:70:5b:33:
                    9f:3a:7c:23:79:db:d4:3c:f6:f3:9c:0f:8a:ec:c6:
                    c2:92:5c:61:9a:75:e5:e5:d3:fa:b3:29:20:32:c3:
                    20:d3:64:fd:99:e4:49:c1:cb:45:a9:a5:36:e3:9b:
                    bf:a9:c1:29:26:0c:14:41:cf:12:4d:c9:82:b0:ef:
                    32:90:aa:27:ea:96:54:52:01:b2:32:a0:43:cc:47:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7B:BF:79:CA:18:83:C7:7D:1A:A1:18:D9:04:E0:62:5F:05:F7:30
            X509v3 Authority Key Identifier:
                keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a3a2f33322d3438203d3e20313337333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:fdc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:58:90:3d:bb:96:86:09:90:15:a7:e2:d5:8c:3d:eb:ca:
         19:0f:34:8e:fc:43:ab:bd:3f:f0:47:77:19:cb:a2:ab:56:58:
         67:dc:b0:89:ba:79:ea:5d:0f:55:22:5b:f1:7c:6a:e6:d4:9a:
         0f:19:38:d0:01:b5:ba:9c:d8:56:9a:d2:1d:81:0c:3e:46:70:
         cf:6e:d7:31:77:8b:c0:09:24:d2:e2:d5:9a:6c:7a:00:3f:ed:
         e8:50:f9:ab:ff:3b:23:4d:6c:69:88:18:58:47:88:f6:28:33:
         fe:e4:b3:96:2b:d7:cf:85:1c:20:5c:80:af:23:12:ac:48:59:
         8d:12:9a:78:56:45:ae:33:6f:85:2c:d1:04:fc:ea:da:4f:96:
         fd:f0:b3:3c:46:44:04:d7:76:af:c7:da:65:5a:bc:b3:f9:b8:
         bc:36:37:54:91:a4:47:4e:05:e5:26:3f:90:48:2b:9d:51:39:
         95:f5:f2:9a:12:8d:7b:9d:e5:b5:25:73:ce:51:ce:f8:51:fb:
         af:70:52:d4:ee:2d:c9:f7:0a:27:15:20:8a:dd:35:cb:8e:c0:
         9a:44:2a:40:6f:be:59:26:54:03:cb:8a:81:af:c8:80:af:25:
         1c:dc:96:a4:95:63:b7:3b:bb:8c:8a:d0:7f:6c:3c:2c:88:83:
         c4:37:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:24 2026 by rpki-client