Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa
File:                     323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (raw, json)
Hash identifier:          RFsABZwQUKrnFL3kGb4LQCkeg8Y7lRmJ8snepdRl5LE=
Subject key identifier:   EF:5B:13:78:0B:7B:E7:7B:4F:5B:84:EC:8A:66:C6:14:AB:8C:7A:D5
Certificate issuer:       /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial:       5FCA833344F8467865FD68F791AABE84E7008000
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa
Signing time:             Sun 03 May 2026 03:09:37 +0000
ROA not before:           Sun 03 May 2026 03:04:37 +0000
ROA not after:            Sun 02 May 2027 03:09:37 +0000
asID:                     141675
IP address blocks:        2406:aec0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ca:83:33:44:f8:46:78:65:fd:68:f7:91:aa:be:84:e7:00:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
        Validity
            Not Before: May  3 03:04:37 2026 GMT
            Not After : May  2 03:09:37 2027 GMT
        Subject: CN=EF5B13780B7BE77B4F5B84EC8A66C614AB8C7AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:d9:a4:6e:d2:9c:8b:3f:0a:3b:6f:3c:a0:
                    e9:1b:da:63:4a:b2:1f:fe:48:48:63:8c:88:c6:00:
                    b4:2d:12:72:64:b2:08:89:9b:e0:aa:42:c6:37:c0:
                    b4:89:cd:81:bc:66:42:c6:a7:fc:22:6b:fa:a6:4f:
                    d7:d3:e5:9e:8f:77:7f:97:0e:a8:04:6d:15:96:c7:
                    de:d0:a6:06:0a:53:fe:b9:01:14:cd:d0:16:84:ae:
                    b9:4d:7f:df:0a:00:f0:ce:3a:eb:13:45:1e:17:a3:
                    e1:35:ca:83:d3:ca:af:e3:c6:7f:18:e9:e7:be:df:
                    51:4d:a4:3d:c5:74:1c:04:93:90:08:62:d9:11:f7:
                    91:05:6d:82:4f:63:8e:55:fe:e7:d4:18:06:4e:fc:
                    cd:09:bf:f6:fb:12:02:f2:11:4e:68:3d:1a:47:9c:
                    e8:96:68:f2:c2:7e:12:76:00:b0:0a:e9:50:2a:06:
                    77:50:c3:ee:d4:6b:15:f5:98:f9:55:7d:8b:68:cb:
                    98:08:db:19:a9:48:1f:c9:b8:0b:c9:c4:22:d9:49:
                    bd:ce:6c:c3:48:86:46:16:a8:1c:56:ae:f6:e2:95:
                    9c:1d:f0:ed:0f:74:59:b6:5c:a0:57:94:6e:71:b8:
                    5c:99:3c:80:a0:6a:0d:80:da:a0:40:42:4f:4c:f8:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:13:78:0B:7B:E7:7B:4F:5B:84:EC:8A:66:C6:14:AB:8C:7A:D5
            X509v3 Authority Key Identifier:
                keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:aec0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:44:73:3f:fa:97:91:37:44:05:d4:93:2c:c2:9b:0c:bb:
         86:1e:20:4a:82:1d:ba:10:9f:fe:24:14:c8:ab:86:64:6d:89:
         d1:13:d6:2e:01:9e:1f:3a:31:a2:7c:42:4e:c8:62:aa:25:7a:
         bc:34:8d:42:ee:a7:2f:07:04:9f:76:a2:1f:86:94:66:55:3d:
         d0:30:aa:e9:1f:af:70:0d:8a:43:22:08:c8:c2:b4:37:a9:2a:
         f0:6c:e0:b1:82:05:1c:37:5b:c9:35:fa:de:1f:87:c1:4d:58:
         2c:34:23:68:b1:43:2c:a4:18:d3:44:13:77:d3:01:2c:c6:b6:
         b9:2f:ef:80:a4:66:a7:d2:e7:44:1c:f5:c8:00:2d:11:ae:b0:
         58:0f:b7:12:b7:38:a6:ca:a4:3a:f4:b8:75:7a:ff:25:51:5a:
         3f:53:e5:15:75:8a:20:21:a4:f9:e3:ec:3d:40:9c:10:f1:ba:
         c2:91:e8:e7:fe:55:12:8d:f8:d3:15:a8:10:15:c2:73:c1:3b:
         57:05:9e:70:c2:df:95:33:ee:05:a0:fd:08:ec:30:3a:34:ec:
         fd:f0:d7:79:88:37:54:cb:3a:b7:48:78:72:72:c7:17:41:5a:
         39:53:78:7b:fb:cc:a3:2c:6a:de:a5:0b:d7:ca:f2:fa:cd:c5:
         33:0c:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:56 2026 by rpki-client