Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363735.roa
File:                     323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (raw, json)
Hash identifier:          2RPhLvFo9neTmfPqwsVlBCVEW/vWAuk44bCI72x1cVc=
Subject key identifier:   1A:F4:20:F3:0D:56:D1:F4:FB:E5:05:3C:EA:5A:D4:69:09:5B:F5:BA
Certificate issuer:       /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial:       70398C06EAD4D1CE65098CEE29237132837615B0
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363735.roa
Signing time:             Sun 03 May 2026 03:09:38 +0000
ROA not before:           Sun 03 May 2026 03:04:38 +0000
ROA not after:            Sun 02 May 2027 03:09:38 +0000
asID:                     141675
IP address blocks:        2406:aec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:39:8c:06:ea:d4:d1:ce:65:09:8c:ee:29:23:71:32:83:76:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
        Validity
            Not Before: May  3 03:04:38 2026 GMT
            Not After : May  2 03:09:38 2027 GMT
        Subject: CN=1AF420F30D56D1F4FBE5053CEA5AD469095BF5BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:ab:1c:94:57:5c:04:e6:6b:6a:c0:69:b4:
                    60:ac:6b:4f:5e:c9:54:27:31:74:b4:0a:06:2f:48:
                    70:58:87:15:e9:e7:3c:49:3c:1d:c3:20:fa:6d:72:
                    fd:87:7b:24:30:d9:c4:63:5f:49:6f:a5:2e:84:e7:
                    00:7e:39:f0:39:1e:a7:90:6a:35:d0:54:2c:58:ea:
                    64:a7:b1:bd:bd:8c:f7:6c:a2:6e:87:37:65:3b:f2:
                    b3:05:11:f2:d2:44:a8:5e:c6:72:b7:45:b5:b7:3b:
                    63:05:53:6b:f4:62:2f:82:fa:1f:e6:fe:9c:49:c3:
                    43:88:42:25:3d:a3:67:70:0f:49:6d:5f:59:c9:e0:
                    b2:e9:7f:5d:0c:35:4b:8f:4a:ad:88:25:07:e3:cc:
                    ec:2c:c3:f1:9a:10:53:db:5d:ef:1c:5d:d6:62:9b:
                    0c:9c:be:33:56:5d:13:2c:84:25:b4:fd:45:af:48:
                    7b:9b:ee:3a:82:99:93:cb:29:41:e4:6a:86:0f:49:
                    51:11:4e:d0:5e:22:62:08:a6:ba:03:1f:00:46:3c:
                    b3:86:82:ce:57:ea:2c:2f:25:40:bb:9a:48:ac:da:
                    15:9e:4f:af:c2:4c:6f:30:9b:30:3c:1b:99:72:01:
                    03:05:54:86:40:5c:e8:d9:b8:29:87:ca:9e:c4:fd:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F4:20:F3:0D:56:D1:F4:FB:E5:05:3C:EA:5A:D4:69:09:5B:F5:BA
            X509v3 Authority Key Identifier:
                keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:aec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:ba:1c:66:52:7b:de:83:0f:b4:b1:7a:70:ac:89:26:9a:be:
         31:da:96:2d:0b:ce:4b:5b:38:12:fb:e2:ef:d0:49:d7:2b:5a:
         c1:c7:81:fe:1f:47:a3:39:56:10:14:9d:c4:7c:13:44:a5:a2:
         93:8f:33:13:f3:50:d7:22:5b:47:0a:2b:ba:57:2e:54:0e:5a:
         60:61:0b:a3:f7:bc:3f:69:c4:cf:9d:86:d9:9f:88:6c:20:ea:
         3a:25:f9:91:9e:8e:bd:15:da:d4:5e:ae:17:59:3b:58:fb:c2:
         ce:9c:6c:4b:2e:61:01:1f:ef:06:ee:82:59:66:62:a5:05:67:
         4a:35:f3:34:52:4b:33:9e:d4:be:a8:41:c9:a0:82:ef:f4:b3:
         74:9a:61:b7:cf:e8:f1:51:da:c9:da:f2:e0:aa:0b:cc:e0:b7:
         63:75:d6:97:6b:66:36:ab:20:01:0c:26:39:37:85:dd:18:e5:
         04:9e:e4:2b:d8:93:58:1b:75:94:ec:07:70:a9:f3:bd:28:71:
         c3:b0:e4:80:1a:90:e8:46:ec:fd:ae:ad:84:ef:39:10:bb:fd:
         2c:66:c6:0f:f2:b8:1d:e1:2b:18:c6:63:79:93:55:3a:34:2a:
         a8:c7:99:cd:f8:fd:7d:c1:70:82:15:79:00:40:54:60:38:53:
         ec:a8:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:06 2026 by rpki-client