Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa
File:                     323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (raw, json)
Hash identifier:          dBBC9Ld8u7gkoTo/g/PxsRZ0jIN5riREG0FHLcyqmts=
Subject key identifier:   68:47:59:71:FE:E7:A0:59:6C:DB:79:E3:DC:AD:66:A4:76:F5:F8:E7
Certificate issuer:       /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial:       53A0E5C03FF1AAA39E89F211FD93D84C33AD7C31
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa
Signing time:             Sun 03 May 2026 03:09:38 +0000
ROA not before:           Sun 03 May 2026 03:04:38 +0000
ROA not after:            Sun 02 May 2027 03:09:38 +0000
asID:                     141675
IP address blocks:        2406:aec0:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a0:e5:c0:3f:f1:aa:a3:9e:89:f2:11:fd:93:d8:4c:33:ad:7c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
        Validity
            Not Before: May  3 03:04:38 2026 GMT
            Not After : May  2 03:09:38 2027 GMT
        Subject: CN=68475971FEE7A0596CDB79E3DCAD66A476F5F8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:3c:9c:e5:36:8a:4b:84:8f:54:23:20:b7:
                    30:e6:40:03:f9:fa:16:8a:60:fa:d2:2d:bc:0d:91:
                    10:78:36:1d:b4:e6:27:ce:a9:bb:ff:de:ae:c3:83:
                    a0:47:a1:63:70:35:88:20:b6:36:0c:2b:55:c0:bd:
                    ee:36:4b:d2:9d:8a:f8:df:d0:3b:c0:51:a9:0c:01:
                    a6:25:f6:15:3e:ad:29:0f:88:c5:6a:9b:f9:d5:57:
                    92:85:03:dc:19:a1:ad:5d:4f:f7:88:9e:36:e4:e8:
                    15:ce:eb:1a:3a:dd:01:ce:01:2f:49:12:07:ba:82:
                    e0:28:16:64:ba:33:4e:be:47:af:27:75:9b:4a:7c:
                    7b:ff:57:3b:fb:77:3a:85:00:b0:bf:a5:a9:55:c6:
                    c9:70:29:01:27:99:88:9e:70:a9:24:f6:92:8a:c7:
                    6d:87:ea:b1:a8:14:b0:00:13:c8:eb:b4:cc:3c:22:
                    eb:1c:1a:e1:d4:a5:2e:01:4e:8f:c1:1f:b8:54:47:
                    ba:13:76:69:ab:a0:67:90:85:6e:2a:78:fd:a9:e1:
                    1b:dd:6d:69:d9:77:d0:be:6e:5d:2c:50:b4:c6:d2:
                    10:91:11:06:40:28:b7:f7:82:89:32:d9:44:4a:0a:
                    ea:9f:25:2b:93:db:09:c4:77:0a:05:db:f4:de:68:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:47:59:71:FE:E7:A0:59:6C:DB:79:E3:DC:AD:66:A4:76:F5:F8:E7
            X509v3 Authority Key Identifier:
                keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:aec0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:3e:86:20:9f:f5:9b:11:31:0d:46:eb:9c:1a:34:ab:18:31:
         cb:41:81:8c:a3:ea:f3:d1:ae:8e:55:ae:eb:3d:9c:f4:23:60:
         64:b8:5c:f5:30:59:c1:76:b2:3b:45:10:3d:3c:d6:13:f2:0b:
         35:2d:24:f4:01:2a:7e:f8:1f:e9:85:ab:e7:d6:9d:79:86:c2:
         a8:2e:90:d8:ed:a7:5a:63:e5:67:4b:2b:7e:c4:a2:48:c6:d3:
         6b:0c:41:31:40:c9:5a:d4:41:13:ef:7a:70:1d:08:cc:43:8e:
         05:6d:af:20:79:55:81:13:81:3e:53:10:6f:02:3e:fc:df:42:
         94:a4:49:d5:d6:b0:92:a5:ce:fe:45:a1:22:1b:59:80:43:cd:
         b7:ea:a2:9e:f6:2a:cc:cd:3c:d9:bd:f2:19:bf:a2:d3:60:8d:
         49:19:96:2a:c8:66:5b:ba:2c:40:3c:6c:4b:b2:4f:9d:bf:ca:
         40:91:c1:bf:2d:cb:9c:a9:50:d2:29:ff:6e:ff:87:65:a9:ee:
         03:13:a0:8c:19:89:26:76:31:b5:68:a5:2f:4f:fd:c8:6d:15:
         26:0c:22:fc:40:9d:b5:b8:18:ec:dd:d7:87:81:d9:88:08:53:
         0b:fb:83:5c:60:19:18:fe:b5:2f:50:86:df:4a:48:63:51:b5:
         4d:64:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:12 2026 by rpki-client