Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa
File:                     323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (raw, json)
Hash identifier:          y0vf+b+WaxpgW62iYyK78WU25GzF5XHO+ZNE1qslKzM=
Subject key identifier:   7F:82:F3:B1:17:88:74:51:22:0E:4C:A7:BA:A5:B4:8A:0A:31:E3:16
Certificate issuer:       /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial:       4472F39515DD35BB21A42820B7C966CCFA7C37B9
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa
Signing time:             Sun 03 May 2026 03:09:39 +0000
ROA not before:           Sun 03 May 2026 03:04:39 +0000
ROA not after:            Sun 02 May 2027 03:09:39 +0000
asID:                     141675
IP address blocks:        2406:aec0:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:72:f3:95:15:dd:35:bb:21:a4:28:20:b7:c9:66:cc:fa:7c:37:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
        Validity
            Not Before: May  3 03:04:39 2026 GMT
            Not After : May  2 03:09:39 2027 GMT
        Subject: CN=7F82F3B117887451220E4CA7BAA5B48A0A31E316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:0d:a4:f8:13:5f:96:82:96:45:68:f1:26:
                    96:11:2c:1c:e2:42:81:b0:2e:67:0f:dc:f4:18:25:
                    77:84:23:d5:d1:29:f7:fc:fd:14:a1:c9:d1:42:92:
                    a5:dc:01:86:80:e0:b3:89:62:7e:12:14:ff:75:94:
                    3b:0a:c3:a5:90:0b:aa:a5:ab:e2:7f:85:b1:31:3b:
                    fd:2d:31:7b:d0:f6:fe:7a:19:7e:39:15:d9:7d:c0:
                    94:b4:46:1a:3d:11:38:37:fb:ae:57:8e:48:fd:8d:
                    fb:22:82:44:9e:f8:d4:28:d3:7b:15:8c:9d:06:52:
                    92:dd:d8:03:1a:01:3d:0f:f7:49:20:ea:d6:46:6f:
                    d4:f9:07:bc:47:54:26:59:43:65:73:df:0d:fc:18:
                    aa:31:b1:be:f8:d8:48:37:d4:cd:2f:58:57:64:a9:
                    85:28:c4:5a:c9:e9:c4:78:14:50:f9:57:81:30:35:
                    48:1c:11:fc:be:44:c7:3b:f8:6a:fb:fe:13:4a:6a:
                    27:05:72:cc:42:78:0e:ab:ce:95:08:58:e1:4e:f2:
                    ef:f1:51:20:21:79:72:11:25:10:4c:e2:bc:3d:aa:
                    2c:02:e4:bb:85:af:5f:68:78:6a:c1:c2:95:8d:33:
                    0f:ca:92:97:84:2b:e8:09:e1:6a:81:07:76:a9:aa:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:82:F3:B1:17:88:74:51:22:0E:4C:A7:BA:A5:B4:8A:0A:31:E3:16
            X509v3 Authority Key Identifier:
                keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:aec0:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:35:ad:7b:34:9c:7d:49:b6:3e:63:79:9d:40:97:d7:b5:1b:
         c7:f2:9e:37:8a:97:2b:ad:03:e4:9d:f0:bb:72:95:d6:df:da:
         97:6e:04:05:de:7c:2d:3f:83:1f:29:21:3f:71:cc:fc:18:b9:
         ff:72:1c:4d:2b:08:dc:5e:b6:88:4a:24:20:a6:a7:0d:9e:ad:
         56:38:93:b0:7c:18:59:e6:09:5e:ea:3c:40:fc:96:85:33:c7:
         8e:c5:61:a8:6c:f5:80:51:0b:c8:f6:c2:f1:27:46:07:a9:c7:
         49:4a:16:f5:5e:2d:3a:59:8b:9c:b3:53:7a:7e:7f:bc:f5:2e:
         f2:6d:ac:d8:cb:10:7c:15:bb:b2:41:ac:07:35:1b:30:65:bb:
         5f:b6:ce:a5:51:06:35:8b:06:d4:4a:41:9c:b6:85:04:39:a8:
         0f:66:d9:fd:61:ea:97:65:1c:e7:62:16:bb:eb:44:e9:59:fa:
         40:3d:7e:fc:38:ca:9a:5e:f7:99:0f:35:eb:98:ca:58:5b:09:
         76:35:ca:68:dc:6a:23:a8:42:4b:31:0a:bf:45:b0:22:cd:62:
         9e:90:b3:2b:b5:23:0c:8b:b7:a1:0c:07:4d:e8:23:7b:87:4d:
         62:5d:35:ab:5b:58:18:0f:40:bf:8c:63:ec:4e:0e:f1:03:72:
         bc:28:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:15 2026 by rpki-client