Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/323430343a636463303a3a2f33322d3332203d3e20313338383432.roa
File:                     323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (raw, json)
Hash identifier:          tBhrmLE+sXzWSMZvu2dss/OhOSLFTgjcN6XgFvCBY50=
Subject key identifier:   82:A9:4B:14:3E:83:C9:77:C5:52:3C:A6:A8:7F:2F:6E:DF:5C:88:8B
Certificate issuer:       /CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03
Certificate serial:       462EEC1CC931A5CA1D6342F65FD924557A17C1A7
Authority key identifier: F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/323430343a636463303a3a2f33322d3332203d3e20313338383432.roa
Signing time:             Sun 03 May 2026 03:10:45 +0000
ROA not before:           Sun 03 May 2026 03:05:45 +0000
ROA not after:            Sun 02 May 2027 03:10:45 +0000
asID:                     138842
IP address blocks:        2404:cdc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl
                          rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2e:ec:1c:c9:31:a5:ca:1d:63:42:f6:5f:d9:24:55:7a:17:c1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03
        Validity
            Not Before: May  3 03:05:45 2026 GMT
            Not After : May  2 03:10:45 2027 GMT
        Subject: CN=82A94B143E83C977C5523CA6A87F2F6EDF5C888B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:11:63:70:60:39:80:d4:13:65:d0:eb:87:
                    48:e8:f3:13:62:be:f3:de:cf:79:40:22:7c:3f:a4:
                    2a:66:06:02:df:11:80:da:4d:9f:d8:f8:da:d2:9e:
                    54:ee:84:6c:de:c2:4c:ed:6f:79:33:c2:5c:a8:85:
                    b8:a0:de:7d:78:36:3a:61:7f:ea:24:3d:d4:fe:6d:
                    49:45:ee:6b:91:32:c7:a8:38:28:34:e2:cc:a2:dd:
                    87:68:7f:a5:bb:af:37:1d:4a:e9:b0:d3:82:7e:8c:
                    1c:2f:ff:38:ae:d9:32:fa:fa:e5:1b:0f:d6:59:bb:
                    c5:f4:e4:cd:72:0c:f2:06:d6:15:d2:56:db:f8:3d:
                    c5:ab:fa:0d:d9:e1:af:f5:22:6c:4c:f9:0b:ca:fb:
                    49:af:77:f1:6c:3b:f2:31:04:e2:aa:3a:4f:ce:1c:
                    87:2d:16:e0:e6:2d:52:c0:6e:bb:bc:aa:b5:21:7c:
                    64:69:44:24:9c:9d:a1:5a:1a:4c:79:9b:f0:11:c9:
                    2c:38:55:54:a1:bb:ac:45:07:c4:11:a1:36:47:67:
                    ac:86:a9:67:ff:08:5f:88:3d:0c:a7:58:54:86:9f:
                    b3:83:8b:ac:d4:41:a1:e2:de:00:10:ff:a8:5c:86:
                    6c:f2:78:04:eb:62:66:f1:5b:d5:be:7f:4e:23:e0:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:4B:14:3E:83:C9:77:C5:52:3C:A6:A8:7F:2F:6E:DF:5C:88:8B
            X509v3 Authority Key Identifier:
                keyid:F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/323430343a636463303a3a2f33322d3332203d3e20313338383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:cdc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:0d:5c:20:3b:2a:ad:10:43:63:a0:f1:de:17:50:c3:94:b5:
         84:9d:17:54:1e:4e:ae:20:14:1c:90:21:b7:ae:4e:aa:8a:57:
         26:ca:3c:2f:52:4b:72:2b:bf:36:cc:e4:63:d0:86:d0:59:a6:
         ba:cc:ff:d1:ed:8d:b2:fb:08:37:4f:89:af:29:82:a4:1e:07:
         5d:0d:7c:a4:cf:ba:58:5b:18:a3:70:fb:6c:8e:9d:fe:d8:a8:
         3f:17:8a:89:af:84:6d:50:c5:54:bc:a0:1e:70:45:9f:aa:92:
         d6:fc:17:6f:ba:95:3b:da:eb:b6:aa:1b:36:e8:b3:83:d1:59:
         0e:a7:16:79:ea:be:25:79:0e:f7:e0:90:79:59:7b:24:65:82:
         22:cf:b2:86:24:c0:d6:9c:bd:4a:a8:14:01:4a:5a:2d:67:1f:
         f9:ef:99:4b:d1:3c:fc:7f:10:0c:a2:45:4c:7c:6e:31:49:9a:
         01:1c:83:fa:c0:b0:97:20:b1:d3:ed:85:57:d9:2d:43:1a:28:
         0d:ca:a1:81:0a:3c:38:fc:6e:b7:49:dc:c6:82:6e:a6:49:d9:
         62:6c:1b:a3:b1:c5:a3:6a:ec:c0:e8:df:28:7c:44:a4:1a:c5:
         06:19:7c:cc:df:ca:bd:cb:e8:74:08:06:e1:35:9e:dc:1b:5b:
         18:41:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:34 2026 by rpki-client