Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/323430333a386334303a3a2f33322d3438203d3e20313338303634.roa
File:                     323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (raw, json)
Hash identifier:          ltF4qAeqI9c/UFyvRzczrWncEgF/tAbn2DkZoTPs4Ww=
Subject key identifier:   9F:A3:2A:82:11:2D:D8:14:BA:CF:BD:91:92:3D:D3:9B:9E:86:5C:C5
Certificate issuer:       /CN=EAB7F888E6D8656A93A8E50773CF5352039E7B93
Certificate serial:       6B2D180FD1A033433713A643D1B73222B80A139B
Authority key identifier: EA:B7:F8:88:E6:D8:65:6A:93:A8:E5:07:73:CF:53:52:03:9E:7B:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/323430333a386334303a3a2f33322d3438203d3e20313338303634.roa
Signing time:             Sun 03 May 2026 03:12:34 +0000
ROA not before:           Sun 03 May 2026 03:07:34 +0000
ROA not after:            Sun 02 May 2027 03:12:34 +0000
asID:                     138064
IP address blocks:        2403:8c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.crl
                          rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2d:18:0f:d1:a0:33:43:37:13:a6:43:d1:b7:32:22:b8:0a:13:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB7F888E6D8656A93A8E50773CF5352039E7B93
        Validity
            Not Before: May  3 03:07:34 2026 GMT
            Not After : May  2 03:12:34 2027 GMT
        Subject: CN=9FA32A82112DD814BACFBD91923DD39B9E865CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:2c:36:8c:fb:06:71:bd:7b:9b:c7:9b:7b:
                    af:c7:a3:1d:3f:c2:09:bf:23:4e:32:91:b9:47:3b:
                    8a:ed:70:59:d7:64:cf:ca:9d:34:c5:45:14:e8:cb:
                    1e:c3:33:12:26:50:97:37:75:ec:5a:8c:bf:e0:9e:
                    a7:30:40:a7:9a:37:24:36:5c:75:9a:22:da:d4:46:
                    5d:2c:ef:6e:2c:04:87:be:dd:a4:21:21:07:b1:9e:
                    67:2e:23:f9:8d:7f:40:a7:4d:e2:94:e5:df:20:00:
                    1e:24:cb:01:7c:a8:15:0a:a4:0c:ee:3c:ab:13:65:
                    81:b2:a8:fa:b8:70:ae:c5:e8:00:ef:77:f2:a4:4b:
                    9b:91:42:c7:4b:c1:8b:36:a7:fd:bc:a9:09:6e:f6:
                    d5:4e:e6:25:02:1c:4c:70:36:f1:0c:c1:01:7c:84:
                    34:92:05:48:8b:a2:78:68:e5:5f:f0:16:d2:ab:81:
                    b4:57:f1:dc:8c:dc:4b:87:35:e0:c3:4d:65:97:50:
                    cf:f1:0f:6b:56:e1:75:a2:64:d2:95:06:05:73:48:
                    11:97:d4:ab:87:1a:5c:3d:f4:e6:81:40:97:82:67:
                    32:3f:04:a6:89:c0:a9:83:16:5a:58:f2:43:6c:4a:
                    64:c6:9d:a4:6b:53:ad:a1:34:9d:43:5a:1d:c9:41:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:2A:82:11:2D:D8:14:BA:CF:BD:91:92:3D:D3:9B:9E:86:5C:C5
            X509v3 Authority Key Identifier:
                keyid:EA:B7:F8:88:E6:D8:65:6A:93:A8:E5:07:73:CF:53:52:03:9E:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/323430333a386334303a3a2f33322d3438203d3e20313338303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:93:54:35:4e:ef:cc:dd:cf:0e:da:0e:e8:62:c9:ee:05:03:
         14:6c:0c:40:cc:8f:25:85:ef:85:47:d0:89:ac:16:ea:e7:25:
         3c:dc:9f:ce:2a:1b:97:0f:45:71:19:06:10:4c:f7:9c:50:24:
         d3:d2:00:d6:65:e3:f1:1f:f7:da:25:3b:89:a7:36:c5:e0:fc:
         be:a9:89:62:81:51:5c:da:86:36:3b:60:05:7d:14:0f:25:a7:
         0e:d2:83:b3:79:ab:95:de:61:96:a5:63:5b:73:80:b2:56:98:
         5c:2e:5d:62:f3:fe:08:23:48:a3:1b:f7:a2:71:e9:17:64:64:
         78:ea:75:78:31:c6:f3:f7:bc:fe:87:61:01:2f:74:88:f4:67:
         56:d5:56:36:c5:01:78:fc:34:11:2f:0f:42:4f:7e:f5:74:b4:
         7a:a6:d0:ac:04:95:e0:ad:0c:c1:4a:65:0e:cc:be:e8:f3:db:
         40:e1:e7:bf:32:d4:cf:58:15:4e:b9:b9:4c:f4:af:51:a1:e0:
         f0:14:b7:91:35:97:41:a6:83:d5:b2:54:d3:89:f4:21:c0:af:
         08:09:db:b1:69:d2:18:9c:55:4c:50:ed:18:8b:ce:f2:40:c1:
         a1:b3:3f:aa:16:ef:6d:f6:b0:73:f6:52:97:7b:75:9e:47:8a:
         67:9a:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:39 2026 by rpki-client