Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa
File:                     323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa (raw, json)
Hash identifier:          eRwGf7wFMvJoVJygPeZp6WinXWZqvwCy3Kup/fo7Xcc=
Subject key identifier:   45:14:83:5B:21:03:7A:57:14:D1:3A:2E:56:8F:9F:01:37:F9:96:07
Certificate issuer:       /CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
Certificate serial:       24D26265FC4B47A8AD545F9B9D9D8A1C63EA2614
Authority key identifier: C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa
Signing time:             Sun 03 May 2026 03:12:42 +0000
ROA not before:           Sun 03 May 2026 03:07:42 +0000
ROA not after:            Sun 02 May 2027 03:12:42 +0000
asID:                     137329
IP address blocks:        2402:4840:1113::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl
                          rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d2:62:65:fc:4b:47:a8:ad:54:5f:9b:9d:9d:8a:1c:63:ea:26:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
        Validity
            Not Before: May  3 03:07:42 2026 GMT
            Not After : May  2 03:12:42 2027 GMT
        Subject: CN=4514835B21037A5714D13A2E568F9F0137F99607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:38:31:bf:9c:b9:96:33:93:33:64:3a:63:a8:
                    93:e4:ed:55:45:05:e0:b8:2a:b8:a3:6e:3e:46:54:
                    db:24:4d:a2:4d:3d:79:93:6d:74:2d:2f:0a:b3:a6:
                    3a:4a:1e:e3:4a:8c:26:76:1b:0c:78:2e:0c:67:7a:
                    19:5e:9d:c3:8b:b9:5d:ce:18:f1:aa:53:bf:a3:a4:
                    c8:03:49:7b:fe:57:48:7b:42:99:32:a5:67:17:d2:
                    1c:58:bd:d3:c8:a3:5f:a5:4a:65:71:82:e5:03:94:
                    36:f5:f6:f5:da:76:78:3b:4b:b0:06:71:e6:46:3b:
                    81:fe:ba:dc:7a:fc:24:02:ac:60:88:67:36:5f:e9:
                    eb:7d:4a:d3:4a:f5:75:60:3b:87:9d:4a:5c:86:70:
                    cb:b1:1a:c1:65:60:12:8f:ce:cd:61:4f:64:c3:94:
                    66:24:43:c0:d7:b1:8e:52:b5:09:4a:3f:bb:77:cf:
                    c0:4d:c0:70:6c:4f:6a:5a:b6:77:bc:a7:01:97:3e:
                    0c:12:10:d6:e7:51:05:d1:3f:0a:0e:86:b7:00:fb:
                    71:ee:9d:fe:e9:9d:25:3b:61:d4:ef:ed:5e:b3:f7:
                    65:b6:17:e7:98:7f:50:28:fc:0c:ee:49:95:a4:f2:
                    d0:45:67:04:a1:a7:21:dc:8b:d4:0e:2b:1b:c1:a1:
                    5c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:14:83:5B:21:03:7A:57:14:D1:3A:2E:56:8F:9F:01:37:F9:96:07
            X509v3 Authority Key Identifier:
                keyid:C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840:1113::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:c1:01:ad:8f:3a:77:d5:8f:81:0e:77:09:6b:45:a4:b7:5f:
         fc:8a:99:21:82:a5:27:2c:93:4f:9e:2f:ed:69:40:49:97:c4:
         e8:dc:b3:de:36:9a:16:e1:94:d0:49:64:66:8b:b9:f3:c7:3c:
         3e:66:98:98:b0:19:26:55:03:e4:fb:a0:e6:e0:4b:8f:1b:3d:
         86:cf:8c:f0:55:0b:ee:c9:47:2e:75:ab:66:9e:fb:b1:f2:85:
         08:9d:e6:3b:4a:9c:16:ef:fd:cf:ec:4b:42:0f:c9:ab:2d:b3:
         e3:ee:4f:a4:90:00:41:ba:49:18:28:11:d3:ef:71:8a:1e:b7:
         99:6e:af:d8:ff:97:b4:f9:81:41:cc:65:19:fe:51:8c:51:bd:
         28:84:48:93:98:94:9a:f3:b1:a9:7b:7c:c1:d1:4b:f4:83:a8:
         69:42:0c:3b:36:5d:69:40:cc:a3:c6:25:f8:f4:9c:aa:0a:a9:
         21:f1:99:e2:be:60:50:14:a3:fb:0e:4c:6e:db:e9:b3:d6:08:
         de:08:2d:e1:b4:49:fb:7e:a2:5e:d8:b0:41:76:e7:8d:b7:ee:
         bc:e1:f8:52:fa:b7:4b:29:48:7d:2d:c8:80:9f:cf:f9:26:5e:
         19:02:ef:64:0e:31:88:5a:c2:05:f9:c8:ae:96:4a:af:84:59:
         c6:94:fe:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:15 2026 by rpki-client