Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
File:                     323430323a343834303a3a2f33322d3332203d3e20313337333239.roa (raw, json)
Hash identifier:          u72+Zhh4za0dUMg+cbpDO+pJvGMLSlEhD1Cu2RpD91g=
Subject key identifier:   40:78:DE:2C:1F:68:FA:02:78:8F:2E:D5:BC:AE:3E:07:23:59:AC:B9
Certificate issuer:       /CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
Certificate serial:       58442A99521A6AC73015B587CDF28899E21D5E40
Authority key identifier: C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
Signing time:             Sun 03 May 2026 03:12:44 +0000
ROA not before:           Sun 03 May 2026 03:07:44 +0000
ROA not after:            Sun 02 May 2027 03:12:44 +0000
asID:                     137329
IP address blocks:        2402:4840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl
                          rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:44:2a:99:52:1a:6a:c7:30:15:b5:87:cd:f2:88:99:e2:1d:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
        Validity
            Not Before: May  3 03:07:44 2026 GMT
            Not After : May  2 03:12:44 2027 GMT
        Subject: CN=4078DE2C1F68FA02788F2ED5BCAE3E072359ACB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:8a:77:c9:bf:99:98:7f:22:96:01:46:3e:
                    e5:cb:3c:24:44:69:12:0a:fd:00:ec:3f:33:d6:f9:
                    36:5c:6c:c2:66:03:ef:f2:22:75:75:60:7a:b0:99:
                    9f:43:3d:91:3d:b9:cd:77:46:f0:5b:d1:4d:ba:34:
                    b9:c5:15:31:1f:80:de:f2:af:2a:3a:4b:86:7f:d1:
                    a9:e1:79:bf:81:e2:23:08:08:26:a0:54:d2:30:7b:
                    68:9b:29:99:27:13:73:18:64:53:6d:af:3b:bc:ea:
                    4d:2c:b1:a1:23:7d:a4:fe:ca:e6:76:97:14:dd:05:
                    44:dc:2c:2d:a0:44:88:f9:a4:6e:5e:8f:24:03:b8:
                    d8:c3:0c:cf:5a:8e:27:f2:49:27:2e:9d:47:27:d9:
                    0b:ed:9c:3a:a0:64:98:f5:5b:5b:98:6a:03:83:1e:
                    0a:c6:21:3e:b9:d9:75:41:6f:d2:65:e4:f4:37:e8:
                    3b:05:81:c9:06:3a:48:27:9f:83:b7:a7:d8:7a:fc:
                    95:5a:8a:61:81:46:c3:cb:f8:c9:86:e9:cf:5f:5a:
                    1e:21:54:72:89:0d:cc:1b:9d:aa:bb:68:04:3d:00:
                    cf:43:3e:2a:0a:b1:6c:c4:16:a8:87:ca:d9:b3:31:
                    1a:9d:c3:db:d8:8d:34:d6:bc:d2:71:bd:76:82:00:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:78:DE:2C:1F:68:FA:02:78:8F:2E:D5:BC:AE:3E:07:23:59:AC:B9
            X509v3 Authority Key Identifier:
                keyid:C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:df:8e:83:c5:95:0c:b2:84:1e:9e:fb:2e:a2:71:20:5b:b1:
         f7:0c:82:7a:0a:34:05:85:17:5c:43:38:4c:ae:15:d5:1d:fd:
         16:f9:46:81:98:b9:b9:28:88:7a:7d:9b:a4:a7:d7:b8:56:4e:
         42:c5:10:a4:89:00:5b:d5:6b:4f:37:5a:29:b1:d6:c7:ea:e8:
         07:ca:70:94:12:cd:35:df:44:75:8c:3d:69:89:fe:32:85:1d:
         2d:5b:4e:c9:ae:7a:72:5a:04:6b:9e:ed:aa:a1:e3:8f:6b:a9:
         7a:8c:3e:f8:db:de:da:af:fd:f8:bd:9d:d8:ea:00:35:14:99:
         4c:9a:03:f4:d0:eb:ee:c9:3b:ab:23:b0:fd:ec:9c:68:c1:7f:
         df:88:43:6c:a1:90:54:8a:12:1c:4e:07:43:77:8b:1f:ef:d7:
         d7:4b:e7:aa:74:14:23:b3:3c:fe:83:f5:c8:35:80:ad:7d:f4:
         35:fd:94:53:e6:2a:12:10:16:a5:5a:a4:ab:cb:79:de:42:ee:
         f4:2d:bf:89:75:1e:f4:18:df:6f:f6:75:25:60:ed:b0:0d:74:
         21:4c:43:e8:55:cc:b3:57:a0:70:07:0e:a8:7f:be:c6:ae:25:
         fa:54:89:96:cc:b8:40:00:7d:e4:5b:43:3a:d8:39:37:a0:94:
         7d:1c:1d:c3
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUWEQqmVIaascwFbWHzfKImeIdXkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGMEVBM0Y0OTg5NjVDNzM2MUI1RUJDMkU4OTE2MzBB
RDJGMzlCQTAeFw0yNjA1MDMwMzA3NDRaFw0yNzA1MDIwMzEyNDRaMDMxMTAvBgNV
BAMTKDQwNzhERTJDMUY2OEZBMDI3ODhGMkVENUJDQUUzRTA3MjM1OUFDQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZop3yb+ZmH8ilgFGPuXLPCRE
aRIK/QDsPzPW+TZcbMJmA+/yInV1YHqwmZ9DPZE9uc13RvBb0U26NLnFFTEfgN7y
ryo6S4Z/0anheb+B4iMICCagVNIwe2ibKZknE3MYZFNtrzu86k0ssaEjfaT+yuZ2
lxTdBUTcLC2gRIj5pG5ejyQDuNjDDM9ajifySScunUcn2QvtnDqgZJj1W1uYagOD
HgrGIT652XVBb9Jl5PQ36DsFgckGOkgnn4O3p9h6/JVaimGBRsPL+MmG6c9fWh4h
VHKJDcwbnaq7aAQ9AM9DPioKsWzEFqiHytmzMRqdw9vYjTTWvNJxvXaCAOy3AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUQHjeLB9o+gJ4jy7VvK4+ByNZrLkwHwYDVR0j
BBgwFoAUxvDqP0mJZcc2G168LokWMK0vObowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTE3YmQ1MDItNDJjMi00MDBkLWEyYWQtZDE3NTQzNjVhNDVkLzAvQzZGMEVBM0Y0
OTg5NjVDNzM2MUI1RUJDMkU4OTE2MzBBRDJGMzlCQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNkYwRUEzRjQ5ODk2NUM3MzYxQjVFQkMyRTg5MTYzMEFEMkYz
OUJBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h
MmFkLWQxNzU0MzY1YTQ1ZC8wLzMyMzQzMDMyM2EzNDM4MzQzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCSEAwDQYJKoZI
hvcNAQELBQADggEBALzfjoPFlQyyhB6e+y6icSBbsfcMgnoKNAWFF1xDOEyuFdUd
/Rb5RoGYubkoiHp9m6Sn17hWTkLFEKSJAFvVa083Wimx1sfq6AfKcJQSzTXfRHWM
PWmJ/jKFHS1bTsmuenJaBGue7aqh449rqXqMPvjb3tqv/fi9ndjqADUUmUyaA/TQ
6+7JO6sjsP3snGjBf9+IQ2yhkFSKEhxOB0N3ix/v19dL56p0FCOzPP6D9cg1gK19
9DX9lFPmKhIQFqVapKvLed5C7vQtv4l1HvQY32/2dSVg7bANdCFMQ+hVzLNXoHAH
Dqh/vsauJfpUiZbMuEAAfeRbQzrYOTeglH0cHcM=
-----END CERTIFICATE-----
Generated at Wed May 13 12:24:45 2026 by rpki-client