Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa
File:                     323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (raw, json)
Hash identifier:          F9rq8pU2wW/Oa03Jq6P0raRbd+1OsCNjkCP/TyMkA1w=
Subject key identifier:   FC:4E:24:D9:21:2C:2C:42:55:05:06:44:96:CB:C4:E4:AB:6C:20:5B
Certificate issuer:       /CN=762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311
Certificate serial:       350593959AA7552D74D7254E6CB0085040B2AFB1
Authority key identifier: 76:2D:DF:A9:6C:CF:A5:1E:66:E5:F8:88:33:DA:AF:3C:CC:EB:43:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa
Signing time:             Sun 03 May 2026 03:13:03 +0000
ROA not before:           Sun 03 May 2026 03:08:03 +0000
ROA not after:            Sun 02 May 2027 03:13:03 +0000
asID:                     140012
IP address blocks:        2405:c940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl
                          rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:05:93:95:9a:a7:55:2d:74:d7:25:4e:6c:b0:08:50:40:b2:af:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311
        Validity
            Not Before: May  3 03:08:03 2026 GMT
            Not After : May  2 03:13:03 2027 GMT
        Subject: CN=FC4E24D9212C2C425505064496CBC4E4AB6C205B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:0c:dd:a2:93:60:7e:81:6a:24:1e:8a:08:
                    75:a4:ab:9a:18:c4:08:d8:35:ed:ff:11:2b:ae:d8:
                    df:26:49:7c:c3:15:01:a5:e5:72:15:e7:61:3c:24:
                    49:ec:a5:bb:69:2f:df:67:e7:d6:51:41:d2:26:ce:
                    fa:63:46:61:86:41:d9:d3:ef:9a:4b:bc:a5:91:f2:
                    88:e1:e8:2e:71:17:7d:20:1f:b6:16:47:75:fe:94:
                    d9:e6:70:1d:8c:52:a6:2c:e3:96:a8:8c:3d:98:f1:
                    e6:24:8a:ba:4e:45:32:de:d0:91:f5:a3:00:63:48:
                    1e:3b:09:f9:72:86:f8:69:b7:5d:24:bf:ab:36:b8:
                    4b:fd:f2:6c:c0:98:cc:d1:79:99:01:e5:88:77:d5:
                    c7:b6:32:24:32:da:b2:30:96:a5:93:c3:39:0a:e7:
                    cc:fd:35:9a:a1:85:f8:10:30:92:4e:c4:bc:0b:e2:
                    4b:8e:8c:ae:1a:21:d9:47:55:ed:eb:f5:ee:39:5d:
                    81:6b:fa:0a:19:7b:c2:59:72:e5:fd:02:7b:25:cc:
                    81:da:28:ee:fa:4f:fe:c3:38:7d:de:b3:fa:01:0f:
                    d2:3a:e5:1c:0c:79:03:f7:c7:ab:18:5f:00:01:c1:
                    c7:bd:0d:6a:de:fd:4c:3b:7d:14:24:27:ae:48:b9:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4E:24:D9:21:2C:2C:42:55:05:06:44:96:CB:C4:E4:AB:6C:20:5B
            X509v3 Authority Key Identifier:
                keyid:76:2D:DF:A9:6C:CF:A5:1E:66:E5:F8:88:33:DA:AF:3C:CC:EB:43:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:2f:6b:43:4e:56:3d:76:4e:9a:86:40:20:82:05:da:0c:82:
         03:5b:3e:ba:a6:43:30:77:a5:3d:65:a9:ed:da:70:a0:10:d1:
         83:4f:23:25:10:3b:c1:2c:91:95:8b:b1:7c:24:a2:b4:46:37:
         14:7e:5c:ce:69:8d:2c:a3:0f:1b:f8:72:fc:a2:9e:81:a1:10:
         8d:a3:2d:8b:b9:38:15:3b:97:54:7e:c9:c6:39:11:2e:6b:e6:
         06:fe:9d:ff:e3:aa:51:4a:4f:7e:e4:28:5c:45:ca:82:4f:92:
         db:eb:e6:df:f2:10:52:32:e7:65:d0:a1:e4:53:87:41:d9:b3:
         db:64:2a:79:2f:3c:af:5c:d5:b7:06:95:be:80:f1:3e:11:bb:
         04:60:44:a8:fe:a9:e7:31:2e:7a:b7:a4:57:7c:35:09:8f:e0:
         7f:a0:2c:0f:c4:a5:fc:00:0f:de:94:64:f1:c4:32:4c:85:f5:
         c6:bd:4f:5c:2a:37:43:33:9d:6e:b6:95:90:13:b0:b7:03:1b:
         8f:71:0e:8b:49:a2:07:3b:5a:49:4b:50:16:19:53:44:d7:b0:
         72:02:ae:a3:fb:81:0e:cc:87:41:90:3d:5d:95:6f:17:03:d7:
         81:d7:97:18:06:b6:08:52:a9:a2:f1:25:ac:5f:13:8f:26:18:
         50:c9:ca:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:09 2026 by rpki-client