Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa
File:                     323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa (raw, json)
Hash identifier:          vF+dIk5MVIsKugKmLzWCz0A425StLTBpxAeOBVaQ9wQ=
Subject key identifier:   9E:14:2E:53:C2:69:75:75:69:17:D7:11:8D:3A:BA:96:89:46:9D:26
Certificate issuer:       /CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
Certificate serial:       0F77ECD20CA39A9909C8974311276992787E8BEC
Authority key identifier: E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa
Signing time:             Sun 03 May 2026 03:13:35 +0000
ROA not before:           Sun 03 May 2026 03:08:35 +0000
ROA not after:            Sun 02 May 2027 03:13:35 +0000
asID:                     139417
IP address blocks:        2404:cac0:1d5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl
                          rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:77:ec:d2:0c:a3:9a:99:09:c8:97:43:11:27:69:92:78:7e:8b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
        Validity
            Not Before: May  3 03:08:35 2026 GMT
            Not After : May  2 03:13:35 2027 GMT
        Subject: CN=9E142E53C26975756917D7118D3ABA9689469D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:97:c5:d7:ea:07:c3:4c:9d:dc:dd:01:11:
                    c3:ea:73:bb:1b:95:39:d6:38:6d:20:f7:d0:c1:3c:
                    49:5c:35:1a:0a:ec:f1:10:76:01:c0:40:5f:ad:99:
                    70:ca:5c:a3:e6:e9:fc:91:82:5a:f8:e9:b1:01:97:
                    2c:80:37:cf:98:0a:49:36:c0:62:33:b8:2e:d8:ca:
                    42:90:c6:71:62:b8:03:8b:91:f7:11:c8:4f:d5:47:
                    67:69:e1:3c:f6:d9:fd:6e:9b:c0:01:ff:ef:99:27:
                    f4:81:96:2d:c4:1a:54:44:53:3d:df:34:9b:fb:5a:
                    ce:4b:b0:bf:cc:94:0a:48:c2:d3:23:bb:5f:d5:58:
                    43:ee:92:e9:fe:37:c6:3d:f2:2c:e8:b0:21:78:64:
                    35:f4:b1:4f:ff:2d:a7:5a:bd:ac:a0:95:b1:3b:31:
                    58:12:7b:a8:00:4f:b6:9a:76:bd:2d:81:01:37:80:
                    c6:00:e2:19:c6:3c:ec:0b:8d:85:ca:ec:b5:f3:ff:
                    d1:95:f8:44:76:7a:65:47:04:3c:84:e1:55:95:dd:
                    0c:9f:c4:49:98:30:db:2b:5e:d4:c0:bc:bd:81:46:
                    a8:7d:0b:f2:f0:07:1d:a9:15:7b:31:4c:aa:3e:d3:
                    57:71:34:ac:f5:07:d1:f7:ef:74:89:d3:f4:a0:7b:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:14:2E:53:C2:69:75:75:69:17:D7:11:8D:3A:BA:96:89:46:9D:26
            X509v3 Authority Key Identifier:
                keyid:E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:cac0:1d5::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:cd:6a:4c:c6:62:db:5e:95:fa:6a:eb:cc:ec:89:c5:d5:58:
         c4:f5:c1:7d:29:0f:6e:86:31:ac:ac:70:88:a9:bb:6b:93:3e:
         ba:2e:55:22:21:fb:5f:c3:3c:7d:73:a7:70:1f:b5:d2:1f:5e:
         f4:fa:16:4f:de:e3:b4:3b:f8:40:34:ee:34:f9:29:e8:9d:18:
         97:c7:93:02:02:6c:55:c4:17:b9:ee:4f:ba:84:2b:f0:20:9d:
         a0:d8:d3:a7:29:2d:da:d3:c1:31:f1:e2:ea:82:10:fd:68:c2:
         01:7c:c4:c6:23:73:a6:32:bd:e2:38:44:11:b8:d8:36:98:71:
         f6:fc:64:fe:26:81:69:4e:c0:c6:8e:59:94:ed:2c:b3:db:fe:
         51:72:d7:46:28:31:8b:74:ea:3c:61:01:d3:cb:7a:af:8b:61:
         1a:44:55:75:6e:18:0d:83:5d:7e:65:2f:46:eb:94:0b:62:31:
         af:31:d7:ee:c2:eb:64:40:4c:4a:fe:be:bb:38:f2:84:cd:0d:
         96:1b:63:de:1d:e9:3c:9f:a2:b7:cb:7b:77:df:44:61:0e:4d:
         9f:42:c3:c1:7b:1e:1d:ba:4e:79:58:f8:f1:eb:19:d9:e1:cc:
         dc:27:4e:4a:f6:8d:8e:e5:23:c7:e2:c0:9b:5d:50:53:0d:36:
         31:0d:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:27:09 2026 by rpki-client