Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3a2f33322d3332203d3e20313339343137.roa
File:                     323430343a636163303a3a2f33322d3332203d3e20313339343137.roa (raw, json)
Hash identifier:          N/zyNJdDDPh9Nbhc722HvWd8v2M5EJROrQmHLBCRGrM=
Subject key identifier:   A5:F3:CA:D3:60:D4:1F:85:17:BB:E5:9D:22:75:38:D8:E1:0D:44:F9
Certificate issuer:       /CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
Certificate serial:       508554B9506782422A05C5D7065C3E0A05C801AC
Authority key identifier: E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3a2f33322d3332203d3e20313339343137.roa
Signing time:             Sun 03 May 2026 03:13:32 +0000
ROA not before:           Sun 03 May 2026 03:08:32 +0000
ROA not after:            Sun 02 May 2027 03:13:32 +0000
asID:                     139417
IP address blocks:        2404:cac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl
                          rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:85:54:b9:50:67:82:42:2a:05:c5:d7:06:5c:3e:0a:05:c8:01:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
        Validity
            Not Before: May  3 03:08:32 2026 GMT
            Not After : May  2 03:13:32 2027 GMT
        Subject: CN=A5F3CAD360D41F8517BBE59D227538D8E10D44F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:9b:d7:4e:92:de:8f:98:42:c7:ce:9d:80:
                    ad:12:f8:03:38:3b:94:9d:a6:7d:3b:ac:08:48:af:
                    ad:db:f3:bf:6e:fe:59:c5:02:ca:2a:12:7f:38:39:
                    8c:32:32:ac:cb:37:a1:83:af:ea:17:f3:f0:03:65:
                    f6:15:bc:f1:39:1e:2c:91:f2:8b:24:a1:0b:e3:eb:
                    e1:9d:c9:67:df:a7:df:93:0f:f6:5e:e5:b5:8c:ce:
                    e4:b8:e2:40:14:55:1a:dd:1d:1d:bb:65:e9:d6:18:
                    51:e4:ea:94:4c:68:57:ef:48:bf:37:79:0e:f3:61:
                    3b:1f:54:10:0d:91:1b:2a:a6:ca:8c:5e:81:c0:66:
                    7e:1f:f9:5b:20:8a:a0:4b:8a:5e:b5:d4:8d:75:d8:
                    48:e6:9c:85:1b:20:6b:6a:49:6c:21:74:aa:b4:0b:
                    cb:fe:b5:53:06:2a:73:e7:8c:03:a6:21:93:0b:3d:
                    db:d9:cc:44:e4:b1:06:76:91:92:46:bc:73:e7:aa:
                    24:8c:c0:b1:ff:23:e4:2f:7e:8e:9c:b0:dd:b8:63:
                    9c:47:28:6f:57:ef:cc:71:75:3a:3d:02:30:6f:d3:
                    0f:23:83:ba:50:3d:c5:d1:ef:16:c1:91:d8:97:e2:
                    f4:af:a1:d8:a3:0b:e7:48:6a:5f:ce:b2:e1:6a:d9:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F3:CA:D3:60:D4:1F:85:17:BB:E5:9D:22:75:38:D8:E1:0D:44:F9
            X509v3 Authority Key Identifier:
                keyid:E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3a2f33322d3332203d3e20313339343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:cac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:35:10:81:f6:e8:af:d4:fe:e3:42:d1:ee:68:e8:7d:45:19:
         46:a7:3d:4d:26:3c:b3:ef:1d:78:d9:0d:ce:7d:e5:7b:2a:d1:
         4c:84:43:04:b6:d0:06:6d:71:0b:39:7d:62:17:b1:2a:d1:85:
         8b:00:8c:2e:cc:bf:11:8a:b4:f6:37:15:ee:4b:a3:6d:95:0a:
         39:dc:76:a9:e6:f3:dd:ba:cc:24:5b:5f:2c:c8:8b:6a:09:db:
         ba:5d:ea:19:86:c7:9b:db:22:b6:c1:cd:64:91:2a:db:43:b6:
         a8:ef:60:86:65:38:cd:72:03:1b:03:9d:31:74:3c:d5:06:e5:
         a4:cf:1a:31:67:f7:72:30:29:9a:0e:21:df:df:04:59:50:28:
         2a:e2:b2:6f:9e:95:c5:c6:2d:b3:c2:37:72:17:08:5f:24:73:
         de:34:ce:bd:53:8b:5b:33:ad:7e:29:56:b0:c1:42:e2:26:87:
         54:f4:e7:ad:d3:2a:94:b7:18:27:fb:67:71:df:b5:8a:aa:c2:
         e1:91:30:c6:ef:65:71:13:95:38:2f:d2:1d:f2:11:33:63:6a:
         4d:00:b5:3a:cd:44:9d:a1:e4:ca:d1:68:25:41:4f:8f:ad:ba:
         c7:97:18:88:49:b1:77:9b:69:8f:ff:07:28:c9:db:6c:97:bc:
         b2:95:40:d1
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUUIVUuVBngkIqBcXXBlw+CgXIAawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY2MDNDMDhCNUNGMUFDRUUxQzczRDMzQzYwMEQ0RjRG
REY1REMyRTAeFw0yNjA1MDMwMzA4MzJaFw0yNzA1MDIwMzEzMzJaMDMxMTAvBgNV
BAMTKEE1RjNDQUQzNjBENDFGODUxN0JCRTU5RDIyNzUzOEQ4RTEwRDQ0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytpvXTpLej5hCx86dgK0S+AM4
O5Sdpn07rAhIr63b879u/lnFAsoqEn84OYwyMqzLN6GDr+oX8/ADZfYVvPE5HiyR
8oskoQvj6+GdyWffp9+TD/Ze5bWMzuS44kAUVRrdHR27ZenWGFHk6pRMaFfvSL83
eQ7zYTsfVBANkRsqpsqMXoHAZn4f+VsgiqBLil611I112EjmnIUbIGtqSWwhdKq0
C8v+tVMGKnPnjAOmIZMLPdvZzETksQZ2kZJGvHPnqiSMwLH/I+Qvfo6csN24Y5xH
KG9X78xxdTo9AjBv0w8jg7pQPcXR7xbBkdiX4vSvodijC+dIal/OsuFq2dNFAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUpfPK02DUH4UXu+WdInU42OENRPkwHwYDVR0j
BBgwFoAU5mA8CLXPGs7hxz0zxgDU9P313C4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTU0MTNmZjQtMjAyYi00OTk5LWI0NWQtNzNjOTcyZjEwMTE2LzAvRTY2MDNDMDhC
NUNGMUFDRUUxQzczRDMzQzYwMEQ0RjRGREY1REMyRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNjYwM0MwOEI1Q0YxQUNFRTFDNzNEMzNDNjAwRDRGNEZERjVE
QzJFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i
NDVkLTczYzk3MmYxMDExNi8wLzMyMzQzMDM0M2E2MzYxNjMzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzOTM0MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEysAwDQYJKoZI
hvcNAQELBQADggEBALA1EIH26K/U/uNC0e5o6H1FGUanPU0mPLPvHXjZDc595Xsq
0UyEQwS20AZtcQs5fWIXsSrRhYsAjC7MvxGKtPY3Fe5Lo22VCjncdqnm8926zCRb
XyzIi2oJ27pd6hmGx5vbIrbBzWSRKttDtqjvYIZlOM1yAxsDnTF0PNUG5aTPGjFn
93IwKZoOId/fBFlQKCrism+elcXGLbPCN3IXCF8kc940zr1Ti1szrX4pVrDBQuIm
h1T0563TKpS3GCf7Z3HftYqqwuGRMMbvZXETlTgv0h3yETNjak0AtTrNRJ2h5MrR
aCVBT4+tuseXGIhJsXebaY//ByjJ22yXvLKVQNE=
-----END CERTIFICATE-----
Generated at Wed May 13 15:26:28 2026 by rpki-client