Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa
File:                     323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa (raw, json)
Hash identifier:          9OsYAFi8mTt41zIXhKIHQ3JQAABYWBBUtWfVjvidkG4=
Subject key identifier:   26:E2:C4:EC:1B:0A:A6:EF:77:E7:C3:C1:73:C4:32:B1:17:97:2A:45
Certificate issuer:       /CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
Certificate serial:       5F1ACF26FB6777AFEFB2630649C252B8B4F8B8CF
Authority key identifier: E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa
Signing time:             Sun 03 May 2026 03:13:35 +0000
ROA not before:           Sun 03 May 2026 03:08:35 +0000
ROA not after:            Sun 02 May 2027 03:13:35 +0000
asID:                     139417
IP address blocks:        2404:cac0:c02e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl
                          rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1a:cf:26:fb:67:77:af:ef:b2:63:06:49:c2:52:b8:b4:f8:b8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
        Validity
            Not Before: May  3 03:08:35 2026 GMT
            Not After : May  2 03:13:35 2027 GMT
        Subject: CN=26E2C4EC1B0AA6EF77E7C3C173C432B117972A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:ef:87:e3:ed:20:e2:2f:03:e1:10:ca:09:
                    69:f8:d6:12:ae:03:81:a2:36:8c:80:42:df:6f:16:
                    5f:1a:8f:7c:ed:70:04:ba:4a:b9:65:f1:aa:b5:6d:
                    ad:30:a9:b7:3b:21:ee:88:35:4d:24:4c:91:09:9d:
                    7e:aa:ce:7c:03:c0:7a:3f:12:52:ee:1b:94:df:f9:
                    a4:d5:67:60:ea:72:a4:fa:90:4b:1e:ce:ae:57:3d:
                    78:b8:93:86:43:7b:b9:d3:41:a4:5c:13:9c:89:43:
                    6e:bb:38:56:2b:72:cc:bc:3a:32:f6:4b:17:f4:fd:
                    29:e9:ee:87:92:20:35:6c:67:d4:30:b4:f8:8e:da:
                    c5:70:fe:83:85:c8:1f:5d:e1:3b:64:a0:ea:6c:14:
                    53:db:9f:8a:0d:a0:7e:75:a7:6f:37:d2:48:1e:7d:
                    81:20:85:ff:d6:c2:02:d6:95:e5:58:3e:5a:7d:93:
                    ff:08:69:7f:0a:77:2b:19:e4:60:5b:54:1f:dc:6e:
                    a0:e8:ff:8e:7f:81:a7:7e:d2:2c:63:92:4c:d3:7e:
                    e7:9a:84:f0:3d:eb:6b:30:49:d2:bb:5a:4c:bc:a5:
                    8f:5a:bb:81:d1:2f:99:b2:e3:91:26:c6:a6:ee:d3:
                    b0:ce:be:b9:53:97:01:87:7e:d2:16:0e:fa:ce:10:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E2:C4:EC:1B:0A:A6:EF:77:E7:C3:C1:73:C4:32:B1:17:97:2A:45
            X509v3 Authority Key Identifier:
                keyid:E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:cac0:c02e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:18:88:fe:c3:0b:c7:2c:f0:eb:76:30:51:63:ed:d2:44:
         e0:88:a7:4f:c5:96:83:aa:5d:17:60:e0:12:5d:d8:ba:99:85:
         dd:cb:a4:79:87:34:dc:0d:67:8b:f2:ac:23:1a:45:9e:27:4f:
         12:d5:9c:ee:03:ac:ac:5f:9e:0d:68:c4:2d:1a:8d:25:9e:96:
         6e:e5:23:c3:43:f5:a5:e8:0f:e4:e5:4b:bb:6f:85:94:59:30:
         31:78:f5:5f:5a:dc:a8:4d:e9:a4:32:a1:ac:28:bd:ba:14:50:
         6e:d2:d9:f4:b4:05:2a:03:6f:3e:d8:5b:af:89:1a:9b:d5:33:
         3f:e7:2d:f5:89:2e:97:06:e5:81:88:6e:69:d5:07:29:82:6a:
         53:58:6e:5a:33:21:0d:91:4f:45:0a:3c:89:77:d5:4d:8c:23:
         b8:4e:b8:7e:a7:2c:3e:0c:d6:93:5d:03:5d:c6:ef:68:a9:23:
         1a:f7:8c:25:30:19:2d:74:c4:68:a6:ce:74:84:b0:d3:92:9a:
         30:b4:32:57:73:2b:e8:bc:db:73:b7:97:57:b5:1a:88:58:e8:
         ba:e0:c8:6a:10:6b:1b:0b:0c:27:54:8d:88:50:a1:a3:71:6f:
         be:3b:b6:f0:c3:cd:05:1b:d1:48:24:f1:fb:ab:08:fc:1f:63:
         60:7f:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:45:08 2026 by rpki-client