Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa
File:                     323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (raw, json)
Hash identifier:          8qs7WM8ywI2UrJKllq33qiP5Scs0oR71A0AD62Bt4F0=
Subject key identifier:   32:6A:05:F5:6B:5E:2A:F6:4E:DB:CE:39:17:21:1D:EA:3D:1B:32:6F
Certificate issuer:       /CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
Certificate serial:       20580F5DD171DFB24C8D1C2C6EE89C5D0AC2C535
Authority key identifier: E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa
Signing time:             Sun 03 May 2026 03:13:31 +0000
ROA not before:           Sun 03 May 2026 03:08:31 +0000
ROA not after:            Sun 02 May 2027 03:13:31 +0000
asID:                     139417
IP address blocks:        2404:cac0:db5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl
                          rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:58:0f:5d:d1:71:df:b2:4c:8d:1c:2c:6e:e8:9c:5d:0a:c2:c5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
        Validity
            Not Before: May  3 03:08:31 2026 GMT
            Not After : May  2 03:13:31 2027 GMT
        Subject: CN=326A05F56B5E2AF64EDBCE3917211DEA3D1B326F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:fc:8e:49:5d:b4:ba:16:0b:a3:9d:88:56:
                    56:3c:ae:02:3f:1a:5e:9f:1c:1c:48:3b:b5:4e:63:
                    eb:1a:2f:49:57:8f:51:a0:67:8c:ff:0a:32:09:f3:
                    a2:05:38:fe:2d:3f:5b:cf:95:e3:48:e2:42:bb:2e:
                    30:c2:7e:61:eb:0c:3f:95:7f:53:fb:f3:5c:92:e5:
                    63:5b:ad:77:44:8c:62:f9:2e:80:01:94:69:18:1b:
                    ca:73:fd:14:ab:37:23:d9:64:f4:24:01:06:08:d2:
                    38:16:d9:ac:ee:24:6d:e9:42:61:60:6e:be:af:ba:
                    bb:fa:28:10:b0:4a:fd:d8:11:83:c9:10:d0:b3:d5:
                    fe:12:09:2e:1b:a3:0b:13:00:f7:43:fd:bb:14:df:
                    e4:fa:b3:52:f9:1c:5d:99:9f:b2:b4:a5:e5:94:ac:
                    fa:41:8b:73:17:80:fa:7c:60:42:31:fb:a4:9a:3f:
                    f5:5a:46:a0:45:cd:49:c0:69:76:c5:ae:b5:6f:30:
                    35:6d:59:0d:83:be:ff:80:f9:91:83:74:df:eb:b3:
                    e5:e7:28:1f:bc:9b:2f:25:82:c9:e4:d2:80:b8:f4:
                    ca:ad:f9:8d:e0:47:66:8d:74:db:34:cc:08:76:a3:
                    98:3d:3c:66:a5:bb:0e:f6:67:b9:e2:70:8c:08:53:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6A:05:F5:6B:5E:2A:F6:4E:DB:CE:39:17:21:1D:EA:3D:1B:32:6F
            X509v3 Authority Key Identifier:
                keyid:E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:cac0:db5::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:1a:76:57:98:3b:97:9a:b7:7a:ef:93:7a:5f:f3:8e:ea:f9:
         d3:a8:20:d2:09:2c:1e:4f:0b:39:8c:41:91:47:1b:3a:ef:64:
         06:2f:2c:ba:ac:fd:6e:30:15:e8:5c:43:2a:8e:0e:16:43:ec:
         54:08:07:c0:e3:55:03:43:42:05:ad:c9:86:67:d9:ef:58:2b:
         35:04:9d:eb:5b:d4:13:ab:f3:01:26:e6:97:f1:bb:96:4c:b6:
         06:d4:05:95:fd:73:98:bf:f2:a9:70:da:bf:1a:d1:a7:0d:b5:
         85:46:a9:6b:f6:46:9d:d1:4c:c4:98:27:e7:b1:22:97:eb:1b:
         cb:00:b6:47:8c:8e:39:d0:f0:a4:e0:80:f4:61:61:d4:4c:23:
         ac:af:ab:67:9b:7a:a4:02:2d:81:a0:d0:08:2b:06:30:88:72:
         d4:27:76:89:e5:7f:d9:fd:8c:ae:a7:a0:05:7d:68:82:36:ca:
         a9:01:4e:9b:69:b4:4f:1f:e1:72:ea:4b:27:5b:5e:1c:54:0e:
         e2:3d:e5:01:71:d5:12:78:9b:43:23:d2:6f:4f:98:0b:1f:d9:
         27:8f:d2:45:2a:36:a9:cc:bd:52:cf:f5:91:c1:10:f0:33:82:
         fb:75:b6:1c:85:51:00:d8:8c:24:31:82:f3:94:73:26:07:36:
         64:63:77:59
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIFgPXdFx37JMjRwsbuicXQrCxTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY2MDNDMDhCNUNGMUFDRUUxQzczRDMzQzYwMEQ0RjRG
REY1REMyRTAeFw0yNjA1MDMwMzA4MzFaFw0yNzA1MDIwMzEzMzFaMDMxMTAvBgNV
BAMTKDMyNkEwNUY1NkI1RTJBRjY0RURCQ0UzOTE3MjExREVBM0QxQjMyNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/e/yOSV20uhYLo52IVlY8rgI/
Gl6fHBxIO7VOY+saL0lXj1GgZ4z/CjIJ86IFOP4tP1vPleNI4kK7LjDCfmHrDD+V
f1P781yS5WNbrXdEjGL5LoABlGkYG8pz/RSrNyPZZPQkAQYI0jgW2azuJG3pQmFg
br6vurv6KBCwSv3YEYPJENCz1f4SCS4bowsTAPdD/bsU3+T6s1L5HF2Zn7K0peWU
rPpBi3MXgPp8YEIx+6SaP/VaRqBFzUnAaXbFrrVvMDVtWQ2Dvv+A+ZGDdN/rs+Xn
KB+8my8lgsnk0oC49Mqt+Y3gR2aNdNs0zAh2o5g9PGaluw72Z7nicIwIU2IVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMmoF9WteKvZO2845FyEd6j0bMm8wHwYDVR0j
BBgwFoAU5mA8CLXPGs7hxz0zxgDU9P313C4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTU0MTNmZjQtMjAyYi00OTk5LWI0NWQtNzNjOTcyZjEwMTE2LzAvRTY2MDNDMDhC
NUNGMUFDRUUxQzczRDMzQzYwMEQ0RjRGREY1REMyRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNjYwM0MwOEI1Q0YxQUNFRTFDNzNEMzNDNjAwRDRGNEZERjVE
QzJFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i
NDVkLTczYzk3MmYxMDExNi8wLzMyMzQzMDM0M2E2MzYxNjMzMDNhNjQ2MjM1M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzQzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATK
wA21MA0GCSqGSIb3DQEBCwUAA4IBAQCaGnZXmDuXmrd675N6X/OO6vnTqCDSCSwe
Tws5jEGRRxs672QGLyy6rP1uMBXoXEMqjg4WQ+xUCAfA41UDQ0IFrcmGZ9nvWCs1
BJ3rW9QTq/MBJuaX8buWTLYG1AWV/XOYv/KpcNq/GtGnDbWFRqlr9kad0UzEmCfn
sSKX6xvLALZHjI450PCk4ID0YWHUTCOsr6tnm3qkAi2BoNAIKwYwiHLUJ3aJ5X/Z
/Yyup6AFfWiCNsqpAU6babRPH+Fy6ksnW14cVA7iPeUBcdUSeJtDI9JvT5gLH9kn
j9JFKjapzL1Sz/WRwRDwM4L7dbYchVEA2IwkMYLzlHMmBzZkY3dZ
-----END CERTIFICATE-----
Generated at Wed May 13 17:36:59 2026 by rpki-client