Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/323430333a656134303a3a2f33322d3332203d3e20313338303837.roa
File:                     323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (raw, json)
Hash identifier:          JXx4rmshK5zeJUCZJebsJceKl7fdvXmMmFCmeFD7JVA=
Subject key identifier:   8D:13:08:47:5C:36:FE:74:5B:7B:50:E8:B0:1D:A9:B4:CE:4B:DB:A1
Certificate issuer:       /CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
Certificate serial:       73D6D9ED9B0118E36580EF3C43B0197C1910841E
Authority key identifier: 54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/323430333a656134303a3a2f33322d3332203d3e20313338303837.roa
Signing time:             Sun 03 May 2026 03:13:44 +0000
ROA not before:           Sun 03 May 2026 03:08:44 +0000
ROA not after:            Sun 02 May 2027 03:13:44 +0000
asID:                     138087
IP address blocks:        2403:ea40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl
                          rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d6:d9:ed:9b:01:18:e3:65:80:ef:3c:43:b0:19:7c:19:10:84:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
        Validity
            Not Before: May  3 03:08:44 2026 GMT
            Not After : May  2 03:13:44 2027 GMT
        Subject: CN=8D1308475C36FE745B7B50E8B01DA9B4CE4BDBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:60:5e:5d:f3:8e:07:58:87:b7:e8:61:29:
                    32:da:8e:79:8d:e5:38:18:13:aa:13:64:af:89:fb:
                    d8:cc:4c:f6:aa:ca:00:41:19:c1:ac:04:b5:4b:6e:
                    70:13:a6:75:e9:52:16:ae:2b:cf:8e:86:46:e9:31:
                    1b:91:cc:87:54:72:c4:93:03:8e:0e:02:90:43:3c:
                    42:cc:c2:07:32:a5:20:61:8b:d5:bd:6e:e9:58:9b:
                    0a:ef:6d:9a:fa:82:c6:d0:c7:d6:f6:4e:f6:c8:fe:
                    55:4e:19:46:aa:df:79:a7:9f:2f:f8:45:70:7b:fa:
                    04:4c:be:4d:38:76:5f:45:e2:00:a9:6a:ad:f9:2b:
                    cc:da:08:48:9b:af:3e:11:f2:c6:42:02:a8:1d:c7:
                    1e:2b:6f:a0:d1:30:af:27:fb:af:2b:0e:61:d5:27:
                    14:37:80:11:bc:d4:c9:9a:0a:9e:2c:a3:88:82:f9:
                    91:6f:50:d2:0f:97:f9:99:38:66:54:c8:b1:29:a3:
                    d4:8a:87:62:52:4f:aa:33:7c:b7:0b:46:8d:5b:06:
                    93:e9:70:17:e4:17:6f:48:0a:9b:f7:c1:e3:1a:d5:
                    55:69:aa:34:58:84:0c:a2:8f:ce:bb:96:3a:54:bf:
                    2a:34:27:05:a7:de:7a:e6:da:20:10:b1:e7:7c:be:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:13:08:47:5C:36:FE:74:5B:7B:50:E8:B0:1D:A9:B4:CE:4B:DB:A1
            X509v3 Authority Key Identifier:
                keyid:54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/323430333a656134303a3a2f33322d3332203d3e20313338303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ea40::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:7e:40:6a:ee:3d:d4:6d:85:e7:d1:54:49:cc:97:3f:96:53:
         89:be:3e:76:7f:0f:23:1e:1d:c3:cc:fb:98:64:f7:e1:c5:9e:
         05:7b:dc:e0:3e:46:6f:18:8c:7f:1f:23:e2:4b:98:f3:5e:ae:
         35:5d:b8:fe:1a:76:e4:f9:e3:12:1c:ee:77:78:bf:b1:c1:ea:
         37:4d:d4:ea:1a:63:4a:cc:96:c5:a2:7c:55:4e:9e:52:32:0e:
         e2:68:bf:9e:8b:bd:96:2a:cf:51:a2:79:ff:93:5d:49:1e:0d:
         c0:44:63:9f:a8:dd:96:b2:8c:db:93:e1:30:db:82:bd:f7:e1:
         07:44:35:de:0d:3a:ec:2e:76:0a:5f:20:13:52:c5:c3:b5:a4:
         db:4a:cd:64:65:dd:86:f9:2d:42:ea:c2:0d:0f:f3:bf:17:36:
         cc:6b:d9:69:0f:55:d4:ef:5c:73:c6:42:27:70:5a:38:07:57:
         16:96:a8:5a:0a:56:36:c1:fc:6e:3c:59:79:67:fd:c6:ca:72:
         7a:98:d8:9c:74:12:3f:91:8b:de:c8:a7:5b:f4:d7:16:00:98:
         53:c7:c7:b0:c0:12:a3:d4:34:0d:f4:1c:29:a5:6a:eb:04:49:
         99:ce:af:a9:f7:4d:75:5d:24:a8:67:5d:95:eb:1a:ce:70:a6:
         4d:b7:16:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:13 2026 by rpki-client