Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          Z6qX+cTm/EZR3BASPzAiKg0AXqhy3dhoS6U3GTrK8bc=
Subject key identifier:   00:49:1D:D6:57:6D:D8:76:C4:FD:03:D3:86:05:26:B0:73:CE:AC:E7
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       5702EE881A2CBF1C17CC4EB51FA6B6D992BD0E2D
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:14:16 +0000
ROA not before:           Sun 03 May 2026 03:09:16 +0000
ROA not after:            Sun 02 May 2027 03:14:16 +0000
asID:                     38526
IP address blocks:        2405:3740:8004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:02:ee:88:1a:2c:bf:1c:17:cc:4e:b5:1f:a6:b6:d9:92:bd:0e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:09:16 2026 GMT
            Not After : May  2 03:14:16 2027 GMT
        Subject: CN=00491DD6576DD876C4FD03D3860526B073CEACE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:cb:66:62:7f:78:81:ba:9d:8b:8a:76:db:
                    d5:a6:50:a0:73:f5:31:e9:34:cf:f4:91:f9:80:dc:
                    a1:ce:d9:f5:50:37:d9:2b:ed:f2:e7:32:f1:7b:86:
                    1c:cf:e0:0a:31:e3:5d:02:30:a8:cc:80:47:40:5c:
                    89:02:e5:46:9e:21:00:9f:d1:a2:e1:a9:27:40:b7:
                    d3:80:a9:00:e2:03:af:55:8b:d0:be:23:2a:cd:52:
                    e9:63:ea:c1:ea:01:4c:1d:91:bf:3f:54:ae:2e:28:
                    69:74:67:5f:86:05:a2:c3:9e:a3:fc:c6:00:e2:5f:
                    26:e6:82:5f:82:0d:52:07:0c:1c:b7:02:66:93:bf:
                    2d:a4:b3:33:95:a5:8b:23:83:a9:c4:bc:80:5a:be:
                    f0:85:f2:76:ed:f9:0b:71:2a:f4:33:e8:69:a8:69:
                    af:ba:29:ca:2f:8f:68:74:f2:ba:82:e0:8d:29:a8:
                    f4:60:a5:d1:98:06:0c:e6:b7:13:5c:12:c9:47:d8:
                    a3:a9:eb:fd:a5:4b:76:b0:11:c5:26:06:14:0e:ad:
                    d0:d2:ca:9c:72:38:6f:61:b7:3b:da:d0:67:f4:e4:
                    48:9d:9e:16:f0:97:e9:f4:9c:16:86:79:bb:87:9a:
                    4c:b0:75:79:63:99:aa:27:b5:26:49:f7:13:b8:8b:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:49:1D:D6:57:6D:D8:76:C4:FD:03:D3:86:05:26:B0:73:CE:AC:E7
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:be:d1:0c:4a:5b:7f:00:3d:71:60:e5:e7:04:16:3a:ea:7b:
         4c:01:ab:1e:10:c6:12:66:72:11:3d:95:5a:ad:80:1a:da:e7:
         dd:75:74:77:4b:9e:a3:7e:79:13:41:fb:c6:3c:03:b0:bc:28:
         72:57:43:0d:62:c6:78:1a:29:4c:e1:dd:0d:fa:a5:88:da:6f:
         95:4f:a4:bb:c2:48:04:3e:f0:3e:b6:d7:ca:a2:b2:57:a5:53:
         aa:0d:24:59:0c:fc:11:d6:69:00:97:49:70:c1:e0:4e:d5:8a:
         a9:42:01:6b:22:f7:57:a1:8f:c9:f5:45:b6:ca:31:55:32:b1:
         8a:47:e4:3a:a4:9e:f5:cf:2a:8a:fb:aa:70:fa:8d:3a:65:76:
         08:98:62:51:ec:bf:ad:fc:42:3d:1b:02:83:38:c4:df:97:74:
         2c:68:3f:24:3a:08:62:0a:36:fb:8b:fe:19:e1:c0:33:22:d3:
         b3:e2:db:00:c9:c1:44:f7:2a:90:48:fb:0d:1b:5f:96:40:de:
         e0:b8:19:6a:a4:4e:34:99:65:77:12:62:01:43:af:f3:83:7c:
         b7:e5:8f:1f:c9:46:26:23:d2:a1:06:80:6e:a3:ae:b4:45:9e:
         4e:ff:97:a6:c7:d7:5f:1c:5b:26:89:be:f9:64:0a:41:28:41:
         2f:6c:48:d7
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVwLuiBosvxwXzE61H6a22ZK9Di0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3
RTNDRkZENzAeFw0yNjA1MDMwMzA5MTZaFw0yNzA1MDIwMzE0MTZaMDMxMTAvBgNV
BAMTKDAwNDkxREQ2NTc2REQ4NzZDNEZEMDNEMzg2MDUyNkIwNzNDRUFDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpctmYn94gbqdi4p229WmUKBz
9THpNM/0kfmA3KHO2fVQN9kr7fLnMvF7hhzP4Aox410CMKjMgEdAXIkC5UaeIQCf
0aLhqSdAt9OAqQDiA69Vi9C+IyrNUulj6sHqAUwdkb8/VK4uKGl0Z1+GBaLDnqP8
xgDiXybmgl+CDVIHDBy3AmaTvy2kszOVpYsjg6nEvIBavvCF8nbt+QtxKvQz6Gmo
aa+6Kcovj2h08rqC4I0pqPRgpdGYBgzmtxNcEslH2KOp6/2lS3awEcUmBhQOrdDS
ypxyOG9htzva0Gf05Eidnhbwl+n0nBaGebuHmkywdXljmaontSZJ9xO4iwJtAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUAEkd1ldt2HbE/QPThgUmsHPOrOcwHwYDVR0j
BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0
REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG
RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzgzMDMwMzQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QIAEMA0GCSqGSIb3DQEBCwUAA4IBAQBTvtEMSlt/AD1xYOXnBBY66ntMAaseEMYS
ZnIRPZVarYAa2ufddXR3S56jfnkTQfvGPAOwvChyV0MNYsZ4GilM4d0N+qWI2m+V
T6S7wkgEPvA+ttfKorJXpVOqDSRZDPwR1mkAl0lwweBO1YqpQgFrIvdXoY/J9UW2
yjFVMrGKR+Q6pJ71zyqK+6pw+o06ZXYImGJR7L+t/EI9GwKDOMTfl3QsaD8kOghi
Cjb7i/4Z4cAzItOz4tsAycFE9yqQSPsNG1+WQN7guBlqpE40mWV3EmIBQ6/zg3y3
5Y8fyUYmI9KhBoBuo660RZ5O/5emx9dfHFsmib75ZApBKEEvbEjX
-----END CERTIFICATE-----
Generated at Wed May 13 11:47:10 2026 by rpki-client