Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          yBDEfBezQNKHxB4YFIGlFVS9Gq96WUIEXy6XzJmEwkw=
Subject key identifier:   49:17:DD:7A:1A:19:80:4C:3D:72:AE:D8:80:75:E7:F5:8D:82:7D:6C
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       74524E89D20186438620C4A7172E92C5E4662588
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:14:06 +0000
ROA not before:           Sun 03 May 2026 03:09:06 +0000
ROA not after:            Sun 02 May 2027 03:14:06 +0000
asID:                     38526
IP address blocks:        2405:3740:8005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:52:4e:89:d2:01:86:43:86:20:c4:a7:17:2e:92:c5:e4:66:25:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:09:06 2026 GMT
            Not After : May  2 03:14:06 2027 GMT
        Subject: CN=4917DD7A1A19804C3D72AED88075E7F58D827D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:ee:87:7f:b2:fc:b1:38:43:12:b1:fe:6a:
                    5c:df:39:79:2b:9d:fe:55:99:bd:93:f6:a8:41:84:
                    37:62:af:ce:da:fd:56:ce:a5:19:9c:a6:4e:e1:0e:
                    83:0a:a6:f2:6d:95:17:9a:c9:30:19:b0:1e:0b:ea:
                    02:f8:f1:a7:95:10:77:f9:99:a0:43:37:ca:ed:b8:
                    cc:0b:89:16:25:52:10:af:0b:c0:1b:0a:a1:f2:72:
                    2a:d6:be:0e:f4:41:e2:b4:d5:85:2c:2e:9d:89:13:
                    47:77:68:2e:94:76:bb:12:46:8a:8d:82:bd:57:fd:
                    8d:49:ad:c0:e4:b1:f8:ac:c2:02:0a:3a:23:b3:41:
                    61:81:d9:ef:ab:44:72:b9:12:a5:b0:b6:b2:96:42:
                    ab:70:06:19:db:66:7d:9e:67:bd:7b:e2:ad:22:c6:
                    4a:f5:0d:08:8c:7d:3f:69:3b:25:25:00:ec:3c:59:
                    36:c8:ee:66:79:59:8d:06:4d:28:cd:40:ab:2d:3d:
                    3f:85:ab:b8:bf:f1:16:e0:09:93:a2:b1:f4:fe:57:
                    26:16:da:bb:54:94:74:72:a5:38:af:06:16:c3:71:
                    a4:ea:94:6f:e2:21:c0:03:ac:8c:de:08:3b:e2:4e:
                    c5:bb:78:f4:38:0b:dc:a1:f1:ca:10:9a:7c:c2:8d:
                    1c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:17:DD:7A:1A:19:80:4C:3D:72:AE:D8:80:75:E7:F5:8D:82:7D:6C
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:3f:0a:eb:fa:c8:8c:b5:11:8c:03:1f:c1:5c:11:85:d3:d9:
         0b:c0:53:cf:2d:c4:10:03:b4:c4:7e:08:78:93:68:ff:e7:7d:
         1a:0a:1c:00:0b:42:7a:80:50:cd:c0:e8:dc:cf:ab:9e:85:12:
         eb:12:a4:84:2f:75:72:a9:3f:06:1f:79:fd:51:47:d2:1b:32:
         80:85:86:6d:53:70:42:40:f5:aa:00:b2:27:e0:86:05:e6:ca:
         b6:25:ac:c4:99:ea:af:a4:d8:3e:7f:b3:00:e4:07:4f:19:1c:
         eb:0f:b8:5a:71:b4:96:4f:cf:05:a5:d1:d4:b0:5d:94:99:d5:
         33:c4:d0:df:c0:cc:cf:17:89:90:11:fb:8b:94:ac:da:03:ad:
         57:74:f1:28:c8:5c:3c:1d:1a:a4:b9:dd:78:5b:d8:0e:dc:28:
         81:f3:eb:8b:0d:fa:20:17:68:86:c1:b0:71:24:f6:6b:44:b8:
         49:8a:19:af:d0:42:25:85:0c:29:29:55:22:f8:33:86:28:d6:
         47:f4:42:89:3c:5b:1d:ec:ca:ac:d6:d9:0e:09:88:42:ee:28:
         14:d1:67:90:1f:c2:a4:94:05:51:89:2e:1a:a2:ac:bf:7d:64:
         95:cd:4e:44:f1:90:eb:0d:5f:09:2f:13:3f:19:db:b7:e9:7c:
         57:b8:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:24 2026 by rpki-client