Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030303a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393030303a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          mI0qWEBclwwepFukfIxxbYnNQ5ZgSnTXV7n6tXYrVB0=
Subject key identifier:   BA:3C:18:5F:84:7A:48:F3:6C:E7:EA:49:18:96:EB:4F:B2:86:4B:EC
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       542D90BE00F98A156BDBA007D4AF763182112078
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030303a3a2f34382d3438203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:14:06 +0000
ROA not before:           Sun 03 May 2026 03:09:06 +0000
ROA not after:            Sun 02 May 2027 03:14:06 +0000
asID:                     38526
IP address blocks:        2405:3740:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2d:90:be:00:f9:8a:15:6b:db:a0:07:d4:af:76:31:82:11:20:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:09:06 2026 GMT
            Not After : May  2 03:14:06 2027 GMT
        Subject: CN=BA3C185F847A48F36CE7EA491896EB4FB2864BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:0b:dc:85:40:97:68:7b:0c:a2:d5:6e:7b:
                    8d:aa:6a:e5:d2:ff:82:82:17:44:17:d9:f7:67:e6:
                    08:3f:a7:e8:0a:4b:63:e8:bd:7e:ef:dd:4a:2f:d3:
                    69:15:03:ee:52:d2:e2:95:f2:cd:81:82:8a:2a:f1:
                    4c:0a:da:63:de:87:4a:2f:6a:38:c2:b1:f8:03:5a:
                    3c:0c:f0:40:24:9e:b3:67:0e:0d:46:fa:e5:14:bd:
                    7c:40:ad:3f:e9:e6:af:76:65:8b:9f:42:b0:b6:74:
                    db:78:03:65:65:34:3d:03:b4:da:af:79:53:83:8d:
                    e6:77:d4:cb:0d:7a:a7:c0:dd:63:67:7f:6c:c2:03:
                    95:71:b0:7d:c9:cb:8c:cf:86:0f:82:07:72:07:73:
                    db:af:e2:1d:e4:c4:42:a2:fe:bd:41:6b:02:0b:ad:
                    7d:53:d6:2b:ed:59:9f:33:37:fb:bb:52:ae:aa:d8:
                    08:b2:82:b9:be:fe:93:17:f7:15:a9:01:4b:11:a5:
                    a6:3c:17:bf:1b:ca:5d:8d:ef:5b:0b:9b:25:ce:2c:
                    8d:f8:c9:d7:30:62:7b:02:db:45:e4:4d:b4:77:d5:
                    7f:20:db:35:d6:18:5d:ae:6c:6b:37:99:a2:3e:67:
                    1b:88:6e:27:5f:70:ae:23:d6:fa:3f:7e:95:88:3d:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3C:18:5F:84:7A:48:F3:6C:E7:EA:49:18:96:EB:4F:B2:86:4B:EC
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030303a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:7d:04:5a:d3:84:11:0f:d8:b9:f0:ac:95:b0:f7:68:16:8d:
         c8:60:1a:b6:9f:07:75:8e:ef:7e:28:dd:35:78:ec:db:89:09:
         b2:d2:96:4f:6a:e8:a8:88:b4:99:4c:6a:dc:12:a0:59:8a:db:
         27:2d:99:48:e1:eb:08:65:a5:37:43:42:ff:fa:74:3b:8d:97:
         c6:e8:c2:49:34:50:1b:a0:fc:27:63:dc:37:1f:57:f7:52:25:
         3c:ef:d6:da:3a:f3:64:8d:f3:f5:4d:46:77:eb:10:f6:a2:07:
         2a:23:0d:7d:6f:a6:22:23:0d:57:6d:08:3b:44:8f:c9:54:e6:
         17:4a:27:43:d9:7e:a0:22:a4:45:79:78:1e:fe:26:f5:9c:f8:
         2a:e6:12:16:96:c6:7f:ea:92:1f:5b:3c:66:72:c8:bf:76:5b:
         9a:2f:d2:57:6b:28:4d:68:d6:3b:a5:bb:9d:4f:76:2b:d3:24:
         f3:d8:94:be:1c:98:cb:70:32:1a:7c:1a:2c:ae:83:36:89:87:
         46:b2:cf:6c:44:64:8c:d8:1f:11:19:8b:88:ca:46:cb:91:ac:
         56:6b:17:9f:64:76:da:7d:e9:25:70:26:62:8b:47:d6:14:4f:
         1c:92:ea:6e:f4:b6:4c:68:3c:3a:a0:54:e3:77:66:78:00:ab:
         71:95:00:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:09 2026 by rpki-client