Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          tHxPdA0Vko6EJ2UxghnOuNmX2+ALZconxKjMn1FmGko=
Subject key identifier:   FC:64:A6:E3:35:49:D2:45:7D:7E:49:32:F4:72:9E:20:60:31:BF:F1
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       495BECFD444B531FF72A55A610A395169F8BCC01
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:14:13 +0000
ROA not before:           Sun 03 May 2026 03:09:13 +0000
ROA not after:            Sun 02 May 2027 03:14:13 +0000
asID:                     38526
IP address blocks:        2405:3740:9002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5b:ec:fd:44:4b:53:1f:f7:2a:55:a6:10:a3:95:16:9f:8b:cc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:09:13 2026 GMT
            Not After : May  2 03:14:13 2027 GMT
        Subject: CN=FC64A6E33549D2457D7E4932F4729E206031BFF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:39:ec:75:68:86:07:e3:ff:10:61:54:f1:
                    d0:20:35:43:07:eb:ab:a4:43:ee:41:a6:36:fa:1d:
                    4a:ba:06:f5:c1:15:4e:06:e0:86:91:6b:06:89:9c:
                    11:fe:78:53:cf:8e:6a:53:dd:3a:ed:9d:12:c0:b8:
                    09:70:7b:61:93:0a:0f:bc:19:50:f6:37:1e:9f:80:
                    d9:7f:91:f6:8d:fb:ad:1b:34:62:15:27:6c:6d:54:
                    72:71:89:b8:d5:1f:e2:e2:f9:7a:1e:50:fd:3a:e5:
                    35:96:e7:9b:53:bc:67:28:6f:a0:16:27:d4:f8:37:
                    90:21:a1:2a:97:f1:30:0c:e4:92:c0:36:01:4d:65:
                    76:b2:bb:41:5f:35:c5:cd:86:fd:a5:a7:a8:ec:56:
                    a5:5b:8e:60:19:b5:b5:11:eb:db:41:df:09:af:1d:
                    e7:ba:35:c7:e9:2f:d6:12:f5:03:60:a1:22:9a:3f:
                    7a:d7:05:72:7c:c8:1e:f1:c8:13:77:14:6d:ee:bf:
                    7e:94:77:fd:45:40:ea:c1:01:e1:00:39:4c:da:4f:
                    ab:ed:10:b7:2d:90:7d:94:4a:99:f9:0f:d0:ef:b5:
                    80:be:48:ef:b8:72:dc:a5:ad:f0:e9:63:08:ed:cb:
                    64:d3:a4:d7:89:72:4b:d2:d9:c6:64:11:14:83:fd:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:64:A6:E3:35:49:D2:45:7D:7E:49:32:F4:72:9E:20:60:31:BF:F1
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9002::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:2e:61:32:1a:f5:08:b5:9e:41:23:21:60:45:a6:8e:ff:
         fd:b4:db:8f:5c:ec:fe:58:01:95:3e:0b:75:2f:7f:00:ba:71:
         1b:98:47:56:ae:3f:50:f2:c5:af:59:4d:b3:00:ef:b6:da:19:
         5c:a0:e0:90:63:78:c4:40:2d:c0:e0:5f:ff:2d:ad:82:2d:10:
         09:48:26:f9:23:58:93:8b:38:04:70:ca:5c:f3:2e:08:fc:61:
         5c:c3:bd:1c:e6:fb:d3:56:e5:9b:82:58:64:8f:78:de:44:f1:
         57:bf:32:7e:72:8b:88:26:fb:ff:11:cf:0c:19:c8:fe:26:53:
         08:9b:65:a7:f1:af:c8:e2:f7:97:c1:2c:8a:44:73:86:69:4f:
         0c:8a:dd:f3:8f:0e:2e:58:03:47:75:e5:98:5b:5a:e5:77:dd:
         58:09:1f:ed:e5:1d:0e:76:3a:dd:68:95:b8:c3:c4:b2:f1:5f:
         7d:47:bc:8a:bf:7a:0d:d3:38:35:46:a6:5f:d6:23:74:ef:bf:
         c7:f2:39:7d:d2:01:16:08:1a:36:0e:70:40:df:60:dd:9c:30:
         57:9f:4c:dc:16:3c:5a:e2:58:94:ae:3f:10:6f:c6:0b:be:92:
         31:80:56:83:9c:fa:18:a9:0e:a5:41:2a:8d:34:f6:25:b3:01:
         74:10:3b:ee
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSVvs/URLUx/3KlWmEKOVFp+LzAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3
RTNDRkZENzAeFw0yNjA1MDMwMzA5MTNaFw0yNzA1MDIwMzE0MTNaMDMxMTAvBgNV
BAMTKEZDNjRBNkUzMzU0OUQyNDU3RDdFNDkzMkY0NzI5RTIwNjAzMUJGRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmTnsdWiGB+P/EGFU8dAgNUMH
66ukQ+5Bpjb6HUq6BvXBFU4G4IaRawaJnBH+eFPPjmpT3TrtnRLAuAlwe2GTCg+8
GVD2Nx6fgNl/kfaN+60bNGIVJ2xtVHJxibjVH+Li+XoeUP065TWW55tTvGcob6AW
J9T4N5AhoSqX8TAM5JLANgFNZXayu0FfNcXNhv2lp6jsVqVbjmAZtbUR69tB3wmv
Hee6NcfpL9YS9QNgoSKaP3rXBXJ8yB7xyBN3FG3uv36Ud/1FQOrBAeEAOUzaT6vt
ELctkH2USpn5D9DvtYC+SO+4ctylrfDpYwjty2TTpNeJckvS2cZkERSD/c5TAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU/GSm4zVJ0kV9fkky9HKeIGAxv/EwHwYDVR0j
BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0
REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG
RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QJACMA0GCSqGSIb3DQEBCwUAA4IBAQBOgi5hMhr1CLWeQSMhYEWmjv/9tNuPXOz+
WAGVPgt1L38AunEbmEdWrj9Q8sWvWU2zAO+22hlcoOCQY3jEQC3A4F//La2CLRAJ
SCb5I1iTizgEcMpc8y4I/GFcw70c5vvTVuWbglhkj3jeRPFXvzJ+couIJvv/Ec8M
Gcj+JlMIm2Wn8a/I4veXwSyKRHOGaU8Mit3zjw4uWANHdeWYW1rld91YCR/t5R0O
djrdaJW4w8Sy8V99R7yKv3oN0zg1RqZf1iN077/H8jl90gEWCBo2DnBA32DdnDBX
n0zcFjxa4liUrj8Qb8YLvpIxgFaDnPoYqQ6lQSqNNPYlswF0EDvu
-----END CERTIFICATE-----
Generated at Wed May 13 12:51:46 2026 by rpki-client