Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          xnhFyyOOt4hSgHYkwATli3X5xegvQjSFyU9/lZ8ngCw=
Subject key identifier:   88:6F:00:E9:94:12:11:09:47:1D:BE:36:9D:AE:5B:32:32:75:2A:E0
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       7FAF4C35E7D3BF2DF71D94873F8E20197808A434
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:13:59 +0000
ROA not before:           Sun 03 May 2026 03:08:59 +0000
ROA not after:            Sun 02 May 2027 03:13:59 +0000
asID:                     38526
IP address blocks:        2405:3740:9008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:af:4c:35:e7:d3:bf:2d:f7:1d:94:87:3f:8e:20:19:78:08:a4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:08:59 2026 GMT
            Not After : May  2 03:13:59 2027 GMT
        Subject: CN=886F00E994121109471DBE369DAE5B3232752AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:e3:f9:3b:92:c6:cf:ef:09:46:e0:96:35:
                    8e:2c:7a:81:24:83:80:ab:e2:6f:5e:c7:5c:2d:b1:
                    41:2f:be:8e:ff:f6:94:dc:43:6a:b6:75:f2:61:da:
                    63:04:84:61:b5:97:f4:b1:ac:14:a6:df:4c:45:43:
                    8e:04:3c:ac:1b:dd:b9:e3:e8:d4:f3:65:5e:ed:8f:
                    9b:7a:4b:33:61:62:32:d8:25:ef:89:4c:d4:13:8b:
                    c3:47:34:0b:03:9f:67:12:47:f8:2c:3b:fb:29:a3:
                    34:a9:b3:58:76:2c:d1:f3:25:b0:ee:2b:a3:27:5d:
                    a6:44:76:69:bf:78:99:c0:0e:23:53:20:13:12:da:
                    09:93:e9:0e:f4:f9:c7:f2:81:2e:d0:17:7d:42:c7:
                    6f:2b:57:ce:28:e6:58:1c:ea:c5:2b:5d:d3:4f:e1:
                    da:1f:a3:c2:a2:6e:17:de:19:32:66:57:f8:16:eb:
                    91:89:f1:0c:48:45:e6:20:b4:c8:44:7b:a9:f9:64:
                    70:49:ba:eb:6d:d6:08:a2:ec:3c:52:05:da:d8:f2:
                    fa:47:92:6e:03:d0:b1:16:df:32:9c:cd:da:50:af:
                    a8:ab:4c:49:44:f5:e5:fc:c4:b5:51:c4:a6:ac:ba:
                    8c:ad:04:f6:a4:a0:95:45:c4:7d:47:46:43:54:64:
                    d0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6F:00:E9:94:12:11:09:47:1D:BE:36:9D:AE:5B:32:32:75:2A:E0
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9008::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:85:db:3c:bf:be:85:1c:92:65:0e:5c:70:18:01:5e:63:2e:
         b4:ae:b5:d4:86:ed:58:ed:59:6d:ea:80:9a:d6:b5:b9:23:5f:
         8d:e4:93:88:67:c8:02:7b:d3:fb:b0:4e:ac:85:2d:15:32:e7:
         a1:f3:54:f3:15:ac:69:a9:ed:66:e7:50:9b:8d:ad:69:65:65:
         3c:28:27:bc:92:12:d3:b6:cb:dc:34:2b:27:4e:24:ef:da:ad:
         34:64:c8:94:e8:6a:20:b0:c9:b6:42:73:b2:c6:cc:5b:7b:e1:
         15:5b:63:aa:70:92:a6:30:62:b0:9f:d9:cf:cd:3b:88:f0:f0:
         65:04:1d:8b:a5:93:96:63:b7:7d:90:9a:02:79:23:0b:35:35:
         f5:90:66:f0:63:f9:7e:62:f9:27:d6:c9:aa:c8:94:69:29:86:
         ed:23:7b:f0:ca:23:4e:82:6f:66:b8:9b:5d:5d:ea:a5:f0:25:
         65:36:71:24:a4:39:ff:78:89:19:31:4d:18:44:94:19:56:e0:
         51:a1:b4:92:69:71:c3:44:25:e6:18:e1:73:8f:7f:54:c6:c5:
         37:06:ee:9e:f7:b8:ca:a0:5d:1f:4a:9b:07:32:af:7e:51:fb:
         bc:ae:ae:ea:ce:87:04:4e:ad:9b:c8:e8:57:71:7f:53:60:23:
         99:ce:0f:56
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUf69MNefTvy33HZSHP44gGXgIpDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3
RTNDRkZENzAeFw0yNjA1MDMwMzA4NTlaFw0yNzA1MDIwMzEzNTlaMDMxMTAvBgNV
BAMTKDg4NkYwMEU5OTQxMjExMDk0NzFEQkUzNjlEQUU1QjMyMzI3NTJBRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLqOP5O5LGz+8JRuCWNY4seoEk
g4Cr4m9ex1wtsUEvvo7/9pTcQ2q2dfJh2mMEhGG1l/SxrBSm30xFQ44EPKwb3bnj
6NTzZV7tj5t6SzNhYjLYJe+JTNQTi8NHNAsDn2cSR/gsO/spozSps1h2LNHzJbDu
K6MnXaZEdmm/eJnADiNTIBMS2gmT6Q70+cfygS7QF31Cx28rV84o5lgc6sUrXdNP
4dofo8KibhfeGTJmV/gW65GJ8QxIReYgtMhEe6n5ZHBJuutt1gii7DxSBdrY8vpH
km4D0LEW3zKczdpQr6irTElE9eX8xLVRxKasuoytBPakoJVFxH1HRkNUZNCBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUiG8A6ZQSEQlHHb42na5bMjJ1KuAwHwYDVR0j
BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0
REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG
RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzgz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QJAIMA0GCSqGSIb3DQEBCwUAA4IBAQBDhds8v76FHJJlDlxwGAFeYy60rrXUhu1Y
7Vlt6oCa1rW5I1+N5JOIZ8gCe9P7sE6shS0VMueh81TzFaxpqe1m51Cbja1pZWU8
KCe8khLTtsvcNCsnTiTv2q00ZMiU6GogsMm2QnOyxsxbe+EVW2OqcJKmMGKwn9nP
zTuI8PBlBB2LpZOWY7d9kJoCeSMLNTX1kGbwY/l+Yvkn1smqyJRpKYbtI3vwyiNO
gm9muJtdXeql8CVlNnEkpDn/eIkZMU0YRJQZVuBRobSSaXHDRCXmGOFzj39UxsU3
Bu6e97jKoF0fSpsHMq9+Ufu8rq7qzocETq2byOhXcX9TYCOZzg9W
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:54 2026 by rpki-client