Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031343a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031343a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          OeInPsM+2RQT6MA5rnlP0h2SIR1jL9ab4Cbr8Jwfnb4=
Subject key identifier:   2C:BE:A3:2C:49:B2:D5:B7:1D:61:1E:C8:04:9A:43:35:F7:71:52:C1
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       47C80F4EC6AB05AAC19DBE572C9DDF19990857E9
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031343a3a2f34382d3438203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:14:02 +0000
ROA not before:           Sun 03 May 2026 03:09:02 +0000
ROA not after:            Sun 02 May 2027 03:14:02 +0000
asID:                     38526
IP address blocks:        2405:3740:9014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c8:0f:4e:c6:ab:05:aa:c1:9d:be:57:2c:9d:df:19:99:08:57:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:09:02 2026 GMT
            Not After : May  2 03:14:02 2027 GMT
        Subject: CN=2CBEA32C49B2D5B71D611EC8049A4335F77152C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:08:0a:60:0c:9e:a6:39:91:a2:77:24:31:
                    d2:b0:51:bf:c2:d6:4d:7e:bf:bc:2c:82:f1:9f:59:
                    a5:46:64:2b:58:55:07:55:d7:63:bb:72:36:7d:61:
                    1b:d6:89:69:6a:80:51:41:3b:c6:ea:d4:86:17:15:
                    2d:f8:5c:0f:80:da:07:c2:5d:fd:94:32:a6:46:fb:
                    00:ec:6c:15:c5:3d:a2:3c:cf:a5:de:13:16:e1:36:
                    64:54:cc:de:d9:a4:e7:fe:ff:23:7e:1b:6c:5a:b1:
                    91:96:9a:9f:23:fb:ac:2a:5a:14:44:23:eb:82:db:
                    85:19:1e:15:b1:0c:f3:96:a8:3d:3e:79:bf:19:6f:
                    7f:cb:94:a9:62:58:64:ef:4d:d2:17:29:ad:7a:cf:
                    df:3b:a1:20:c1:da:11:cf:60:2e:17:12:e6:e3:6d:
                    03:dc:31:01:64:5f:f0:24:0c:af:1f:4c:3c:df:79:
                    60:85:df:d8:db:77:c5:0e:9e:39:41:3e:19:23:ee:
                    ef:78:dc:7d:34:7f:11:70:3d:22:fe:f7:73:72:bb:
                    0f:f5:cd:54:a6:15:9f:3d:0c:be:23:0f:2a:ad:9e:
                    d8:aa:00:9c:f2:47:58:31:92:41:88:e2:fd:90:88:
                    24:58:3e:08:50:76:2d:90:92:01:25:01:24:31:9f:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BE:A3:2C:49:B2:D5:B7:1D:61:1E:C8:04:9A:43:35:F7:71:52:C1
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031343a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9014::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:d6:69:15:b7:fa:5c:5b:38:2d:07:d1:53:e7:52:cc:6d:
         6b:34:e2:56:0b:7e:21:7a:c2:19:55:63:21:44:d1:10:ee:fc:
         4a:9e:42:66:53:56:e5:38:21:27:fe:2f:5d:61:fd:05:09:4c:
         27:7e:a9:3a:0a:51:27:1b:b1:35:01:3d:ba:a2:9c:26:56:0f:
         15:42:cf:45:95:15:28:a4:8f:00:b6:6b:d6:97:04:30:21:15:
         29:32:42:8e:7c:01:70:ec:8a:c0:ea:8e:e7:93:2c:17:ba:4f:
         b6:1f:5d:01:ad:8a:c4:27:08:5f:49:a8:7f:0c:04:ae:e6:c2:
         b1:2c:1a:04:86:1d:13:73:9e:f6:30:da:17:72:96:bb:96:0c:
         f1:47:c7:5f:94:ee:37:75:fc:40:24:aa:56:59:46:97:ac:fa:
         cc:19:c3:b5:95:43:ee:38:c8:4c:af:87:93:51:57:a7:74:f5:
         ac:e9:0a:f0:eb:65:c7:18:bd:62:b5:67:5a:07:4b:83:fd:59:
         ac:07:87:76:75:c2:68:8a:4d:d9:99:0c:a3:1f:86:1b:19:3c:
         67:11:8a:38:b8:19:39:50:93:55:e4:1b:5b:33:d1:ba:35:72:
         57:cb:26:55:2e:33:73:5e:50:e2:cc:d1:68:91:b9:ce:bf:09:
         28:e9:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:43 2026 by rpki-client