Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031373a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031373a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          GmYKtpIaVE599nIuBVAJbTXxum7YtzSgU/o7xNROOVY=
Subject key identifier:   A4:80:E4:C0:D3:64:97:78:98:38:ED:F2:67:8C:A4:E6:3F:D7:55:49
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       646F50EB2828C9053DB06CFE26314D1E5F605274
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031373a3a2f34382d3438203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:14:16 +0000
ROA not before:           Sun 03 May 2026 03:09:16 +0000
ROA not after:            Sun 02 May 2027 03:14:16 +0000
asID:                     38526
IP address blocks:        2405:3740:9017::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6f:50:eb:28:28:c9:05:3d:b0:6c:fe:26:31:4d:1e:5f:60:52:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:09:16 2026 GMT
            Not After : May  2 03:14:16 2027 GMT
        Subject: CN=A480E4C0D36497789838EDF2678CA4E63FD75549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:1b:2f:3a:2e:b6:48:c3:0f:3e:29:58:30:
                    40:f2:dd:b1:a5:82:d4:40:6b:88:9e:c6:e0:67:42:
                    c1:fe:c8:d2:ea:d9:bb:bc:eb:21:ed:1e:d5:20:10:
                    22:6e:f5:3d:a8:83:c5:1d:7c:70:94:88:a5:4c:4f:
                    ce:d3:d3:5d:9b:55:1a:7c:f4:fc:06:a2:5b:88:eb:
                    d5:03:df:09:f8:b0:a5:36:51:1b:55:ae:4d:4d:5d:
                    3c:ba:36:b3:3c:56:50:4b:1e:e3:17:18:20:06:9f:
                    de:ba:b4:41:50:ac:44:04:d0:ca:1b:3e:eb:4b:39:
                    00:ed:d3:aa:73:ae:a4:cc:e1:0b:32:25:cb:c5:68:
                    c0:32:03:8d:3e:ba:77:c1:b9:b0:1a:df:59:3b:aa:
                    44:5b:e5:45:88:36:5e:86:db:ed:41:37:46:02:a6:
                    2c:d3:d7:c5:7d:7c:de:66:fb:4f:1c:16:95:b4:53:
                    df:c7:21:f2:26:32:d7:7c:dd:c1:c6:8a:b7:d4:f2:
                    a2:98:4b:37:72:6a:3e:bd:6b:d0:7b:f6:27:bb:89:
                    13:d9:b5:c5:cb:d6:e9:90:bc:99:02:3b:03:3d:57:
                    98:28:a2:c1:bf:83:11:78:12:60:19:12:40:a0:e3:
                    88:32:13:ef:cf:52:9a:a9:4c:65:a9:8b:06:36:f1:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:80:E4:C0:D3:64:97:78:98:38:ED:F2:67:8C:A4:E6:3F:D7:55:49
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031373a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9017::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:68:0c:72:ba:24:23:ed:ad:e2:84:e7:4f:2d:2a:31:fd:cc:
         9d:2b:36:56:5d:2a:a4:9c:4e:f9:41:0a:cc:ac:84:78:54:21:
         ba:2e:54:df:8d:1d:f0:e4:47:13:59:de:67:82:08:97:a0:71:
         1e:d1:4f:e9:b9:af:1d:11:8e:de:25:15:27:3c:3b:50:37:05:
         83:02:5a:cd:03:22:cc:68:a5:46:24:bc:c8:3f:36:81:0c:be:
         46:d4:be:c6:88:a0:c8:ba:53:ea:58:8a:06:cf:d5:03:05:5d:
         1e:1e:19:77:56:2d:7e:8a:52:40:f3:12:f5:d1:51:8e:fd:04:
         17:f8:17:70:a4:32:a4:06:fb:be:95:90:5d:1b:ef:2c:40:9b:
         6d:91:15:07:67:1c:3a:95:76:9a:6e:58:b8:f8:6f:77:31:fb:
         c5:b7:e7:0b:5f:47:99:50:18:13:13:28:ba:5d:65:1f:5e:06:
         c3:ab:c2:29:de:bd:3d:4d:04:15:b8:b9:45:5f:5a:f0:5c:ef:
         92:22:28:f2:69:21:1c:6d:4d:81:5c:10:4a:5d:46:f3:4a:01:
         b5:fb:6c:4e:49:bf:22:00:43:bf:57:11:ae:d3:92:ff:c7:02:
         23:de:cf:4e:2f:8b:ae:dc:2f:b4:7a:a7:4d:90:3c:a1:f7:01:
         bb:c5:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:07 2026 by rpki-client