Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          M0s75uh160VeGpRVbqZ+artxE2fqRIUsznuaEu8nIYE=
Subject key identifier:   98:55:76:7F:7E:89:28:29:46:FA:24:F9:C6:5C:68:B5:FA:CA:D4:AF
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       54707A21357D02B0EEA498926CD19F7B633228B5
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:14:07 +0000
ROA not before:           Sun 03 May 2026 03:09:07 +0000
ROA not after:            Sun 02 May 2027 03:14:07 +0000
asID:                     38526
IP address blocks:        2405:3740:901b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:70:7a:21:35:7d:02:b0:ee:a4:98:92:6c:d1:9f:7b:63:32:28:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:09:07 2026 GMT
            Not After : May  2 03:14:07 2027 GMT
        Subject: CN=9855767F7E89282946FA24F9C65C68B5FACAD4AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:39:a3:c7:f1:58:ab:a3:dd:08:d4:f1:fd:
                    f7:34:79:97:62:c4:e4:17:b0:55:c4:5c:84:bc:92:
                    cd:f7:bd:9f:a4:bf:ac:c9:33:5d:c5:04:ae:22:e3:
                    6b:8f:9c:63:9a:7f:4a:3a:49:46:95:fe:29:8f:cb:
                    b0:24:16:e1:58:0d:aa:45:06:9c:40:c1:a5:c4:76:
                    a2:79:af:2a:0e:fa:69:8d:60:7d:c1:20:b9:40:83:
                    eb:5f:25:37:47:d2:b2:6d:f3:30:65:65:12:7d:81:
                    75:f3:f4:e7:ac:86:78:c6:52:d5:95:2e:3c:7e:37:
                    9b:66:b7:19:99:3a:ca:8c:23:bc:39:59:81:a9:e9:
                    c8:db:17:bc:a8:ed:9c:14:44:80:d9:cb:87:3e:d8:
                    cb:54:d3:47:f3:bd:b8:39:c8:c3:5f:29:d5:e2:26:
                    2e:33:25:40:66:4f:8a:24:f8:fc:df:c1:a2:3f:fa:
                    28:8d:25:97:ef:a4:21:8d:57:91:17:00:3a:b7:af:
                    a5:74:30:54:cf:cb:37:22:a2:99:31:d7:7f:78:de:
                    78:2e:80:da:a2:d1:12:e9:c5:85:58:08:5e:51:c1:
                    7c:7f:dd:de:2f:6c:d8:ff:c2:81:2c:fe:16:da:56:
                    5f:11:a6:68:88:84:bd:ed:34:f6:20:01:fb:e4:fd:
                    9c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:55:76:7F:7E:89:28:29:46:FA:24:F9:C6:5C:68:B5:FA:CA:D4:AF
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:901b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:0e:aa:2d:70:ec:22:0a:fb:58:9b:54:b7:62:3a:9e:61:
         eb:94:5b:5d:d7:b0:af:87:ae:a4:5c:fd:f6:79:2b:bc:61:cd:
         66:1c:09:33:e6:2e:42:e2:57:30:5c:ef:4d:8d:7d:1d:21:46:
         98:5d:33:bb:72:1b:26:bd:82:2b:a0:b6:4e:3b:07:4d:2b:b2:
         16:2e:75:6a:ff:89:6f:81:be:1a:24:5c:4b:d1:db:2c:79:87:
         48:86:c2:40:67:0d:97:a8:6c:9b:67:a5:af:9c:09:55:49:87:
         34:2d:16:01:61:aa:08:79:11:ac:fc:c2:c7:d8:dc:a3:84:8f:
         da:03:f5:a2:d4:d3:cc:cc:a0:a4:e1:13:dc:b3:f4:5d:a5:bf:
         68:6f:61:59:75:30:dd:b6:b2:0c:25:ad:fa:32:45:6a:9b:b6:
         ba:b2:92:25:c5:4d:3f:bd:dc:18:31:9e:3f:c7:77:3d:56:4b:
         fd:dd:64:9f:4d:f4:1a:5f:49:33:d9:8a:4c:1e:60:c3:ad:7b:
         d9:1c:07:da:33:78:38:fd:1b:09:91:32:2c:52:51:2f:4a:43:
         4a:ee:ce:b3:26:62:4f:f6:d5:9a:e9:08:46:17:11:e3:8e:21:
         07:be:14:b4:56:7a:02:9c:a0:0c:4b:3f:3c:3f:98:92:a7:5e:
         13:6c:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:22 2026 by rpki-client