Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          yr3aoYjqpviNY4N3RsZzOlFedxpxmgzaexJXLqoO6Io=
Subject key identifier:   53:03:55:47:1F:40:C7:DA:84:46:71:1B:9D:00:61:F9:41:80:FE:E3
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       34F3D65FC482B5B72015CCA13A2AEF497F6C1C1D
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:14:10 +0000
ROA not before:           Sun 03 May 2026 03:09:10 +0000
ROA not after:            Sun 02 May 2027 03:14:10 +0000
asID:                     38526
IP address blocks:        2405:3740:901f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f3:d6:5f:c4:82:b5:b7:20:15:cc:a1:3a:2a:ef:49:7f:6c:1c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:09:10 2026 GMT
            Not After : May  2 03:14:10 2027 GMT
        Subject: CN=530355471F40C7DA8446711B9D0061F94180FEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:df:f7:a8:88:6b:43:64:64:6e:2d:bd:0e:af:
                    d8:29:1b:53:4d:f4:1e:3e:e5:40:36:95:f9:2a:7a:
                    6c:6f:4c:20:09:86:3c:f0:ea:61:18:d6:24:8f:6c:
                    50:87:30:fb:54:72:1f:69:be:30:b8:9e:15:ca:dc:
                    bb:3c:3b:d7:06:c6:5f:d7:c4:f8:f5:07:0e:22:b1:
                    7b:ce:2c:f0:65:2c:a9:7f:22:1a:44:f1:c0:c6:b5:
                    2d:40:8f:49:3e:9b:e5:37:27:17:7f:4a:9e:e8:35:
                    bf:d1:3c:06:e3:a9:ce:e7:ff:12:77:42:b6:d5:04:
                    9c:aa:3b:90:8b:10:0b:a1:d7:78:26:9d:ed:33:7a:
                    e6:90:b1:31:64:58:cb:5f:a6:5a:c3:61:22:4b:18:
                    12:98:e2:12:87:c6:20:04:ad:4f:75:33:36:70:96:
                    29:7e:cb:bc:1e:ab:21:11:01:5a:00:3c:cb:75:ee:
                    d4:5d:86:1a:17:9a:36:bc:2c:00:f2:19:77:3a:df:
                    e9:e1:6f:2c:04:16:8d:32:67:af:f5:fc:74:27:e5:
                    ba:6c:4c:18:19:81:2f:d9:db:49:91:4d:34:91:e7:
                    af:a6:e3:79:af:23:58:9f:48:25:a2:4c:c0:b5:32:
                    81:b6:71:4f:e1:f4:e8:dc:05:91:1b:43:51:80:d0:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:03:55:47:1F:40:C7:DA:84:46:71:1B:9D:00:61:F9:41:80:FE:E3
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:901f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:5e:8c:04:b8:63:b7:ff:89:a8:a5:24:91:a7:90:db:03:
         84:87:f4:91:11:d9:07:5a:d9:48:65:cd:17:43:d7:9c:9d:0d:
         98:4b:9b:f6:dc:fd:27:dd:80:d1:87:4a:81:0a:ee:d8:de:44:
         20:7b:71:74:fd:df:96:76:45:1f:4e:5b:d8:e4:81:70:86:e8:
         41:d1:e3:60:c3:11:4b:e7:6e:18:e7:84:99:4c:f8:1b:94:e8:
         e7:b3:b4:3c:ac:2d:fd:37:98:3b:cb:38:8a:67:a4:77:b9:9c:
         37:cd:95:c0:45:f0:e7:8f:b0:16:f1:88:ff:c7:2b:bb:b7:51:
         85:90:fd:05:f3:f8:ca:60:7a:89:23:1e:c4:4c:b7:ab:b7:17:
         3f:d1:40:8c:7a:7d:a9:b8:6b:f7:11:21:08:c9:bd:02:de:95:
         e5:27:39:f5:25:de:3c:68:3c:64:17:6a:5d:10:ab:0c:12:5d:
         1b:63:13:36:64:c6:5e:52:63:24:68:bd:f4:15:f5:2d:2c:1c:
         a3:25:93:c5:9e:01:de:81:0f:48:73:65:6a:5f:c4:02:88:f2:
         92:f9:a5:39:11:94:26:8c:43:7c:9e:e6:f2:bf:25:3a:8c:e8:
         41:ae:fd:2b:f7:68:04:10:af:44:80:54:56:61:f2:aa:36:5a:
         67:91:40:4a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUNPPWX8SCtbcgFcyhOirvSX9sHB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3
RTNDRkZENzAeFw0yNjA1MDMwMzA5MTBaFw0yNzA1MDIwMzE0MTBaMDMxMTAvBgNV
BAMTKDUzMDM1NTQ3MUY0MEM3REE4NDQ2NzExQjlEMDA2MUY5NDE4MEZFRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ3/eoiGtDZGRuLb0Or9gpG1NN
9B4+5UA2lfkqemxvTCAJhjzw6mEY1iSPbFCHMPtUch9pvjC4nhXK3Ls8O9cGxl/X
xPj1Bw4isXvOLPBlLKl/IhpE8cDGtS1Aj0k+m+U3Jxd/Sp7oNb/RPAbjqc7n/xJ3
QrbVBJyqO5CLEAuh13gmne0zeuaQsTFkWMtfplrDYSJLGBKY4hKHxiAErU91MzZw
lil+y7weqyERAVoAPMt17tRdhhoXmja8LADyGXc63+nhbywEFo0yZ6/1/HQn5bps
TBgZgS/Z20mRTTSR56+m43mvI1ifSCWiTMC1MoG2cU/h9OjcBZEbQ1GA0NL/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUUwNVRx9Ax9qERnEbnQBh+UGA/uMwHwYDVR0j
BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0
REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG
RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxNjYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QJAfMA0GCSqGSIb3DQEBCwUAA4IBAQBPhV6MBLhjt/+JqKUkkaeQ2wOEh/SREdkH
WtlIZc0XQ9ecnQ2YS5v23P0n3YDRh0qBCu7Y3kQge3F0/d+WdkUfTlvY5IFwhuhB
0eNgwxFL524Y54SZTPgblOjns7Q8rC39N5g7yziKZ6R3uZw3zZXARfDnj7AW8Yj/
xyu7t1GFkP0F8/jKYHqJIx7ETLertxc/0UCMen2puGv3ESEIyb0C3pXlJzn1Jd48
aDxkF2pdEKsMEl0bYxM2ZMZeUmMkaL30FfUtLByjJZPFngHegQ9Ic2VqX8QCiPKS
+aU5EZQmjEN8nubyvyU6jOhBrv0r92gEEK9EgFRWYfKqNlpnkUBK
-----END CERTIFICATE-----
Generated at Wed May 13 03:47:46 2026 by rpki-client