Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3438203d3e203338353236.roa
File:                     323430353a333734303a3a2f33322d3438203d3e203338353236.roa (raw, json)
Hash identifier:          VSzfN1c75MCp5L9+DpZCaaLVduJNZdf88SR3xUtOjtg=
Subject key identifier:   61:1D:52:37:64:61:4F:9B:BC:01:F0:CB:2F:F6:93:ED:A3:8E:2E:ED
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       09E03D5B75F2FFE981F05790DE5829E679E03525
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3438203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:14:12 +0000
ROA not before:           Sun 03 May 2026 03:09:12 +0000
ROA not after:            Sun 02 May 2027 03:14:12 +0000
asID:                     38526
IP address blocks:        2405:3740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e0:3d:5b:75:f2:ff:e9:81:f0:57:90:de:58:29:e6:79:e0:35:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:09:12 2026 GMT
            Not After : May  2 03:14:12 2027 GMT
        Subject: CN=611D523764614F9BBC01F0CB2FF693EDA38E2EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:ca:eb:87:c6:ae:4c:57:1f:c9:33:95:57:
                    45:f1:c5:e8:87:39:7d:82:9b:a1:fa:64:d7:e4:28:
                    e5:1a:28:7e:3c:83:89:9f:65:44:7b:62:f5:16:99:
                    9c:31:12:c8:f2:7d:7f:a4:e1:03:b9:ca:40:54:df:
                    71:56:f1:81:2d:ac:3c:37:d8:ac:09:5f:b1:54:ad:
                    aa:e9:12:d2:d4:64:c8:91:4f:1c:e3:22:f5:6e:9b:
                    e9:2d:5a:fa:b8:90:1e:88:01:df:f1:50:dc:e5:c3:
                    df:3a:72:99:95:6f:4e:9a:1e:1c:6e:2b:d6:c0:de:
                    21:17:ad:a7:83:98:1b:29:de:18:37:ce:d0:ec:a8:
                    3f:e3:9f:f1:c8:6b:f9:1a:96:fc:b3:89:ae:0b:04:
                    93:47:45:c4:d3:03:0f:41:e4:ed:7a:14:ea:5f:bb:
                    8c:c0:0a:6b:4c:28:e8:20:c8:ca:c1:88:fb:66:32:
                    fe:b8:1c:44:2c:de:a4:eb:f3:4f:3f:02:81:19:c9:
                    c7:e6:24:c6:9f:af:56:71:87:9b:5a:67:18:1e:51:
                    62:a1:93:04:89:b8:c6:ae:ea:d0:70:be:3e:29:31:
                    c2:a8:d7:89:87:25:d5:be:20:a2:18:b7:3b:62:d8:
                    6a:19:e9:21:4b:b3:55:d3:12:6c:3a:e4:68:63:93:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1D:52:37:64:61:4F:9B:BC:01:F0:CB:2F:F6:93:ED:A3:8E:2E:ED
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:29:8c:24:03:e8:05:25:8a:f9:ec:77:b3:d3:25:18:a3:76:
         a6:04:dc:92:6c:1c:a8:eb:9f:b4:d6:a7:23:3b:af:0e:e6:07:
         fc:78:99:31:d0:8d:e0:92:ba:a7:b1:3a:8b:b9:c4:13:77:5a:
         15:56:8e:55:5d:67:e7:ea:87:2d:58:91:6d:aa:6e:ef:36:6c:
         b4:bc:d5:d3:b6:a5:8d:40:6b:77:ff:65:7a:e1:8f:4e:e9:71:
         e2:0f:22:61:d5:32:2f:11:d9:86:f3:ab:21:db:9a:90:3f:c5:
         cc:5b:32:15:f7:9b:83:d3:dd:e0:a3:e9:20:01:df:0a:57:0a:
         8b:31:1b:bb:79:45:89:c4:59:7b:9b:67:e9:58:6c:77:08:13:
         90:07:b6:bd:0e:6a:a4:55:5f:4f:b8:1d:ac:27:b9:a9:ee:44:
         02:c5:21:cd:0f:67:8c:b7:3d:19:88:b2:1d:90:58:9d:2d:c7:
         ae:db:2a:26:c9:81:53:c7:c9:9f:0c:f9:12:36:d0:02:32:66:
         fe:d7:76:eb:fb:a3:4a:65:b1:7e:11:09:a1:9d:d3:93:07:c8:
         4c:48:58:32:f9:d4:3b:e0:9d:4f:11:a5:27:9c:4c:95:04:e7:
         75:74:62:d8:f3:26:58:f6:7a:87:d6:79:71:9e:01:f4:fc:f6:
         45:b4:05:51
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUCeA9W3Xy/+mB8FeQ3lgp5nngNSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3
RTNDRkZENzAeFw0yNjA1MDMwMzA5MTJaFw0yNzA1MDIwMzE0MTJaMDMxMTAvBgNV
BAMTKDYxMUQ1MjM3NjQ2MTRGOUJCQzAxRjBDQjJGRjY5M0VEQTM4RTJFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/srrh8auTFcfyTOVV0XxxeiH
OX2Cm6H6ZNfkKOUaKH48g4mfZUR7YvUWmZwxEsjyfX+k4QO5ykBU33FW8YEtrDw3
2KwJX7FUrarpEtLUZMiRTxzjIvVum+ktWvq4kB6IAd/xUNzlw986cpmVb06aHhxu
K9bA3iEXraeDmBsp3hg3ztDsqD/jn/HIa/kalvyzia4LBJNHRcTTAw9B5O16FOpf
u4zACmtMKOggyMrBiPtmMv64HEQs3qTr808/AoEZycfmJMafr1Zxh5taZxgeUWKh
kwSJuMau6tBwvj4pMcKo14mHJdW+IKIYtzti2GoZ6SFLs1XTEmw65Ghjk5QxAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUYR1SN2RhT5u8AfDLL/aT7aOOLu0wHwYDVR0j
BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0
REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG
RkQ3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMzMzgzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBTdAMA0GCSqGSIb3
DQEBCwUAA4IBAQBBKYwkA+gFJYr57Hez0yUYo3amBNySbByo65+01qcjO68O5gf8
eJkx0I3gkrqnsTqLucQTd1oVVo5VXWfn6octWJFtqm7vNmy0vNXTtqWNQGt3/2V6
4Y9O6XHiDyJh1TIvEdmG86sh25qQP8XMWzIV95uD093go+kgAd8KVwqLMRu7eUWJ
xFl7m2fpWGx3CBOQB7a9DmqkVV9PuB2sJ7mp7kQCxSHND2eMtz0ZiLIdkFidLceu
2yomyYFTx8mfDPkSNtACMmb+13br+6NKZbF+EQmhndOTB8hMSFgy+dQ74J1PEaUn
nEyVBOd1dGLY8yZY9nqH1nlxngH0/PZFtAVR
-----END CERTIFICATE-----
Generated at Wed May 13 06:56:03 2026 by rpki-client