Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323430353a383138303a3a2f33322d3438203d3e20313335343738.roa
File:                     323430353a383138303a3a2f33322d3438203d3e20313335343738.roa (raw, json)
Hash identifier:          H13662R2JsQ6xsWPNm8piREclR+MKAOjI1IQH6H0ptk=
Subject key identifier:   33:4F:8B:CF:B4:AA:D5:AF:BB:02:C0:6E:71:54:04:7B:DC:32:E0:9C
Certificate issuer:       /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial:       6D61D4EAD292C39CA5E156E3F02F380982942C4B
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323430353a383138303a3a2f33322d3438203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 03:15:06 +0000
ROA not before:           Sun 03 May 2026 03:10:06 +0000
ROA not after:            Sun 02 May 2027 03:15:06 +0000
asID:                     135478
IP address blocks:        2405:8180::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
                          rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:61:d4:ea:d2:92:c3:9c:a5:e1:56:e3:f0:2f:38:09:82:94:2c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
        Validity
            Not Before: May  3 03:10:06 2026 GMT
            Not After : May  2 03:15:06 2027 GMT
        Subject: CN=334F8BCFB4AAD5AFBB02C06E7154047BDC32E09C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:4c:a1:45:e4:9c:51:77:fb:f8:48:fb:df:
                    1e:82:3f:52:ad:f6:44:d3:db:69:35:8a:a7:29:af:
                    62:66:b7:75:6f:e8:f5:19:96:55:68:6c:74:95:f3:
                    27:f8:7c:5f:e5:aa:ab:39:49:c0:93:ac:7b:16:3d:
                    1e:9a:78:5b:a1:02:55:04:2b:1d:e2:a2:11:fc:2c:
                    dc:1b:2f:1d:ec:79:81:77:95:d1:d9:05:e7:01:26:
                    90:ee:6a:58:66:31:d7:ad:b2:f7:e7:be:1c:df:68:
                    11:24:43:60:18:b5:1a:d3:8e:e0:b6:26:8f:c0:75:
                    13:91:7d:22:c6:1d:a7:76:61:a4:ca:67:53:be:86:
                    cc:8f:63:52:8d:14:69:8e:c3:b1:d3:00:0d:90:22:
                    bb:7b:2a:b2:3f:4b:24:8e:f7:da:a8:d5:07:a2:86:
                    74:f8:9f:e4:e6:7c:73:b0:ea:6a:51:19:d1:92:3e:
                    43:49:92:ac:19:1a:50:90:57:f7:ab:c5:a7:33:82:
                    23:9e:39:33:cb:63:03:3e:1c:f1:bc:bd:43:5d:cf:
                    81:97:b7:12:43:6b:7e:31:3d:43:0a:63:e5:f2:43:
                    73:be:c2:48:3e:f4:d3:f3:d4:ea:87:3c:0c:f1:78:
                    79:0a:f5:83:12:a0:43:ce:87:9f:92:f3:aa:25:c5:
                    c7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4F:8B:CF:B4:AA:D5:AF:BB:02:C0:6E:71:54:04:7B:DC:32:E0:9C
            X509v3 Authority Key Identifier:
                keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323430353a383138303a3a2f33322d3438203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8180::/32

    Signature Algorithm: sha256WithRSAEncryption
         e4:15:e8:e9:6a:a6:2d:a8:10:1d:69:54:43:37:2c:1b:70:4c:
         c5:e2:06:c7:2d:c3:9d:54:7c:10:f0:3c:c1:dc:07:f1:b7:a4:
         56:0f:4b:80:8d:cf:3f:dd:96:3b:e3:ea:a6:b7:24:8b:02:d9:
         f0:bf:59:07:8c:c1:4e:0e:c4:33:37:14:ce:d7:38:2e:97:28:
         28:80:ea:63:4d:8a:00:19:c6:51:c7:6e:95:94:db:8f:a6:01:
         da:fb:91:1a:46:50:3d:b9:f3:26:57:a9:2a:80:02:dc:90:8a:
         35:3c:af:51:09:b2:a3:82:8b:d1:c9:1f:a2:e2:46:7d:01:a2:
         77:9c:9c:c1:8e:e6:dc:c2:60:98:0c:d5:8a:17:de:71:34:5b:
         4a:ee:0a:92:76:37:98:15:a0:c4:d4:ac:81:73:af:58:62:8d:
         e0:19:39:fa:7a:e9:17:06:03:50:7d:9d:41:e6:f6:86:f1:b6:
         17:d7:64:1e:52:ad:6b:1c:c2:c4:5d:ea:01:00:b3:95:8f:30:
         a3:7c:ec:4f:82:32:e0:24:75:c4:47:88:c7:8a:1c:7a:cf:cd:
         a0:54:ae:5b:66:6b:49:85:79:9a:f5:8a:15:38:30:cb:7a:22:
         94:b7:df:d9:25:ac:88:62:96:20:ea:c2:2e:78:81:06:9c:70:
         97:14:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:49 2026 by rpki-client