Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/323430323a323638303a3a2f33322d3438203d3e203633383733.roa
File:                     323430323a323638303a3a2f33322d3438203d3e203633383733.roa (raw, json)
Hash identifier:          qVD+Jwv4pLsFsaxaJgqqF4GhPj5gMv8oiQOKOq7eBlk=
Subject key identifier:   CC:AD:1F:74:5E:B3:D7:63:DE:4F:EC:F5:14:83:02:73:9E:45:25:58
Certificate issuer:       /CN=6372758CCA381920292B5E0D338ECF89D0000FEE
Certificate serial:       32DA53E6876DB15844C5AC6DAFCAD03254559A20
Authority key identifier: 63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/323430323a323638303a3a2f33322d3438203d3e203633383733.roa
Signing time:             Sun 03 May 2026 03:15:38 +0000
ROA not before:           Sun 03 May 2026 03:10:38 +0000
ROA not after:            Sun 02 May 2027 03:15:38 +0000
asID:                     63873
IP address blocks:        2402:2680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl
                          rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:da:53:e6:87:6d:b1:58:44:c5:ac:6d:af:ca:d0:32:54:55:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6372758CCA381920292B5E0D338ECF89D0000FEE
        Validity
            Not Before: May  3 03:10:38 2026 GMT
            Not After : May  2 03:15:38 2027 GMT
        Subject: CN=CCAD1F745EB3D763DE4FECF5148302739E452558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:28:ed:96:bd:c8:4b:48:03:55:92:a5:aa:
                    e7:a6:4c:a0:27:61:ac:d8:a4:73:a7:c4:c0:a4:bc:
                    e6:6a:cf:a1:f1:f9:70:e0:4f:6c:7c:bd:17:5a:6a:
                    64:f7:0e:24:31:99:c4:ce:fb:99:b0:79:62:2d:3a:
                    3c:1c:fa:3c:ed:24:74:b6:b3:82:2f:85:c6:f8:be:
                    83:5a:e3:d9:bf:83:93:1d:0d:fc:e2:a1:34:0f:f5:
                    42:cf:df:fc:a2:6c:ff:10:91:c5:4e:f3:fd:fd:61:
                    5d:93:9c:95:b6:5a:2b:5c:cc:c2:eb:34:d7:27:a3:
                    01:12:c9:24:ad:73:f5:f5:03:a9:76:37:48:64:16:
                    b9:16:10:26:ba:93:7b:98:a5:29:c2:a9:8d:42:16:
                    7c:27:1f:8d:a1:61:4b:0d:eb:ed:9a:6d:67:8e:a3:
                    ff:02:3a:9b:d1:f8:74:2a:70:17:d4:b4:8c:1c:0f:
                    e7:fb:2d:00:4d:19:3d:96:ca:97:3c:21:c6:68:aa:
                    28:ef:d0:56:ae:14:d4:13:eb:2b:d0:e5:c9:fd:f4:
                    9b:24:fd:76:43:4e:d7:d0:cd:62:17:0b:28:c9:fd:
                    3a:d4:88:ab:e2:40:78:9e:b5:fe:68:7c:38:fe:01:
                    74:2d:31:8e:00:c6:90:3b:6e:e5:a3:8d:68:96:bc:
                    1e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AD:1F:74:5E:B3:D7:63:DE:4F:EC:F5:14:83:02:73:9E:45:25:58
            X509v3 Authority Key Identifier:
                keyid:63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/323430323a323638303a3a2f33322d3438203d3e203633383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2680::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:89:f6:fb:09:96:93:df:e5:43:77:9c:ae:78:d7:58:15:
         64:49:f2:e0:ae:a9:ed:c5:1d:ef:7f:99:ea:42:da:90:f3:f0:
         32:5e:da:83:fb:af:81:19:a7:20:80:f0:da:47:b1:4a:c5:cf:
         1d:fd:01:c4:fe:a0:b5:0b:96:ff:3f:85:fc:39:88:ed:d7:f9:
         45:33:a7:19:d4:d9:b9:36:46:ed:3c:f6:2f:d5:10:04:a0:c2:
         ca:83:a8:f1:11:fe:a2:3e:90:4c:ea:46:d1:eb:46:97:b1:2b:
         6f:4c:c3:d0:73:e2:4d:59:14:db:51:0a:f2:b7:69:16:4e:71:
         cc:bd:ff:a0:99:42:fc:ef:70:9a:08:20:e5:c3:3e:ed:18:ff:
         cf:86:94:a5:26:08:0b:aa:fe:f4:8e:26:c4:8e:23:0d:18:bf:
         75:95:db:62:59:87:a8:ce:24:97:11:e1:db:ec:cf:2f:0f:46:
         6c:0c:bf:a0:10:b1:b6:6d:fb:48:eb:aa:81:6b:b9:b8:cc:b1:
         94:05:70:01:bd:fb:25:90:c5:49:71:5c:da:8c:67:6f:f3:d2:
         8a:5a:93:d6:5c:02:3b:c9:54:6f:8f:ad:f8:dd:05:e9:c2:41:
         9b:f7:b4:0e:ef:8b:0c:2c:2f:ee:b9:e8:d6:05:4f:3f:c7:fa:
         49:50:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:39 2026 by rpki-client