Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa
File:                     323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa (raw, json)
Hash identifier:          GGTpraPioXOfseSGJKXessD1JJQRRiypizczW1Hzdy0=
Subject key identifier:   0F:16:E8:C2:B0:CE:A0:FD:D1:9A:75:E0:16:0C:C8:C6:5A:B7:6C:C3
Certificate issuer:       /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial:       53537913FE305F6F2C9E910C44AF1A4E83658894
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa
Signing time:             Sun 03 May 2026 03:15:55 +0000
ROA not before:           Sun 03 May 2026 03:10:55 +0000
ROA not after:            Sun 02 May 2027 03:15:55 +0000
asID:                     23671
IP address blocks:        2403:b200:230::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
                          rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:53:79:13:fe:30:5f:6f:2c:9e:91:0c:44:af:1a:4e:83:65:88:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
        Validity
            Not Before: May  3 03:10:55 2026 GMT
            Not After : May  2 03:15:55 2027 GMT
        Subject: CN=0F16E8C2B0CEA0FDD19A75E0160CC8C65AB76CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:25:fd:5b:e4:11:10:51:7c:95:60:4f:ac:
                    c4:97:d4:49:c5:31:da:a4:ae:47:b0:48:cd:fb:03:
                    f7:52:f5:aa:c8:fa:18:a8:0b:af:80:2e:19:a1:53:
                    9a:75:11:a7:e3:15:59:db:e0:c5:5d:8d:9b:50:5b:
                    73:32:4c:b8:67:95:c1:0f:fd:e0:bf:32:bd:e1:f0:
                    93:84:e1:bd:34:8f:c2:ce:e3:1d:27:e5:de:f1:ed:
                    72:8c:cb:84:87:69:10:d8:cf:02:27:85:d8:8c:b6:
                    1f:43:38:1e:2b:4d:35:83:cd:a8:8c:79:9b:16:1e:
                    e8:67:e4:40:f8:c4:d6:2f:e7:4a:fa:8d:d2:8a:49:
                    07:15:2c:61:82:07:e4:54:90:2a:a1:1d:d1:e2:67:
                    3b:b7:a2:45:35:32:92:79:17:65:7e:73:86:c0:90:
                    54:64:8f:2b:7c:7a:35:5f:09:24:aa:de:c1:d7:fe:
                    54:2f:fd:4c:56:d0:75:9c:a5:e8:07:5d:8f:d3:e9:
                    23:71:f0:af:66:1d:2f:0b:dc:df:1c:8d:ad:5f:b3:
                    44:c6:1e:79:55:90:8d:86:04:0c:47:4a:72:19:d9:
                    67:52:f2:31:56:5a:33:11:1a:38:3a:49:2c:e0:dd:
                    82:63:89:43:c2:a9:09:3e:6e:fc:ac:05:b5:82:15:
                    cd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:16:E8:C2:B0:CE:A0:FD:D1:9A:75:E0:16:0C:C8:C6:5A:B7:6C:C3
            X509v3 Authority Key Identifier:
                keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b200:230::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:42:62:b8:23:bd:9e:1a:1e:33:40:fc:b2:12:c8:73:f6:81:
         37:3e:31:9a:9d:97:8c:e6:71:f9:ff:0f:d6:2f:dd:9a:c0:e0:
         e9:f2:df:c6:c9:f8:34:87:2b:22:06:59:0f:50:91:72:c3:bf:
         de:93:77:6e:bc:ad:25:c3:00:be:ab:6a:55:a2:a5:71:0e:b7:
         5b:d2:d3:66:da:30:61:1d:27:53:70:18:81:be:94:52:20:1e:
         d1:8d:40:80:6d:a2:5c:bd:a3:5c:28:d0:66:05:78:b6:43:c1:
         77:7a:43:74:8c:10:ac:e7:d7:f1:8e:bf:6d:7e:d4:f9:b7:43:
         92:7d:7c:00:fc:0f:fe:1e:fe:72:8b:ab:c2:c5:71:91:65:35:
         52:aa:13:0c:22:f5:12:71:25:2c:d9:e8:b8:b5:dc:10:e3:86:
         c5:f7:4f:02:8b:1c:ca:7d:2c:94:44:0a:37:2c:f0:a3:6e:33:
         90:a4:9d:fb:15:eb:08:40:4a:27:35:69:4e:bb:68:23:79:8f:
         92:9f:11:5e:11:65:89:6a:fc:7d:c4:04:f2:cc:bb:a8:6c:4c:
         1c:de:99:31:77:c1:fe:18:56:66:47:58:07:52:83:8b:80:2d:
         e2:3c:c2:70:77:58:98:e5:28:f8:3e:71:2d:01:b5:79:b8:ed:
         55:af:f6:c8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUU1N5E/4wX28snpEMRK8aToNliJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlCRkEzNDhBMDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYx
MjQ3RkM2NDAeFw0yNjA1MDMwMzEwNTVaFw0yNzA1MDIwMzE1NTVaMDMxMTAvBgNV
BAMTKDBGMTZFOEMyQjBDRUEwRkREMTlBNzVFMDE2MENDOEM2NUFCNzZDQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWyX9W+QREFF8lWBPrMSX1EnF
MdqkrkewSM37A/dS9arI+hioC6+ALhmhU5p1EafjFVnb4MVdjZtQW3MyTLhnlcEP
/eC/Mr3h8JOE4b00j8LO4x0n5d7x7XKMy4SHaRDYzwInhdiMth9DOB4rTTWDzaiM
eZsWHuhn5ED4xNYv50r6jdKKSQcVLGGCB+RUkCqhHdHiZzu3okU1MpJ5F2V+c4bA
kFRkjyt8ejVfCSSq3sHX/lQv/UxW0HWcpegHXY/T6SNx8K9mHS8L3N8cja1fs0TG
HnlVkI2GBAxHSnIZ2WdS8jFWWjMRGjg6SSzg3YJjiUPCqQk+bvysBbWCFc3TAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUDxbowrDOoP3RmnXgFgzIxlq3bMMwHwYDVR0j
BBgwFoAUqb+jSKBQ5GSC9OAMYF/5lhJH/GQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWQ5YmE5NTMtODQ4OS00NTBlLWJiZGYtNzY0NTcxZmJhY2U3LzAvQTlCRkEzNDhB
MDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYxMjQ3RkM2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOUJGQTM0OEEwNTBFNDY0ODJGNEUwMEM2MDVGRjk5NjEyNDdG
QzY0LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i
YmRmLTc2NDU3MWZiYWNlNy8wLzMyMzQzMDMzM2E2MjMyMzAzMDNhMzIzMzMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMzM2MzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQDsgAC
MDANBgkqhkiG9w0BAQsFAAOCAQEALEJiuCO9nhoeM0D8shLIc/aBNz4xmp2XjOZx
+f8P1i/dmsDg6fLfxsn4NIcrIgZZD1CRcsO/3pN3brytJcMAvqtqVaKlcQ63W9LT
ZtowYR0nU3AYgb6UUiAe0Y1AgG2iXL2jXCjQZgV4tkPBd3pDdIwQrOfX8Y6/bX7U
+bdDkn18APwP/h7+courwsVxkWU1UqoTDCL1EnElLNnouLXcEOOGxfdPAoscyn0s
lEQKNyzwo24zkKSd+xXrCEBKJzVpTrtoI3mPkp8RXhFliWr8fcQE8sy7qGxMHN6Z
MXfB/hhWZkdYB1KDi4At4jzCcHdYmOUo+D5xLQG1ebjtVa/2yA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:20:35 2026 by rpki-client