Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/323430363a376263303a3a2f33322d3332203d3e20313431303737.roa
File:                     323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (raw, json)
Hash identifier:          CY1Z76P9Cm4XC+l2Gxs6pH2wrd99R/AKN3svNUGr+4E=
Subject key identifier:   8F:88:1B:0A:05:00:25:E5:C3:82:1B:CE:32:BB:E5:B2:3B:92:4C:67
Certificate issuer:       /CN=098D1D612D535CED249CDB01EC5565063EBACEEF
Certificate serial:       1D984032E7017A7709B2BA9A2A4DC1621003D0C2
Authority key identifier: 09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/323430363a376263303a3a2f33322d3332203d3e20313431303737.roa
Signing time:             Sun 03 May 2026 03:18:36 +0000
ROA not before:           Sun 03 May 2026 03:13:36 +0000
ROA not after:            Sun 02 May 2027 03:18:36 +0000
asID:                     141077
IP address blocks:        2406:7bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl
                          rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:98:40:32:e7:01:7a:77:09:b2:ba:9a:2a:4d:c1:62:10:03:d0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D1D612D535CED249CDB01EC5565063EBACEEF
        Validity
            Not Before: May  3 03:13:36 2026 GMT
            Not After : May  2 03:18:36 2027 GMT
        Subject: CN=8F881B0A050025E5C3821BCE32BBE5B23B924C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:a2:32:19:df:cd:54:91:bf:2c:73:92:5f:
                    47:05:3c:51:93:0a:f2:e4:96:18:f1:cd:d2:c0:f2:
                    d9:25:68:6e:73:23:31:d6:77:29:b2:c2:42:19:ff:
                    e8:77:9b:93:8f:b2:f7:97:5d:b3:b4:b8:36:fa:2d:
                    b5:bf:69:04:dd:8f:79:72:61:20:d7:eb:58:ea:12:
                    d6:a7:49:57:d7:0b:25:9a:90:42:a6:f3:8b:c5:d4:
                    1e:e7:b4:35:a7:11:05:5c:94:0e:ad:0a:71:3e:b1:
                    84:c7:98:fe:8f:f8:31:3f:60:74:a6:bb:d1:2e:0f:
                    69:e0:80:43:c5:89:db:55:24:37:a8:1b:83:46:13:
                    2d:20:5e:1b:eb:b9:eb:04:92:71:ed:c5:b1:05:8c:
                    68:bd:da:97:3c:27:54:d5:f7:9a:8b:e3:48:25:fb:
                    87:62:48:89:66:d4:69:7d:90:b9:59:ee:95:62:f0:
                    6a:c0:81:2c:7c:1d:75:31:cd:66:cb:6d:5c:aa:ed:
                    84:e0:62:7f:70:5d:b6:49:d3:28:3f:16:59:c0:81:
                    b1:ee:6d:6f:50:51:e8:2b:c2:6b:f8:24:ba:5e:df:
                    0a:07:2a:df:52:64:fc:4f:17:5a:ca:3f:76:2d:c6:
                    47:fe:a4:95:eb:94:ff:05:b1:56:d2:7f:99:d9:64:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:88:1B:0A:05:00:25:E5:C3:82:1B:CE:32:BB:E5:B2:3B:92:4C:67
            X509v3 Authority Key Identifier:
                keyid:09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/323430363a376263303a3a2f33322d3332203d3e20313431303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:63:e8:94:a1:a3:35:e9:7c:18:e8:03:15:3b:fc:44:88:ca:
         ce:e5:14:e7:92:28:e4:44:f2:79:d8:d8:d7:80:9e:80:3d:25:
         1c:a5:59:67:14:85:02:24:32:b7:3b:ff:41:0b:24:cf:85:9c:
         6a:12:5a:31:fc:10:8e:59:4b:33:04:0d:5e:2f:13:1e:1f:4e:
         d1:c0:dc:28:45:6a:2a:f1:67:9b:6d:48:ef:17:e1:08:c1:2a:
         63:e0:6d:e3:17:6a:63:23:94:6f:20:e3:56:76:08:04:19:d5:
         a3:9c:9f:26:c4:d7:a4:72:21:02:c0:7a:f4:61:a7:74:cc:3d:
         cc:3f:8d:39:f3:9d:ff:ba:32:e3:52:e6:36:68:70:67:a7:a8:
         8f:ac:76:85:6f:ea:ff:ae:6d:65:64:70:66:3d:9a:a0:9b:6c:
         a6:a2:75:01:51:14:36:30:d1:e4:f6:9f:ab:9d:69:ae:4d:df:
         1a:e3:bf:96:fa:9a:21:8e:59:a9:9d:84:4f:68:84:37:06:e4:
         cd:52:b6:02:13:c0:03:47:a3:0f:dc:fd:da:4a:82:2d:91:f3:
         bf:78:88:dc:18:43:57:eb:22:69:57:02:71:09:81:dc:75:6b:
         70:5c:11:6c:81:a6:8d:bb:15:a4:87:d7:cd:fe:9b:a1:15:44:
         59:5f:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:12 2026 by rpki-client