Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/323430363a343934303a3a2f33322d3332203d3e20313430343639.roa
File:                     323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (raw, json)
Hash identifier:          CdvnxidTj9NKp9GFbkdgBl3gm2CzWnwrbCqP/b1TIA4=
Subject key identifier:   DE:4B:3C:AD:ED:30:6A:46:6C:25:2C:D3:7A:D7:F9:2F:CB:B8:7D:2A
Certificate issuer:       /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF
Certificate serial:       1C7BAFFB887DEFEFDD7A5EA3674A7357AF4D81BF
Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/323430363a343934303a3a2f33322d3332203d3e20313430343639.roa
Signing time:             Sun 03 May 2026 03:19:13 +0000
ROA not before:           Sun 03 May 2026 03:14:13 +0000
ROA not after:            Sun 02 May 2027 03:19:13 +0000
asID:                     140469
IP address blocks:        2406:4940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl
                          rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7b:af:fb:88:7d:ef:ef:dd:7a:5e:a3:67:4a:73:57:af:4d:81:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF
        Validity
            Not Before: May  3 03:14:13 2026 GMT
            Not After : May  2 03:19:13 2027 GMT
        Subject: CN=DE4B3CADED306A466C252CD37AD7F92FCBB87D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cc:25:eb:0e:42:22:1b:63:66:3d:2c:76:27:
                    5c:26:d3:a0:e5:7a:89:21:3b:9a:41:ce:25:d9:80:
                    d7:29:4c:5b:45:d3:a2:55:65:fa:d9:2b:97:79:23:
                    c0:d7:07:74:3c:c9:56:64:28:3f:64:58:ab:58:29:
                    fb:8d:56:cc:96:af:a6:44:a0:e2:aa:de:9e:1c:3d:
                    79:1a:d7:c3:f9:eb:ab:05:a3:fe:b5:59:93:5d:33:
                    44:1d:48:ba:3b:8c:64:7f:fb:f1:02:03:6f:ef:b6:
                    f6:5e:c0:0f:f4:c6:88:87:27:ed:21:2e:f5:9b:e3:
                    16:3c:28:cf:f6:30:e5:39:0a:cd:04:6e:a1:b9:26:
                    1b:ec:71:42:4c:8b:6f:93:b7:2b:34:15:33:af:03:
                    49:18:51:5b:8d:36:8a:e7:71:eb:f3:44:f1:78:28:
                    86:e3:27:c0:4c:fa:72:41:fb:26:e7:10:ec:89:b0:
                    e7:fb:e9:80:f0:63:49:44:11:15:54:70:2a:22:1d:
                    b8:94:96:b9:f8:7f:ae:6c:86:00:2c:f5:79:67:ed:
                    9f:e5:07:ae:f9:90:33:65:49:fc:54:d5:cb:0e:c2:
                    43:b1:ae:6f:1c:4a:a4:21:61:53:83:8c:a4:53:4f:
                    b0:ef:db:91:0e:65:5f:a5:46:a4:26:66:55:ef:5c:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4B:3C:AD:ED:30:6A:46:6C:25:2C:D3:7A:D7:F9:2F:CB:B8:7D:2A
            X509v3 Authority Key Identifier:
                keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/323430363a343934303a3a2f33322d3332203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4940::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:16:8f:d0:f6:81:61:d3:54:3a:d6:be:c8:cf:13:a2:c3:9e:
         54:78:38:ae:d9:be:6b:48:f9:29:91:c6:2a:16:f6:b5:95:6c:
         68:f8:12:1f:61:04:d8:ba:38:08:a0:52:83:d8:f4:18:a7:5e:
         61:87:c2:2a:f0:d6:c5:fe:0d:c9:e6:63:c0:59:db:93:d1:f8:
         0a:b6:c5:32:ae:4b:95:bb:c6:b7:39:37:d1:9e:be:51:86:c0:
         90:ef:6f:ec:37:39:28:0d:ff:db:e7:91:81:a0:dd:9c:42:0d:
         91:bb:c0:c8:33:05:81:6b:37:2e:37:4a:7b:62:63:0b:be:85:
         a0:df:f5:92:7d:57:d7:27:e2:93:dd:be:94:a6:e2:55:2d:1d:
         7f:ae:64:31:5b:0a:10:09:6e:c5:d5:ae:7a:df:53:9a:8c:d9:
         07:93:db:ff:24:fe:d4:eb:8a:e7:76:30:a8:11:06:e7:7e:4a:
         59:41:40:d3:f4:d0:18:ea:c6:e7:d8:ef:af:52:fb:91:5c:20:
         ad:31:6c:92:cb:a0:ea:e1:58:a3:50:ad:6c:06:21:8f:00:f9:
         34:f7:37:a0:9f:ee:18:d5:10:90:1b:c4:5c:7a:9a:e2:28:37:
         35:9b:09:06:23:c1:86:23:fd:77:30:39:41:6e:51:d6:86:87:
         aa:8b:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:29 2026 by rpki-client