Route Origin Authorization

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa
File:                     323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (raw, json)
Hash identifier:          TWBVV2sKr5vAgVL7H9CHKRLzXENcDmDChBjFID4ClWA=
Subject key identifier:   62:C4:C6:31:24:83:2C:20:DD:E2:FD:A4:4F:76:02:42:EF:09:F1:B8
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       7384146FB8E554A12035BC4CE18B0D31DA179571
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa
Signing time:             Thu 27 Aug 2026 07:56:17 +0000
ROA not before:           Thu 27 Aug 2026 07:51:17 +0000
ROA not after:            Thu 26 Aug 2027 07:56:17 +0000
asID:                     23959
IP address blocks:        2400:ddc0:a00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 08:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:84:14:6f:b8:e5:54:a1:20:35:bc:4c:e1:8b:0d:31:da:17:95:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: Aug 27 07:51:17 2026 GMT
            Not After : Aug 26 07:56:17 2027 GMT
        Subject: CN=62C4C63124832C20DDE2FDA44F760242EF09F1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:cf:a0:34:51:50:88:ab:d6:06:34:05:8f:
                    f7:00:75:63:93:b4:95:bb:37:8d:cb:60:67:af:d6:
                    6f:33:3e:84:ca:50:6c:41:38:30:c8:6e:49:91:95:
                    42:8b:44:51:64:11:a9:d7:d0:bc:6e:bc:f7:d5:ab:
                    40:e4:2e:08:01:54:58:ed:71:d3:54:2d:2b:a5:af:
                    1e:df:94:cd:66:f1:66:64:1d:1d:53:de:47:86:9e:
                    1c:cd:d4:02:88:c5:2b:4c:d0:72:62:8e:35:9d:ec:
                    7f:77:d1:5b:bb:4d:99:af:7d:f6:da:89:7a:4b:ee:
                    bf:a0:a1:df:89:03:35:6a:6d:af:57:ec:b6:25:0e:
                    37:dd:c8:e8:d2:8b:23:aa:a0:31:81:d1:c7:f1:81:
                    f0:38:25:17:7e:7e:92:d4:c4:b6:49:3f:48:0e:88:
                    af:e3:80:25:47:1e:f4:11:6d:88:ca:77:b7:91:7b:
                    ea:d4:64:95:fb:18:ae:36:35:4f:39:ce:30:fd:b6:
                    6e:4d:2f:7c:5f:8f:83:9a:c7:56:5b:d2:ae:3f:91:
                    2a:dd:0a:64:d9:37:09:d1:d5:df:85:c6:40:de:4f:
                    00:8b:30:bd:84:2c:f6:48:9f:e1:5c:3d:27:d6:9d:
                    41:33:b2:6a:0b:7d:ea:bd:c8:b2:98:98:7f:50:8b:
                    da:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:C6:31:24:83:2C:20:DD:E2:FD:A4:4F:76:02:42:EF:09:F1:B8
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:ddc0:a00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:02:67:27:b4:5d:88:32:3d:af:91:e6:c6:7a:60:9f:91:af:
         13:98:6b:00:9b:fc:55:22:e5:e2:53:8f:4c:88:43:05:e7:df:
         15:2a:67:6a:d4:c4:b6:8c:f9:0b:79:61:cf:3a:e6:54:33:88:
         e7:b9:45:d5:55:59:21:15:0f:bf:25:4e:85:91:1a:2c:5f:f8:
         97:de:e0:2b:97:35:07:1b:16:34:39:8e:6f:64:71:f6:ae:b5:
         ae:c6:a0:10:c2:08:bc:07:bb:10:76:42:61:94:88:15:eb:f2:
         c6:7b:b0:cb:44:e5:28:16:c3:fc:99:a5:d2:89:c5:ca:f6:92:
         b1:e9:e9:8d:1e:5b:c2:b4:a2:f2:bb:7f:34:f6:a8:a9:90:4c:
         b3:3e:55:d3:23:f0:67:f1:bf:cb:99:db:fa:79:08:3a:4f:f1:
         4e:70:fe:ce:5e:3d:5a:cc:7c:ac:d7:03:62:90:74:aa:f8:cf:
         20:88:2c:34:22:a4:c3:38:b2:4d:64:2b:11:6f:81:8d:a5:ec:
         3b:17:f3:10:02:05:6e:4b:ea:e0:a5:0c:c6:06:56:fc:72:85:
         9c:b3:1d:54:a3:66:97:40:18:5a:9c:7e:cf:4f:ce:1e:11:ad:
         c1:fe:fa:de:d8:1a:c0:ef:8c:65:ea:c6:91:7b:57:46:ee:a4:
         58:f7:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:13 2026 by rpki-client