Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/323430333a396634303a3a2f33322d3438203d3e20313338303734.roa
File:                     323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (raw, json)
Hash identifier:          K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=
Subject key identifier:   56:6B:AD:9F:06:AE:0F:57:F9:57:FC:C8:9B:F6:83:C0:61:73:0B:51
Certificate issuer:       /CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Certificate serial:       261F48098336F9168F2FF557E8E5AE6F79F87359
Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/323430333a396634303a3a2f33322d3438203d3e20313338303734.roa
Signing time:             Sun 03 May 2026 02:17:26 +0000
ROA not before:           Sun 03 May 2026 02:12:26 +0000
ROA not after:            Sun 02 May 2027 02:17:26 +0000
asID:                     138074
IP address blocks:        2403:9f40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
                          rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1f:48:09:83:36:f9:16:8f:2f:f5:57:e8:e5:ae:6f:79:f8:73:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F
        Validity
            Not Before: May  3 02:12:26 2026 GMT
            Not After : May  2 02:17:26 2027 GMT
        Subject: CN=566BAD9F06AE0F57F957FCC89BF683C061730B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:f9:9e:d5:cb:0c:3c:ad:b5:0e:31:95:4b:
                    e7:37:a0:1a:7d:06:da:fb:ec:b4:a9:5c:c1:83:bc:
                    68:0d:b5:b1:42:21:17:f8:e9:1e:c6:29:c6:83:a1:
                    f6:cc:a8:57:93:6d:01:54:e5:34:01:34:6e:19:29:
                    9f:24:12:0c:72:61:25:95:e6:a8:04:c8:9b:68:19:
                    33:39:dd:76:06:98:b0:d8:71:ce:93:4b:4a:3b:74:
                    7f:9f:78:a8:03:ce:b6:ea:60:6c:a1:74:d1:df:f9:
                    41:6c:a3:0e:b8:df:7b:14:a1:09:71:3d:95:92:fb:
                    a1:86:2f:41:67:02:d7:0c:0d:0b:9e:47:5f:56:e4:
                    7e:1c:84:a9:0a:78:65:93:a1:0a:c9:22:57:a3:57:
                    9a:9b:69:e3:7f:ec:7a:8f:22:cd:24:46:78:05:9b:
                    a1:83:fb:90:90:b9:f8:69:b2:aa:34:ad:aa:03:80:
                    9b:28:9d:1f:c5:11:44:94:99:20:61:40:a1:c0:8d:
                    36:95:e1:34:63:69:8f:db:d2:05:b7:09:c2:76:08:
                    65:23:b9:ac:23:42:8b:f7:68:34:87:6f:68:cd:f8:
                    dd:fa:c3:9b:85:39:e6:d0:ef:8a:b4:db:dd:d6:0e:
                    0c:df:3c:92:1a:a4:25:ab:43:05:77:39:0e:73:a5:
                    a1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6B:AD:9F:06:AE:0F:57:F9:57:FC:C8:9B:F6:83:C0:61:73:0B:51
            X509v3 Authority Key Identifier:
                keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/323430333a396634303a3a2f33322d3438203d3e20313338303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:9f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:67:7e:7f:97:a2:fa:b1:9b:38:14:f2:c7:37:83:ee:de:3b:
         1a:4a:92:93:dc:ff:af:60:7e:0a:e9:41:2c:99:e3:19:1f:d8:
         07:23:6b:87:15:ad:61:fc:98:c2:a0:52:e4:63:c7:98:cc:a0:
         78:72:54:4f:c4:03:3f:de:6e:e8:2f:4a:13:9b:5b:86:bc:d3:
         e7:31:6d:94:90:98:a9:a3:ee:87:68:cf:8e:e3:63:42:e0:11:
         90:94:55:ec:2e:ab:3d:64:c3:1b:5b:97:f0:6b:88:b6:42:04:
         dc:c6:7f:5d:ed:2f:35:ba:c9:b2:3f:d8:2e:c2:6e:ae:33:6c:
         e3:e4:52:9c:65:f4:37:ae:fd:b2:ca:a0:f2:f4:67:6c:c1:90:
         3b:9a:9b:a6:a4:b6:a7:55:a4:77:dc:ee:7c:77:a6:77:2f:bc:
         05:77:1a:d4:fa:61:4c:ea:d9:6d:40:39:af:e2:26:cc:c4:44:
         d2:de:12:b7:4a:b2:8f:68:55:ec:46:52:00:1f:5a:16:41:f5:
         25:8f:13:39:56:51:74:be:50:3c:47:0f:69:23:90:89:0b:29:
         c0:8e:6d:2c:71:ed:5a:69:9b:e0:34:3c:3f:90:56:4b:e9:ea:
         d8:1f:e8:67:29:14:9d:7e:4f:85:40:66:55:af:c4:e7:8e:c5:
         4e:13:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:30:33 2026 by rpki-client