Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33352d3335203d3e20313331373439.roa
File:                     323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (raw, json)
Hash identifier:          ZWNoTl3f/QBfpXE45HAww//4eS88vFgydiSHbe0zdhA=
Subject key identifier:   27:45:40:55:81:F3:04:AA:BD:13:E2:FA:BC:DE:D7:93:F0:83:E1:8A
Certificate issuer:       /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial:       3C1E76BEFBC0868217C88E7D5A4F9F0A3CEB9874
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33352d3335203d3e20313331373439.roa
Signing time:             Sun 03 May 2026 02:23:39 +0000
ROA not before:           Sun 03 May 2026 02:18:39 +0000
ROA not after:            Sun 02 May 2027 02:23:39 +0000
asID:                     131749
IP address blocks:        2402:be80::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
                          rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 13:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1e:76:be:fb:c0:86:82:17:c8:8e:7d:5a:4f:9f:0a:3c:eb:98:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
        Validity
            Not Before: May  3 02:18:39 2026 GMT
            Not After : May  2 02:23:39 2027 GMT
        Subject: CN=2745405581F304AABD13E2FABCDED793F083E18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dc:ce:ca:c1:37:a8:ce:cd:0d:27:3b:da:5d:
                    8c:95:48:f2:ab:b0:07:10:1e:4c:d2:d4:30:a5:70:
                    2a:8e:6d:72:1a:31:b3:61:9c:37:22:24:5b:f1:a2:
                    55:80:20:72:10:5e:f4:cb:fa:30:fe:f0:58:7e:75:
                    cf:16:17:5a:e5:73:0e:f4:82:19:d3:67:27:26:61:
                    43:e5:8d:d0:08:b1:bb:c0:4b:ff:26:cd:6f:27:b2:
                    d5:46:13:db:82:62:b0:23:14:01:01:9f:14:77:70:
                    cc:23:47:fe:ab:d4:9c:cc:a4:9e:90:b6:64:f9:0b:
                    5e:00:e8:21:c6:1f:1c:2d:95:6f:93:40:56:59:0b:
                    c3:1f:fd:c7:de:c3:78:56:33:eb:66:d3:18:b6:c3:
                    45:14:a5:9e:be:3b:35:aa:34:10:98:57:8f:80:fe:
                    fe:9f:3e:92:c0:8d:e7:bb:e8:5b:3b:fc:a3:6a:38:
                    aa:d3:ab:9d:64:4a:d6:21:a2:57:89:e4:68:68:3a:
                    d0:66:b7:22:34:69:c2:ce:c2:2a:0d:e4:5d:2d:45:
                    62:04:cf:35:1e:25:12:95:fa:a1:96:1e:0b:6a:ca:
                    09:ff:78:90:88:47:52:e2:7b:94:47:df:60:80:3e:
                    37:47:d9:db:94:cf:fd:9e:3f:8f:0b:19:d8:c4:19:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:45:40:55:81:F3:04:AA:BD:13:E2:FA:BC:DE:D7:93:F0:83:E1:8A
            X509v3 Authority Key Identifier:
                keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33352d3335203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be80::/35

    Signature Algorithm: sha256WithRSAEncryption
         5e:c5:3e:b3:ff:c8:a4:46:98:72:ba:b4:82:af:cc:2f:47:9f:
         cb:6e:1e:b9:3b:cb:ee:fd:41:48:38:f7:7f:2a:88:66:b8:d0:
         cb:e8:e3:83:e1:7f:32:26:c8:30:7e:51:3d:7f:94:fd:a2:fb:
         72:1a:e3:ba:f6:b5:44:c6:d4:e2:7c:7a:ed:6e:3f:3b:ea:86:
         91:e4:2a:ff:24:2e:8d:55:5e:19:3f:f7:f3:5d:17:79:72:22:
         2e:cd:a4:ff:9d:7f:ec:3b:29:14:c9:db:68:59:ca:be:b5:f8:
         84:9b:93:c0:7f:10:d2:46:7d:3f:32:b4:59:64:fb:ad:70:e8:
         6b:4d:ba:db:68:06:57:24:67:c9:4f:91:81:40:e4:40:eb:e9:
         f4:b5:82:d4:ab:f4:73:c4:6e:64:78:b2:7c:5a:49:3f:b4:c7:
         56:fc:ab:06:f1:91:52:7c:3d:37:ba:ca:f6:5d:0b:ba:f8:b6:
         10:06:02:bc:38:7f:87:82:1b:71:88:84:86:10:c5:b6:51:bf:
         5c:d4:d7:47:21:90:f6:92:cc:b2:ee:67:09:cb:2f:2f:6f:21:
         01:c8:75:ab:c7:43:3d:5c:7e:8f:b6:0d:10:d0:82:d6:10:37:
         76:06:91:48:50:b2:f4:a4:2a:b3:34:c5:12:5f:d6:34:69:06:
         72:4a:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:11:15 2026 by rpki-client